Access Certification

List audit report metadata

Returns audit report metadata and time-limited download URLs for compliance exports. Available formats: PDF (human-readable report), CSV (spreadsheet), and JSON (machine-readable).

Each export includes a SHA-256 integrity hash (documentHash) for tamper detection.

Report lifecycle

  • generating — Report is being created after campaign close. Poll this endpoint until ready.
  • exports_ready — CSV and JSON are available; PDF may still be generating.
  • finalizing — Sign-off recorded; PDF is being regenerated with attestation metadata.
  • materialized — All artifacts including the signed PDF are ready.

Audit reports are available for closed campaign runs.

Required permission: accesscertification or accesscertification.readonly

get/access-certification/campaign-runs/{runId}/audit-report

Request

Path parameters

runIdstring required

Campaign run public identifier (hex-encoded BSON ObjectID stored as object_id).

Response

Audit report metadata retrieved

campaignIdstring required
campaignRunIdstring required
status'generating' | 'exports_ready' | 'finalizing' | 'materialized' required

Audit artifact lifecycle

documentHashstring

SHA-256 hash of canonical content blob (present when exports_ready+)

hashAlgorithm'SHA-256'
generatedAtstring date-time

Campaign closure timestamp when auto-generation completed

certifiedAtstring date-time

UTC timestamp when sign-off was confirmed

reportContentobject

Optional inline Sections 2–5 JSON for in-browser render before PDF materialized

Changes

No recorded changes to this operation across all 1 revision of this API.