---
title: "Attach Open WebUI file references as auditable CET EvidenceRefs"
method: POST
path: "/api/workbench/cases/:caseId/evidence"
tags: ["Workbench"]
---

# Attach Open WebUI file references as auditable CET EvidenceRefs

`POST /api/workbench/cases/:caseId/evidence`

## Request

- Base URL: `https://api.cernion.de`
- URL: `https://api.cernion.de/api/workbench/cases/:caseId/evidence`
- Auth: none declared

CET-governed Workbench/Tenant-Gateway API for Open WebUI clients. Tokens stay server-side; CET remains case-state and governance authority.

## Path parameters

- `caseId` string, required

## Query parameters

- `token` string

## Request body

- object
  - `evidenceType` string: Allowed evidence type
  - `sourceType` string: Allowed source type
  - `label` string: UI-safe evidence label
  - `description` string: UI-safe evidence description
  - `sensitivityLevel` string: Sensitivity level
  - `sourceRef` object: Allowlisted source reference metadata
  - `extracts` object: Optional typed extracts
  - `fileHash` string: Caller supplied content hash, if available
  - `forceNewVersion` boolean: Create a new evidence version even when source fingerprint matches
  - `correlationId` string: Correlation id
  - `token` string: Optional Cernion MCP token for this request. Overrides CERNION_TOKEN when provided.

## Response `200`

Workbench response

- object
  - `evidenceRef` object
    - `evidenceId` string: Evidence reference id
    - `caseId` string: CET case id
    - `tenantId` string: Tenant id
    - `actorId` string: Actor id that attached the evidence
    - `evidenceType` string: Allowed evidence type
    - `sourceType` string: Allowed source type
    - `label` string: UI-safe evidence label
    - `description` string: UI-safe evidence description
    - `sensitivityLevel` string: Sensitivity level
    - `safeSummary` string: UI-safe summary; never raw document content
    - `sourceFingerprint` string: Fingerprint over normalized source metadata
    - `hashStatus` string: available when a real file/content hash was supplied, unavailable otherwise
    - `fileHash` string: Caller supplied content hash, if available
    - `provenance` object
      - `system` string: Evidence origin system
      - `retrievalMode` string: reference/upload/manual
      - `retrievedAt` string: ISO timestamp
      - `retrievedBy` string: Actor or system attaching the reference
    - `sourceRef` object: Allowlisted, sanitized source metadata
    - `extracts` object: Optional allowlisted typed extracts
    - `duplicateOf` string: Existing evidence id when idempotent duplicate was detected
    - `redacted` boolean: True when sensitivity prevents details from being shown
    - `createdAt` string: ISO timestamp
  - `duplicate` boolean: Whether this was an idempotent duplicate
  - `duplicateOf` string: Existing evidence id
  - `readinessReviewRequired` boolean: Whether a case readiness review is required
  - `generatedEvents` object[]
    - `eventType` string: Event type
    - `severity` string: Severity

## Other responses

- `403`: Tenant, actor, role or sensitivity denied
- `404`: Workbench resource not found
- `409`: Stale or conflicting mapping
- `422`: Invalid workbench request

---

[API](https://skmtc.dev/cernion/apis/cernion-energy-tools-api.md) · [All operations](https://skmtc.dev/cernion/apis/cernion-energy-tools-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cernion/apis/cernion-energy-tools-api/revisions/cdb94473b538?raw)