clauditor

What it does

Clauditor is a tamper-resistant audit watchdog for Clawdbot agents on Linux. It monitors filesystem activity and records events in HMAC-chained logs. Even a compromised agent cannot stop the watchdog, forge entries, or delete evidence.

Why it's useful

Running under a separate system user, the watchdog process cannot be killed or manipulated by the agent it monitors, making audit records reliable even after a compromise.