Tamper-evident audit export (signed, hash-chained)

AUDIT-1: a signed, hash-chained snapshot of the wallet's governed decisions over a range (defaults to the last 30 days). Each decision commits to a canonical serialization of itself and the previous entry's hash, so altering, dropping, or reordering any decision breaks the chain; the head is HMAC-signed with the platform secret. Verify with POST /audit/verify. Owner-only. download=1 returns it as a file attachment. This makes the exported evidence tamper-evident — it is not a write-time notary.

get/audit/export

Request

  • Base URL: https://getsanction.com/api/v1
  • URL: https://getsanction.com/api/v1/audit/export
  • Auth: API key in header x-mgmt-key

Query parameters

wallet_idstring required
fromstring date
tostring date
download'1'

Return as a file attachment

scope'wallet' | 'subtree'

subtree chains every decision across this wallet + all pools beneath it into one signed export (management key only)

framing'eu-ai-act'

Attach an ai_act block mapping the signed export onto EU AI Act Art 12/13/14 + retention. Evidence support, not a compliance certification. Rides alongside the signed chain (verify unaffected).

Response

Signed, hash-chained audit export

Changes

No recorded changes to this operation across all 1 revision of this API.