Evidence API

GET /evidence/bundle/:id

Export a trust bundle for a decision.

curl https://sovrapp.com/api/sovr/evidence/bundle/dec_abc123 \
  -H "x-api-key: sk_..." \
  -H "x-tenant-id: tenant_123"

Response

{
  "success": true,
  "data": {
    "bundleId": "bundle_xyz",
    "version": "1.0",
    "decision": {
      "id": "dec_abc123",
      "action": "process_refund",
      "decision": "allow",
      "timestamp": "2026-02-05T05:00:00Z"
    },
    "context": {
      "originalRequest": { ... },
      "riskAssessment": { ... }
    },
    "auditChain": [
      { "hash": "sha256:...", "previousHash": "sha256:..." }
    ],
    "signatures": {
      "sovr": {
        "algorithm": "ed25519",
        "publicKey": "...",
        "signature": "..."
      }
    },
    "exportedAt": "2026-02-05T06:00:00Z"
  }
}

POST /evidence/verify

Verify a trust bundle.

curl -X POST https://sovrapp.com/api/sovr/evidence/verify \
  -H "Content-Type: application/json" \
  -H "x-api-key: sk_..." \
  -d '{
    "bundle": { ... }
  }'

Response

{
  "success": true,
  "data": {
    "valid": true,
    "signatureValid": true,
    "chainValid": true,
    "timestampValid": true
  }
}