Router / Chain integrity

Tamper-evident audit log

Each record stores a SHA-256 over its own canonical content plus the hash of the record before it. Alter a record and its own hash stops matching; remove one and the next record's prev_hash stops matching. Either way the walk halts and names the sequence number where it broke.

Chain intact. Chain intact from the anchor at entry 187 to head. Run npm run verify for a full walk from genesis. 187 entries.
head 3c7776b15ba9c19b8d0d8a211a2be5dcbb4254b5b3a4f158a05d116a67f97329

The records themselves are not public

A record names the organisation that called, the key prefix, the policy applied and the models involved. Publishing that would leak one institution's operations to every other. Records are available at the examination pack, behind a login and scoped to your own organisation, or through GET /api/v1/audit/verify with a key carrying the read scope.

Verify it yourself

The check above walks from the last verified anchor, which is what makes it cheap enough to render on a page. A full walk from genesis is a separate, deliberate act.

curl -s https://governai.space/api/v1/audit/verify | jq   # integrity, no key needed
npm run verify            # full walk from genesis
npm run verify -- --tamper  # edits a row, shows the break, restores it