---
title: "Tamper-evident audit export (signed, hash-chained)"
method: GET
path: "/audit/export"
---

# Tamper-evident audit export (signed, hash-chained)

`GET /audit/export`

## Request

- Base URL: `https://getsanction.com/api/v1`
- URL: `https://getsanction.com/api/v1/audit/export`
- Auth: API key in header `x-mgmt-key`

AUDIT-1: a signed, hash-chained snapshot of the wallet's governed decisions over a range (defaults to the last 30 days). Each decision commits to a canonical serialization of itself and the previous entry's hash, so altering, dropping, or reordering any decision breaks the chain; the head is HMAC-signed with the platform secret. Verify with POST /audit/verify. Owner-only. `download=1` returns it as a file attachment. This makes the exported evidence tamper-evident — it is not a write-time notary.

## Query parameters

- `wallet_id` string, required
- `from` string, date
- `to` string, date
- `download` '1'
- `scope` 'wallet' | 'subtree'
- `framing` 'eu-ai-act'

## Response `200`

Signed, hash-chained audit export

## Other responses

- `400`: wallet_id missing or invalid range
- `401`: Management key required
- `503`: Signing not configured

---

[API](https://skmtc.dev/getsanction/apis/sanction-agent-governance-api.md) · [All operations](https://skmtc.dev/getsanction/apis/sanction-agent-governance-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getsanction/apis/sanction-agent-governance-api/revisions/c645a9e4b72d?raw)