Sign in
Edge

Ingest install-time binary-verify outcomes

Changed on

Persists structured binary-verify outcomes emitted by tools/scripts/install.{sh,ps1} (the pre-activation integrity gate documented in docs/security/binary-signing.md §8). Operators capture install-script stderr (one JSON line per binary verified), batch it into the events array, and POST here. Each event is validated against model.BinaryVerifyEvent and persisted through the existing audit chain as a SIEMEvent with EventType = binary-verify-ok | binary-verify-fail.

Partial-success semantics: per-event validation failures are reported in the response errors[] and counted in rejected; accepted events are persisted. A request with zero accepted events returns 400.

Auth: requires audit.export permission or admin role, plus tenant access enforced via X-Tenant-ID.

post/api/v1/edge/binary-integrity/events

Request

  • Base URL: http://localhost:8081
  • URL: http://localhost:8081/api/v1/edge/binary-integrity/events
  • Auth: one of:
    • API key in header X-API-Key
    • HTTP bearer

Headers

X-Tenant-IDstring required

Tenant isolation header (required on all protected routes).

Request body

endpointstring

Optional operator-supplied label identifying the host that ran the install script. Captured into every persisted event.

Response

At least one event was accepted and persisted

acceptedinteger required

Number of events persisted to the audit chain.

rejectedinteger required

Number of events rejected by per-event validation.

Changes