LElerian
Governance

Verify audit log chain integrity

Re-verifies the calling tenant's tamper-evident audit hash chain and returns a structured verdict (intact, verified count, and the first broken tenant_seq when a break is found). The check is strictly read-only: it recomputes nothing into storage and never mutates an audit record. Use the optional maxRecords query parameter to bound how many records are inspected.

get/v1/governance/audit-logs/verify

Request

Query parameters

maxRecordsinteger

Maximum number of records to inspect; clamped to the server bound. Omit to use the default bound.

Response

OK

firstBrokenSeqinteger

tenant_seq of the first record that failed verification; omitted when the chain is intact

intactboolean required

True when every inspected record links to the previous one and matches its stored hash

truncatedboolean required

True when the chain has more records than the inspection bound allowed; the verdict then covers only a prefix

verifiedCountinteger required

Number of records confirmed intact (full inspected count when intact, otherwise the count before the first break)

Example response

{
  "intact": true,
  "verifiedCount": 1024
}

Changes

No recorded changes to this operation across all 1 revision of this API.