Audit Chain — Live Proof

Signed audit packs

The proof export has a replay path.

The public page never exposes signing secrets. It exposes the chain entry, the export endpoint, and the verification instructions so a tenant, auditor, or evaluator can replay the signature with their controlled secret.

1. Select an entry

Click any recent goal row to open the evidence package, reviewer votes, policy flags, hashes, and raw chain entry.

2. Export the pack

The export endpoint returns griff-audit-pack/v1 JSON with the entry, data source, canonicalization metadata, and HMAC signature.

3. Recompute the signature

Run the verifier with the tenant-held secret to canonicalize the unsigned pack and compare the HMAC-SHA256 digest.

Verifier command

GRIFF_AUDIT_PACK_SECRET=<secret> node scripts/verify-audit-pack.mjs pack.json

The repo includes scripts/verify-audit-pack.mjs. It removes the signature field, canonicalizes sorted-key JSON, and compares the expected digest with the exported signature.

Recent goals

Showing 3 most recent. Click a row to inspect the evidence package.

Seq	Timestamp	Goal / event	Agents	Source	Evidence hash	Status
#3	2026-05-06 16:00:10 UTC	Buyer-safe evidence export is ready with a verified hash chain.	Custody ledger, Verifier, Export service	master-atc-public-demo	38266340…f8f75c	allow
#2	2026-05-06 16:00:03 UTC	Policy engine allows Tier 3 public demo only after named human approval.	Policy engine, Olivia-HQ, MASTER ATC public simulator	master-atc-public-demo	5586df15…917723	allow
#1	2026-05-06 16:00:01 UTC	Public evaluator submits a read-only MASTER ATC demo mission.	Buyer operator, MASTER ATC public simulator	master-atc-public-demo	70d5c975…27a41a	allow

Evidence package · seq #2

Policy engine allows Tier 3 public demo only after named human approval.

policy.decision.computed · source master-atc-public-demo · 2026-05-06T16:00:03.600Z

Open export endpoint

HMAC-SHA256 · canonical JSON

Claim and acceptance criteria

Risk tier is visible
risk_tier=3
Approval requirement is recorded
requiredApproval=named_human_approval
Secrets and destructive operations remain denied
secretsTouched=false destructiveOperations=false

Artifacts

Artifactdemo://policy/master-atc-demo-policy-2026-05-06

Evidence quality score: 94.0%

Reviewer votes and judge decision

Decisionallowconfidence 93%

Reviewer votes

policyallow
custodyallow
exportallow

Tier 3 is permitted in the deterministic demo lane after human approval.

Policy clearance and operating envelope

Forbidden files touchedCLEAR
Forbidden commands runCLEAR
Budget exceededCLEAR

Hard gates

tests passedPASS
security clearPASS
policy clearPASS
evidence completePASS
budget okPASS
lease validPASS

Cost

$0.0000

Runtime

3.60s

Chain of custody

Previous hash

70d5c97505dcca511e4261a08e4a15b3db1586e2e86b38a6450cdd5c8b27a41a

This entry hash

5586df15d382a3120a47125de66ec72064cdf81df2af5901096dab12a2917723

Tenant

griff-ai-public

Sequence

#2

View raw chain entry JSON

{
  "tenant_id": "griff-ai-public",
  "seq": 2,
  "previous_hash": "70d5c97505dcca511e4261a08e4a15b3db1586e2e86b38a6450cdd5c8b27a41a",
  "ts": "2026-05-06T16:00:03.600Z",
  "event": "policy.decision.computed",
  "source": "master-atc-public-demo",
  "payload": {
    "goal": "Policy engine allows Tier 3 public demo only after named human approval.",
    "agents": [
      "Policy engine",
      "Olivia-HQ",
      "MASTER ATC public simulator"
    ],
    "evidence_package": {
      "task_id": "public-demo-task-001",
      "attempt_id": "public-demo-attempt-002",
      "artifact_ids": [
        "demo://policy/master-atc-demo-policy-2026-05-06"
      ],
      "acceptance_mapping": [
        {
          "criterion": "Risk tier is visible",
          "satisfied": true,
          "evidence": "risk_tier=3"
        },
        {
          "criterion": "Approval requirement is recorded",
          "satisfied": true,
          "evidence": "requiredApproval=named_human_approval"
        },
        {
          "criterion": "Secrets and destructive operations remain denied",
          "satisfied": true,
          "evidence": "secretsTouched=false destructiveOperations=false"
        }
      ],
      "policy_clearance": {
        "forbidden_files_touched": false,
        "forbidden_commands_run": false,
        "budget_exceeded": false
      },
      "evidence_quality_score": 0.94
    },
    "judge_decision": {
      "decision": "allow",
      "confidence": 0.93,
      "hard_gates": {
        "tests_passed": true,
        "security_clear": true,
        "policy_clear": true,
        "evidence_complete": true,
        "budget_ok": true,
        "lease_valid": true
      },
      "votes": {
        "policy": "allow",
        "custody": "allow",
        "export": "allow"
      },
      "reason": "Tier 3 is permitted in the deterministic demo lane after human approval."
    },
    "cost_usd": 0,
    "runtime_seconds": 3.6
  },
  "hash": "5586df15d382a3120a47125de66ec72064cdf81df2af5901096dab12a2917723"
}