Residual Risk Ledger
A tamper-evident risk log that records each observation with a content hash — for audit trails, not for real-time risk management.
The problem
/ 01When you need an auditable record of risk observations with their decisions and notes, you need a ledger that records each entry, returns a content hash, and reports status — while being honest that this is a demo-grade ledger, not a full risk platform.
What it does
/ 03Records a risk observation by source, decision, and riskNote (required), with optional riskId/severity/status.
Returns the full entry object with id, riskHash, recordedAt, and auditEntryId.
Lists all risk entries newest-first with content hashes and timestamps.
Who it’s for
/ 03- Risk analysts logging observations
- Compliance auditors reviewing risk trails
- Security engineers verifying decision consistency
In context
/ 01Complements Decision Audit (runtime decisions), Audit Bridge (audit ingestion), and the Consent Receipt Registry (content-hash integrity pattern).