Verify audit log chain integrity

curl --request GET \
  --url https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify \
  --header 'Authorization: Bearer <token>'

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

{
  "fromSeq": 1,
  "intact": true,
  "truncated": false,
  "verifiedCount": 1024,
  "firstBrokenSeq": 0
}

Verify audit log chain integrity

Re-verifies the calling tenant’s audit hash chain and returns a structured verdict (intact, verified count, and the first broken tenant_seq when a break is found). The check is strictly read-only: it recomputes nothing into storage and never mutates an audit record. Use the optional maxRecords query parameter to bound how many records are inspected. Use the optional fromSeq query parameter to start the check at that tenant_seq. When the first record the check reads is not sequence 1, the check trusts that record’s stored link. It does not verify the records before it. The verdict always echoes the effective fromSeq.

GET

/

v1

/

governance

/

audit-logs

/

verify

Verify audit log chain integrity

curl --request GET \
  --url https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify \
  --header 'Authorization: Bearer <token>'

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://matcher.sandbox.lerian.net/v1/governance/audit-logs/verify"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

{
  "fromSeq": 1,
  "intact": true,
  "truncated": false,
  "verifiedCount": 1024,
  "firstBrokenSeq": 0
}

Authorizations

Authorization

string

header

required

Bearer token authentication (format: "Bearer {token}")

Query Parameters

maxRecords

integer<int64>

Maximum number of records to inspect; clamped to the server bound. Omit to use the default bound.

Required range: 1 <= x <= 10000

fromSeq

integer<int64>

Verification floor: the first record inspected is the one with this tenant_seq. Omit to start at the chain start (seq 1).

Required range: x >= 1

Response

OK

fromSeq

integer<int64>

required

Effective verification floor: the first tenant_seq eligible for inspection.

Example:

1

intact

boolean

required

True when every inspected record links to the previous one and matches its stored hash

Example:

true

truncated

boolean

required

True when the chain has more records than the inspection bound allowed; the verdict then covers only a prefix

Example:

false

verifiedCount

integer<int64>

required

Number of records confirmed intact (full inspected count when intact, otherwise the count before the first break)

Example:

1024

firstBrokenSeq

integer<int64>

tenant_seq of the first record that failed verification; omitted when the chain is intact

Example:

0