Rows checked (24h)
21,715
sequence intact
Signatures valid
15,673
0 invalid · 0 unverifiable
Unchained rows
42
arrived outside the chain
Agents seen
3
3,689 tool calls · 103 model calls
intact — the sequence
GET /v1/evidence/verify?period=24h 21,715 rows, hash-chained in order, none altered after they were written. Proves nobody edited history. Does not prove who wrote it.
signature_valid_rows — the author
same response 15,673 rows signed inside the process that acted, each chaining to the tenant's trust root. Proves authorship. The two are independent — a chain can be intact and unsigned, or signed and broken.
Recent rows
GET /v1/evidence?tenant_id=globex-azure&limit=12| Recorded | Event | Process | Service | Decision | Control | Signed |
|---|---|---|---|---|---|---|
| 22:00:29 | tool_call_allowed | …/interview-scorer/main/proc-3735274 | gcp_storage | allow | soc2 CC6.1 | |
| 22:00:24 | tool_call_allowed | …/resume-ranker/main/proc-3735129 | gcp_storage | allow | soc2 CC6.1 | |
| 22:00:15 | tool_call_denied | local-dev | gcp_storage | deny refused: this process has no identity | soc2 CC6.1 | |
| 21:59:18 | tool_call_allowed | …/interview-scorer/main/proc-3733291 | gcp_storage | allow | soc2 CC6.1 | |
| 21:59:13 | tool_call_allowed | …/resume-ranker/main/proc-3733039 | gcp_storage | allow | soc2 CC6.1 | |
| 21:59:05 | tool_call_denied | local-dev | gcp_storage | deny refused: this process has no identity | soc2 CC6.1 | |
| 21:58:07 | tool_call_allowed | …/interview-scorer/main/proc-3732071 | gcp_storage | allow | soc2 CC6.1 | |
| 21:58:01 | tool_call_allowed | …/resume-ranker/main/proc-3732002 | gcp_storage | allow | soc2 CC6.1 | |
| 21:57:57 | tool_call_denied | local-dev | gcp_storage | deny refused: this process has no identity | soc2 CC6.1 | |
| 21:56:57 | tool_call_allowed | …/interview-scorer/main/proc-3731082 | gcp_storage | allow | soc2 CC6.1 | |
| 21:56:54 | tool_call_allowed | …/resume-ranker/main/proc-3730977 | gcp_storage | allow | soc2 CC6.1 | |
| 21:56:46 | tool_call_denied | local-dev | gcp_storage | deny refused: this process has no identity | soc2 CC6.1 |
8 of 12 recent tool calls allowed. The refusal is the unregistered process asking for the same credential: it has no identity to sign with, so the row cannot be attributed — and that absence is the finding.