Audit API

GET /requests/:id/audit/export

Export the immutable audit chain for a request.

Query parameters:

• format (string, optional): "jsonl" | "csv"

Response (202):

{
	"requestId": "req-123",
	"format": "jsonl",
	"events": [],
	"rootHash": "sha256:..."
}

POST /requests/:id/audit/verify

Verify the integrity of an audit chain.

Request body:

• hash (string, required): expected hash for the target event or chain check
• prevHash (string, optional): previous-link hash when verifying chain continuity
• sequence (number, required): expected event sequence number

Response (202):

{
	"mismatches": [
		{
			"actualHash": "sha256:actual",
			"eventId": "evt-123",
			"expectedHash": "sha256:expected"
		}
	],
	"status": "verified",
	"verified": true
}