Evidence

A run's signed manifest

The run's receipt: every capture hash, claim value and locator, validation and compliance state, signed with SourceFinch's evidence key and anchored with an RFC 3161 timestamp. Verify offline with the evidence bundle verifier.

get/v1/runs/{run_id}/manifest

Request

  • Base URL: https://sourcefinch.com
  • URL: https://sourcefinch.com/v1/runs/{run_id}/manifest
  • Auth: HTTP bearer

Path parameters

run_idstring uuid required

Headers

X-Request-Idstring

Echoed in the response and logs; generated when absent.

SourceFinch-Projectstring uuid

Project UUID. Required for session tokens; API keys are bound to their project.

Response

Manifest, signature and anchor

manifestobject required

The sourcefinch/manifest@1 document

manifest_sha256string required

SHA-256 of the RFC 8785 canonical manifest: the run's receipt

signaturestring nullable required

Base64 Ed25519 signature over the canonical manifest bytes

key_idstring nullable required

RFC 7638 thumbprint of the key at /.well-known/sourcefinch-evidence-keys.json

created_atstring required

ISO-8601 timestamp (UTC)

Changes

No recorded changes to this operation across all 2 revisions of this API.