README

A read-only Filament panel plugin for laravel-chronicle/core: browse your tamper-evident audit ledger and cryptographically verify it - across the whole chain, a single entry, or a selected segment - without ever being able to rewrite history. It is the only Filament audit plugin with cryptographic verification at chain, entry, and segment granularity.

The panel cannot create, edit, or delete entries: every mutation ability is denied at the resource and the Gate, there are no create/edit/delete routes, and Chronicle's Entry model is immutable at the data layer. The UI is defence in depth on top of that.

Screenshots

Requirements

Installation

composer require laravel-chronicle/filament
php artisan vendor:publish --tag=chronicle-filament-migrations # publish migrations
php artisan migrate   # run migrations

Optionally publish the config:

php artisan vendor:publish --tag=chronicle-filament-config

Panel registration

Register the plugin on your Filament panel provider:

use Chronicle\Filament\ChronicleFilamentPlugin;
use Filament\Panel;

public function panel(Panel $panel): Panel
{
    return $panel
        ->plugin(
            ChronicleFilamentPlugin::make()
                ->navigationGroup('Audit')
                ->navigationSort(99)
                ->slug('chronicle')
                ->verification(true)
                // Gate the verify actions independently of read access:
                ->authorize(fn (): bool => auth()->user()?->can('verify-chronicle') ?? false)
                // Optional: override actor/subject display labels (falls back to core's resolver):
                ->labelResolver(fn (string $type, string $id): ?string => null),
        );
}

Read (view) access is governed by your panel's normal authorization; the ->authorize() closure gates only the chain/entry/segment verify actions.

Configuration reference

config/chronicle-filament.php:

The fluent plugin methods (navigationGroup, navigationSort, slug, cluster, verification, authorize, labelResolver) override the matching config values per panel.

Verification

Verification is always deliberate - nothing verifies on a read or render path. From the panel you can:

• Verify chain (header action) - the full ledger from genesis.
• Verify entry (row action) - a single entry.
• Verify segment (bulk action) - the selected span, anchored on the enclosing signed checkpoints via core's verifyEntryRange (never on a selected row's stored hash).

Results are written to a plugin-owned, DB-backed store and surfaced as status badges (Verified / Failed / Unverified / Stale) and a health widget. Verifies covering more than verification.queue_threshold entries run on the queue and notify you on completion.

Theming

The panel uses Filament's native CSS variables and utility classes only - no npm, no asset compilation, and no required custom theme. It adopts your panel's primary color and dark-mode settings automatically.

License

The MIT License (MIT). See LICENSE.