Access Certification

Sign off audit report

Records an optional compliance attestation on a closed campaign's audit report. After sign-off, the report includes who certified it (certifiedBy) and when (certifiedAt), and the document hash is recomputed to include attestation metadata.

The PDF is regenerated asynchronously after sign-off. Poll GET .../audit-report until status is materialized.

This operation is idempotent — calling it again after a successful sign-off returns the existing attestation without creating a duplicate.

Required permission: accesscertification (Full Access)

post/access-certification/campaign-runs/{runId}/audit-report/sign-off

Request

Path parameters

runIdstring required

Campaign run public identifier (hex-encoded BSON ObjectID stored as object_id).

Request body

confirmedboolean

Client attests sign-off modal was accepted

Response

Already signed off (idempotent)

campaignIdstring required
campaignRunIdstring required
status'finalizing' | 'materialized' required
documentHashstring

Authoritative SHA-256 hash including sign-off metadata

certifiedAtstring date-time
idempotentboolean

True when sign-off was already recorded by a prior certifier

Changes

No recorded changes to this operation across all 1 revision of this API.