Verify audit log chain integrity

Re-verifies the calling tenant’s audit hash chain and returns a structured verdict (intact, verified count, and the first broken tenant_seq when a break is found). The check is strictly read-only: it recomputes nothing into storage and never mutates an audit record. Use the optional maxRecords query parameter to bound how many records are inspected. Use the optional fromSeq query parameter to start the check at that tenant_seq. When the first record the check reads is not sequence 1, the check trusts that record’s stored link. It does not verify the records before it. The verdict always echoes the effective fromSeq.

GET /v1/governance/audit-logs/verify

Verify audit log chain integrity

cURL

curl --request GET \
  --url https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify \
  --header 'Authorization: Bearer <token>'

200

Example

{
  "fromSeq": 1,
  "intact": true,
  "truncated": false,
  "verifiedCount": 1024,
  "firstBrokenSeq": 0
}

Autorizaciones

Authorization · string · header · requerido

Bearer token authentication (format: "Bearer {token}")

Parámetros de consulta

maxRecords · integer<int64>

Maximum number of records to inspect; clamped to the server bound. Omit to use the default bound.

Rango requerido: 1 <= x <= 10000

fromSeq · integer<int64>

Verification floor: the first record inspected is the one with this tenant_seq. Omit to start at the chain start (seq 1).

Rango requerido: x >= 1

Respuesta

200

application/json

OK

fromSeq · integer<int64> · requerido

Effective verification floor: the first tenant_seq eligible for inspection.

Ejemplo:

1

intact · boolean · requerido

True when every inspected record links to the previous one and matches its stored hash

Ejemplo:

true

truncated · boolean · requerido

True when the chain has more records than the inspection bound allowed; the verdict then covers only a prefix

Ejemplo:

false

verifiedCount · integer<int64> · requerido

Number of records confirmed intact (full inspected count when intact, otherwise the count before the first break)

Ejemplo:

1024

firstBrokenSeq · integer<int64>

tenant_seq of the first record that failed verification; omitted when the chain is intact

Ejemplo:

0