intact — the sequence

GET /v1/evidence/verify?period=24h

17,547 rows, hash-chained in order, none altered after they were written. Proves nobody edited history. Does not prove who wrote it.

signature_valid_rows — the author

same response

12,830 rows signed inside the process that acted, each chaining to the tenant's trust root. Proves authorship. The two are independent — a chain can be intact and unsigned, or signed and broken.

Recent rows

GET /v1/evidence?tenant_id=globex-azure&limit=12

Recorded	Event	Process	Service	Decision	Control
20:10:17	tool_call_allowed	…/resume-ranker/main/proc-1969436	gcp_storage	allow	soc2 CC6.1
20:10:09	tool_call_denied	local-dev	gcp_storage	deny refused: this process has no identity	soc2 CC6.1
20:09:10	llm_call	…/interview-scorer/main/proc-1967413	hexr-sdk	—	soc2 CC7.2
20:09:09	tool_call_allowed	…/interview-scorer/main/proc-1967413	gcp_storage	allow	soc2 CC6.1
20:09:00	tool_call_allowed	…/resume-ranker/main/proc-1967344	gcp_storage	allow	soc2 CC6.1
20:08:58	tool_call_denied	local-dev	gcp_storage	deny refused: this process has no identity	soc2 CC6.1
20:08:01	llm_call	…/interview-scorer/main/proc-1966414	hexr-sdk	—	soc2 CC7.2
20:07:59	tool_call_allowed	…/interview-scorer/main/proc-1966414	gcp_storage	allow	soc2 CC6.1
20:07:54	tool_call_allowed	…/resume-ranker/main/proc-1966304	gcp_storage	allow	soc2 CC6.1
20:07:46	tool_call_denied	local-dev	gcp_storage	deny refused: this process has no identity	soc2 CC6.1
20:06:49	llm_call	…/interview-scorer/main/proc-1965302	hexr-sdk	—	soc2 CC7.2
20:06:47	tool_call_allowed	…/interview-scorer/main/proc-1965302	gcp_storage	allow	soc2 CC6.1

6 of 12 recent tool calls allowed. The refusal is the unregistered process asking for the same credential: it has no identity to sign with, so the row cannot be attributed — and that absence is the finding.