Sentinel is a filesystem-backed document DBMS built in Rust that prioritizes compliance, transparency, and auditability over raw performance. Unlike traditional databases, every document is a plain JSON file, making your data immediately forensic-friendly and Git-versionable. Perfect for regulated industries requiring GDPR, SOC 2, HIPAA, or PCI-DSS compliance.
Sentinel provides async operations with automatic BLAKE3 hashing and optional Ed25519 signatures for cryptographic integrity. Data encryption supports AES-256-GCM, XChaCha20-Poly1305, and Ascon-128. Each document includes full audit metadata—creation timestamps, version history, hashes, and signatures—viewable with standard UNIX tools.
Designed for edge deployments, compliance systems, audit logs, certificate management, and regulatory reporting. No server required, works entirely on filesystem with Git-based replication. Zero vendor lock-in—migrate anytime using standard tools like rsync, tar, or git.
Features
- Native Git Integration: Every document is a versionable file, enabling full audit trails through Git history
- Cryptographic Integrity: Automatic BLAKE3 hashing with optional Ed25519 signatures on every document
- Triple Encryption Options: AES-256-GCM, XChaCha20-Poly1305, and Ascon-128 for quantum-resistant security
- Human-Readable Storage: All data stored as pretty-printed JSON, inspectable with cat, editable with any text editor
- Zero Server Architecture: Runs entirely on filesystem, perfect for edge devices and offline environments
- Built-in Compliance: GDPR right-to-delete is literally rm file, SOC 2/HIPAA audit trails included by design
- UNIX Tool Compatible: Use rsync for replication, tar for backups, grep for queries, no proprietary tools needed
- Async Rust API: Clean, idiomatic async/await interface built on Tokio for performance
- Primary-Secondary Replication: Git-based sync for high-availability deployments without complex coordination
- Filesystem-Level ACLs: Leverage OS-native security for granular access control