Audit Trail Generator from Git Commits to Deployment

WHAT IT DOES

Audit Trail Generator from Git Commits to Deployment is a developer-focused tool that generates comprehensive audit trails linking git commit history to smart contract deployment events. It takes git commit logs, deployment information (contract address, transaction hash, block number, chain), and optional context from the user, then creates a structured audit trail showing the progression from code changes to final deployment. The tool parses git commits to extract commit hashes and messages, combines them with deployment metadata, and presents a timeline view showing the sequence of commits leading to the deployment. The output includes a summary with contract name, address, transaction details, block number, chain, and deployment date, followed by the full commit history and a visual timeline. This enables developers and auditors to trace the provenance of deployed contracts back to specific code changes.

HOW TO USE

Paste your git commit log into the "Git commit log" text area. Use `git log --oneline` for simple format, or paste the full log. Enter deployment information in the "Deployment information" text area with key:value pairs (e.g., "Contract: MyToken", "Address: 0x123...", "Transaction: 0x456...", "Block: 12345678", "Chain: Ethereum", "Date: 2024-01-15"). Optionally add context in the "Additional context" text area. Click "Generate audit trail" to create the report. The tool will display a summary, the commit timeline, and a JSON export of the full audit trail.

TECHNICAL NOTE: COMMIT PARSING AND TIMELINE CONSTRUCTION

The tool parses git commit logs by splitting lines and identifying commit hashes using regex matching. It supports both git log --oneline format (hash + message) and full git log output. The tool then parses deployment information from key:value pairs, extracting contract name, address, transaction hash, block number, chain, and deployment date. A timeline is constructed by listing all commits in order followed by the deployment event as the final step. The tool also parses optional context data to include additional information in the audit trail. The output is presented as a human-readable report and a structured JSON object for further analysis.

WHAT IT CANNOT SEE

The tool cannot automatically fetch git history without user input; the user must provide the git log. It is limited to the accuracy of the provided commit and deployment data; incorrect data will produce incorrect audit trails. It cannot verify that commits match the deployed bytecode; the tool does not perform bytecode comparison. It is limited by the parser's ability to handle various git log formats; non-standard formats may not parse correctly. It cannot generate audit trails for non-EVM chains.

PLEASE NOTE

This tool is designed for Solidity contracts on EVM-compatible chains. It does not support other smart contract languages. The audit trail is based on user-provided data and should be verified against actual on-chain data. The tool is read-only and does not modify any state. The tool provides no warranty that the audit trail is complete or accurate; users are responsible for verifying all data and using additional verification tools.