audit.explain
Check a previously recorded decision by ref to get a signed explanation of the verdict, effect, and match status, confirming what the body decided before you repeat or report.
Instructions
Reads one decision back from the signed ledger by its ref and explains it. Use it to check what the body decided about an earlier call and whether the recorded effect matched, before repeating a call or reporting on it; read-only, and the lookup itself is recorded too. Returns JSON with record (the signed decision's claims: tool, verdict, policy hash, timestamps), effect (the reconciled effect row), finding (match, mismatch or missing), witnessClass, guarantee, warnings, trustRoot (which key verified the signatures), and for a held call pair with its defer and resolution records. A ref that does not exist, or belongs to another tenant, is answered with the same signed deny, so neither case reveals the other.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ref | Yes | The decision reference: the ref returned by an earlier call, also the tail of a denied:… or deferred:… answer; 1 to 64 characters of letters, digits, '.', '_' or '-', starting with a letter or digit. |