Sign in
AuditExport

Verify audit chain integrity

Changed on

Walks the tenant's audit stream and attests integrity of the hash chain. Reports status=ok on a contiguous chain, status=partial when gaps are below the retention boundary, and status=compromised for missing sequence numbers or a broken hash link. Admin-only and entitlement-gated; NEVER returns raw event bodies — this is an integrity report surface, not event retrieval.

get/api/v1/audit/verify

Request

  • Base URL: http://localhost:8081
  • URL: http://localhost:8081/api/v1/audit/verify
  • Auth: one of:
    • API key in header X-API-Key
    • HTTP bearer

Query parameters

tenantstring

Tenant id to verify; must match caller scope and defaults to the authenticated/request tenant.

sinceinteger

Inclusive lower bound on event time (unix ms)

untilinteger

Inclusive upper bound on event time (unix ms)

limitinteger

Max events to read (default 10000, max 100000)

Headers

X-Tenant-IDstring required

Tenant isolation header (required on all protected routes).

Response

Chain integrity report

status'ok' | 'compromised' | 'partial' required
total_eventsinteger required

Number of events walked in the requested range.

verified_eventsinteger required

Number of events whose hash and linkage verified.

retention_boundary_seqinteger required

Lowest sequence number still present in the retained stream.

retention_window_hoursnumber double

Configured audit retention window in hours.

first_seqinteger

First sequence number observed in the verified range.

last_seqinteger

Last sequence number observed in the verified range.

Changes

  • 12120aad0bfeRevision changes
    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

  • a0274c72bed6Revision changes
    • warning

      for the query request parameter limit, the max was set to 100000.00

    • warning

      for the query request parameter limit, the min was set to 1.00

    • warning

      for the query request parameter since, the min was set to 0.00

    • warning

      for the query request parameter until, the min was set to 0.00

    • info

      for the query request parameter limit, the format was generalized from int32 to int64

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the optional property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status