
Security News
How AI Agents Expand the Software Supply Chain Attack Surface
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.
@peac/audit
Advanced tools
Audit logging, case bundle generation, and commerce evidence bundling for PEAC protocol disputes and observability.
pnpm add @peac/audit
@peac/audit provides structured audit logging in JSONL format, case bundle generation for dispute resolution, and commerce evidence bundling for multi-protocol payment observations. It includes trace correlation via W3C Trace Context, dispute bundle creation with cryptographic integrity verification, and privacy-safe logging patterns.
import { createAuditEntry, formatJsonl } from '@peac/audit';
const entry = createAuditEntry({
event_type: 'receipt_issued',
actor: { type: 'system', id: 'peac-issuer' },
resource: { type: 'receipt', id: 'jti:rec_abc123' },
outcome: { success: true, result: 'issued' },
});
const jsonl = formatJsonl([entry]);
import { createDisputeBundle, verifyBundle } from '@peac/audit';
const bundle = await createDisputeBundle({
kind: 'dispute',
receipts: [{ jws: compactJws, ref: receiptRef }],
jwks: { keys: [publicJwk] },
});
const report = await verifyBundle({ bundle });
console.log(report.summary);
import { correlateByTrace, filterByTimeRange } from '@peac/audit';
const recent = filterByTimeRange(entries, {
start: '2026-03-01T00:00:00Z',
end: '2026-03-29T00:00:00Z',
});
const traces = correlateByTrace(recent);
for (const t of traces) {
console.log(`Trace ${t.trace_id}: ${t.entries.length} events`);
}
@peac/kernel (Layer 0): Error codes and type definitions@peac/schema (Layer 1): Receipt validation schemas@peac/crypto (Layer 2): Signature verification for dispute bundles@peac/protocol (Layer 3): Receipt issuance and verificationIf you are building an AI agent or MCP server that needs evidence receipts:
@peac/mcp-server for a ready-to-use MCP tool server@peac/protocol for programmatic receipt issuance and verificationApache-2.0
PEAC Protocol is an open source project stewarded by Originary and community contributors.
FAQs
Audit logging and case bundle generation for PEAC protocol disputes
The npm package @peac/audit receives a total of 270 weekly downloads. As such, @peac/audit popularity was classified as not popular.
We found that @peac/audit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.