Download the PHP package laravelsecurityaudit/laravel-ai-ledger without Composer

On this page you can find all versions of the php package laravelsecurityaudit/laravel-ai-ledger. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.

FAQ

After the download, you have to make one include require_once('vendor/autoload.php');. After that you have to import the classes with use statements.

Example:
If you use only one package a project is not needed. But if you use more then one package, without a project it is not possible to import the classes with use statements.

In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
Some PHP packages are not free to download and because of that hosted in private repositories. In this case some credentials are needed to access such packages. Please use the auth.json textarea to insert credentials, if a package is coming from a private repository. You can look here for more information.

  • Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
  • To use Composer is sometimes complicated. Especially for beginners.
  • Composer needs much resources. Sometimes they are not available on a simple webspace.
  • If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
  • Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Please rate this library. Is it a good library?

Example code of laravelsecurityaudit/laravel-ai-ledger

Informations about the package laravel-ai-ledger

Laravel AI Ledger

A processing ledger for AI traffic. It turns the requests Egress Guard observes into the AI-subprocessor portion of a GDPR Article 30 record of processing, so you can answer, with evidence, which personal data goes to which AI provider, processed where, under what contract, and for how long.

It records categories and hashes only, never the data itself. A record says "an email address and a payment card were sent to OpenAI (EU region), the card redacted before send, under SCCs, 30-day retention". It never stores the email or the card.

This is the free collector. The independent witness (tamper-evidence an auditor accepts) and the always-current subprocessor dataset are the hosted Ledger Cloud (paid).

This is an independent open-source package. It is not affiliated with, endorsed by, or sponsored by Laravel, Laravel LLC, or any AI provider. It documents and evidences processing; it does not make your app compliant. Have a DPO or privacy counsel own the legal content and review the output. This is not legal advice.

Requirements

Installation

It subscribes to Egress Guard automatically. Every captured AI request becomes a category-only processing record.

What it records

For each AI call: the subprocessor and its company, the processing region, sub-subprocessors, the purpose (configured per route), the categories of personal data detected, a pseudonymous data-subject reference, the legal basis, whether it is a third-country transfer and the safeguard, which categories were redacted before send, the provider retention, and a local hash chain. The provider facts come from the SubprocessorRegistry; the categories come from Egress Guard's findings.

Export

ropa is the Article 30 record grouped by subprocessor; register is the subprocessor register from the dataset.

Configuration

Set your controller_ref, the default legal_basis, per-source purposes, the processing regions you actually use, the residency allowed_regions, the categories map, and the subprocessors dataset. Verify the dataset against each provider's current terms, or let Ledger Cloud maintain it.

Residency

Set residency.allowed_regions (for example ['EU']). A request to a provider whose region is not allowed is recorded with residency_ok = false. To also block it at runtime, enable Egress Guard's residency enforcement (egress-guard.residency), which blocks out-of-region calls at the wire.

The paid layer

Set AI_LEDGER_CLOUD_ENDPOINT and AI_LEDGER_CLOUD_TOKEN to enable the hosted witness: each record's hash is counter-signed by a party your app does not control, which is what makes the chain credible to an auditor. Without a token the cloud client is a no-op and everything runs locally.

Testing

The Laravel Security Audit family

One detection engine, guarding every place data leaves your app.

Package What it guards
laravel-secret-scanner Shared secret and PII detection engine (the core)
laravel-mail-guard Outgoing Laravel mail
laravel-ai-egress-guard Outbound AI provider traffic (OpenAI, Anthropic, Gemini)
laravel-ai-lint Static analysis: leaked AI keys and unsafe AI wiring
laravel-ai-circuit-breaker Runaway AI loops and spend
laravel-ai-ledger (this package) GDPR Article 30 processing ledger for AI traffic

License

The MIT License (MIT). See LICENSE.

All versions of laravel-ai-ledger with dependencies

PHP Build Version
Package Version
Requires php Version ^8.2
laravelsecurityaudit/laravel-ai-egress-guard Version ^0.1
illuminate/console Version ^12.0 || ^13.0
illuminate/contracts Version ^12.0 || ^13.0
illuminate/database Version ^12.0 || ^13.0
illuminate/support Version ^12.0 || ^13.0
Composer command for our command line client (download client) This client runs in each environment. You don't need a specific PHP version etc. The first 20 API calls are free. Standard composer command

The package laravelsecurityaudit/laravel-ai-ledger contains the following files

Loading the files please wait ...