docs

Verify the audit trail hash chain

GET /audit-trail/verify

Scope audit_log:verify Plan Growth+

Requires the audit_log:verify scope. Needs the audit_trail plan feature.

Example

curl "https://api.autociso.io/api/v1/audit-trail/verify" \
  -H "Authorization: Bearer <your-api-token>"

Response 200

{
  "data": {
    "acceptedBreakCount": 1,
    "acceptedBreaks": [
      {
        "acceptanceSeq": 7420,
        "approvedAt": "2026-09-02T12:00:00Z",
        "breakClass": "concurrent_append",
        "exceptionId": "6702a1f01f4e2b0012ab1203",
        "seqNum": 7311
      }
    ],
    "breakCount": 0,
    "breaks": [],
    "breaksTruncated": false,
    "brokenAt": null,
    "chainedEntries": 10140,
    "effectiveBoundarySeq": 7420,
    "exceptionBoundarySeq": 7420,
    "firstChainedSeq": 1,
    "legacyEntries": 341,
    "pendingEntries": 2,
    "protocolV2Seq": 6200,
    "scanComplete": true,
    "seqGapCount": 0,
    "seqGaps": [],
    "totalEntries": 10483,
    "valid": true,
    "verifiedAt": "2026-10-13T07:30:00Z"
  },
  "error": null
}

Returns

The data field of the standard { data, error, meta } envelope:

  • acceptedBreakCount integer required
    Breaks excused by an approved exception.
  • acceptedBreaks array of object required
    Accepted breaks, at most 200.
    • acceptanceSeq integer required
      Sequence number of the acceptance entry in the chain.
    • approvedAt string required
      When the exception was approved (RFC 3339).
    • breakClass string
      manual or concurrent_append.
    • exceptionId string required
      Id of the approved exception.
    • seqNum integer required
      Sequence number of the excused entry.
    • No other fields.
  • breakCount integer required
    Total chain breaks found.
  • breaks array of object required
    Chain breaks, at most 200.
    • detail string required
      Fixed description of the break kind at this sequence number; never contains hashes.
    • kind string required
      prev_link_mismatch, hash_mismatch, duplicate_seq, corrupt, seq_gap, gap_unaccounted, exception_unused, exception_invalid, exception_missing or exception_superseded.
    • seqNum integer required
      Sequence number of the entry.
    • No other fields.
  • breaksTruncated boolean required
    True when breaks lists only the first 200.
  • brokenAt integer or null
    Sequence number of the first break, when there is one.
  • chainedEntries integer required
    Chained entries scanned.
  • effectiveBoundarySeq integer or null
    Sequence number from which strict verification applies.
  • exceptionBoundarySeq integer or null
    Highest sequence number covered by exception markers.
  • firstChainedSeq integer or null
    Sequence number of the first scanned chained entry.
  • legacyEntries integer required
    Entries that predate the hash chain.
  • pendingEntries integer required
    Entries recorded but not yet chained.
  • protocolV2Seq integer or null
    Sequence number where the current chain protocol starts.
  • scanComplete boolean required
    False when the scan ran out of time budget; valid is then false and the counts are partial.
  • seqGapCount integer required
    Jumps in the sequence numbering.
  • seqGaps array of object required
    Sequence jumps, at most 200.
    • after integer required
      Last sequence number before the jump.
    • next integer required
      First sequence number after the jump.
    • No other fields.
  • totalEntries integer required
    Entries in the audit trail.
  • valid boolean required
    True when the scan completed and found no unaccepted break.
  • verifiedAt string (date-time) required
    When the scan finished (UTC). Results are cached for 60 seconds per organization.
  • No other fields.

Errors

Status Code Retry Meaning
400 - no The request is invalid.
401 - no The token is missing, malformed, expired or revoked.
402 - no The organisation’s plan does not include the feature this route needs.
403 - no The token may not use this route.
429 - yes Rate limit or row budget exceeded; retry after the time in Retry-After.
500 - no Unexpected server error.
503 - yes A dependency is temporarily unavailable; retry later.
Last reviewed: 2026-10-13

Was this page helpful?

Esc