Verify audit chain
verify_audit_chainReturn an envelope's append-only audit-event hash chain together with a server-computed integrity verdict: every event_hash is recomputed from its canonical material, and the prev_event_hash linkage and per-envelope seq contiguity are checked. Evidence only, never PDF bytes. The raw events are included verbatim so the caller can independently re-derive the verdict instead of trusting chain.valid.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"envelope_id": "<envelope_id>"
},
"name": "verify_audit_chain"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| envelope_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| chain | Yes | ||
| events | Yes | ||
| envelope_id | Yes | ||
| attested_audit_chain_head_hash | Yes | The audit-chain head derived from the signer-signed v2 final payload (G-01), fed into the verdict's head cross-check. NULL until the envelope is finalized. | |
| attested_head_signature_verified | Yes | True when the final-payload signature carrying the attested head was re-verified against the signer's on-file public key. False when not finalized or the signature did not verify. |