doae-audit

Run a local audit for production AI usage.

Run one audit

npx --yes doae-audit audit --import /path/to/export --yes

--import matches one local export. Braintrust Project Logs, Langfuse, OpenTelemetry, and other compiled export shapes are admitted when the files match. Set that directory to mode 0700 and its files to mode 0600 first.

To bind a named source:

doae-audit audit --source langfuse-export=/path/to/export --yes

To list candidate locations on this machine:

doae-audit audit find

doae-audit audit --help lists every option.

What the audit writes

The source stays unchanged on your machine. The audit reads it once and creates its report locally. The report is one file, doae-audit.html, in the directory you run the command from.

The audit also keeps its own working files in your home directory, under ~/.doae/audit-workspace/:

• one local key. The audit uses it only to authenticate its own working files.
• one small record for each audit. The record holds counts and digests. It holds no trace content and no path from your export.

The audit removes its own copies of your data when it finishes. To remove everything it keeps in your home directory:

rm -rf ~/.doae