Tamper evidence is an architecture property, not a log setting. Off-box forwarding, append-only storage under separate credentials, hash chains and a verification job that actually runs.
an account raises the per-topic limit · no card
← DevSecOps & Supply Chain Security / 20
mediumNewJPMorgan ChaseGoldman SachsStripe
Your admins can delete the audit logs covering their own actions. How do you make the trail tamper-evident?
Tamper evidence is an architecture property, not a log setting. Off-box forwarding, append-only storage under separate credentials, hash chains and a verification job that actually runs.
Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.
UP NEXT ON YOUR JOURNEY
Next in this trackFile shares are encrypting themselves and miners are burning CPU on the cluster. Take charge of the incident.Next in this trackAttackers are spamming push approvals at 2am and someone will eventually tap accept. What is your plan?Next in this trackDesign the break-glass accounts we will need when SSO is down. What does good look like?
DISCUSSION · 0
Nothing here yet. Say how you would answer it.