sqlite-audit demo

This demo shows how a SQLite database behind a forex trading app can be audited read-only, ranked by severity, and reported without sharing a single row of data.

This is a prototype with sample data: the findings come from a synthetic database seeded with deliberate defects.

Audit of forex_sample.db

Findings by severity

What was checked

  • Integrity check, foreign key check and the foreign_keys setting
  • Tables without a primary key; foreign keys without an index
  • REAL/FLOAT columns that look like money or prices
  • Nullable columns that look required; missing UNIQUE / CHECK
  • Duplicate or redundant indexes; journal mode
  • Orphan rows and duplicate keys, including relationships inferred from name_id columns

Privacy guarantees

  • The database is opened with mode=ro; a test proves the file is byte-identical afterwards.
  • The report holds only counts, table and column names, and severities. No row values.
  • Names can be hashed before sharing - try the switch on the Findings tab.
  • It runs on your machine and needs no network.

Prototype built for this brief with sample data. It shows the approach; the full build follows the agreed scope.