Verify audit log chain integrity

curl --request GET \
  --url https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify \
  --header 'Authorization: Bearer <token>'

{
  "intact": true,
  "truncated": true,
  "verifiedCount": 123,
  "firstBrokenSeq": 123
}

GET

governance

audit-logs

verify

Verify audit log chain integrity

curl --request GET \
  --url https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify \
  --header 'Authorization: Bearer <token>'

{
  "intact": true,
  "truncated": true,
  "verifiedCount": 123,
  "firstBrokenSeq": 123
}

Authorization

string

header

required

Bearer token authentication (format: "Bearer {token}")

maxRecords

integer<int64>

Maximum number of records to inspect; clamped to the server bound. Omit to use the default bound.

Required range: 1 <= x <= 10000

intact

boolean

required

True when every inspected record links to the previous one and matches its stored hash

Example:

true

truncated

boolean

required

True when the chain has more records than the inspection bound allowed; the verdict then covers only a prefix

Example:

false

verifiedCount

integer<int64>

required

Number of records confirmed intact (full inspected count when intact, otherwise the count before the first break)

Example:

1024

firstBrokenSeq

integer<int64>

tenant_seq of the first record that failed verification; omitted when the chain is intact

Example:

0

⌘I