audit

name	audit
description	Verify the receipt hash chain, commit bindings, and (optionally) commit signatures. Use when the user asks to audit sddx receipts or check the integrity of completed work.

/sddx:audit

CLI: "${CLAUDE_PLUGIN_ROOT}/bin/sddx-run" "${CLAUDE_PLUGIN_ROOT}/dist/cli.mjs" (run from the repo root).

Run: ... audit — add --signatures only if the user asks for signature verification (requires the repo to use git commit signing).

Exit 0 → report "N receipt(s) verified, chain intact". Exit 1 → present each finding with its remediation:

• chain: … prev hash matches no receipt / seq gap — a receipt was edited or deleted. Recover the original bytes from git history (git log --all -- .sddx/receipts/<id>.json); the chain is only valid with the exact original files.
• not bound to any commit — the receipt was never committed. Commit it (receipts are part of the task's atomic commit); an uncommitted receipt proves nothing.
• working tree differs from committed state — local tampering. Restore with git restore .sddx/receipts/<id>.json.
• binding commit has no valid signature — only reported under --signatures. Either signing isn't configured (drop the flag) or the commit is genuinely unsigned — escalate to the user; do not re-sign history yourself.

Never "fix" findings by editing or regenerating receipts — they are write-once. Report, restore from git, or escalate.