Audit Chain — Live Proof

Signed audit packs

The proof export has a replay path.

The public page never exposes signing secrets. It exposes the chain entry, the export endpoint, and the verification instructions so a tenant, auditor, or evaluator can replay the signature with their controlled secret.

1. Select an entry

Click any recent goal row to open the evidence package, reviewer votes, policy flags, hashes, and raw chain entry.

2. Export the pack

The export endpoint returns griff-audit-pack/v1 JSON with the entry, data source, canonicalization metadata, and HMAC signature.

3. Recompute the signature

Run the verifier with the tenant-held secret to canonicalize the unsigned pack and compare the HMAC-SHA256 digest.

Verifier command

GRIFF_AUDIT_PACK_SECRET=<secret> node scripts/verify-audit-pack.mjs pack.json

The repo includes scripts/verify-audit-pack.mjs. It removes the signature field, canonicalizes sorted-key JSON, and compares the expected digest with the exported signature.

Recent goals

Showing 3 most recent. Click a row to inspect the evidence package.

Seq	Timestamp	Goal / event	Agents	Source	Evidence hash	Status
#3	2026-05-06 16:00:10 UTC	Buyer-safe evidence export is ready with a verified hash chain.	Custody ledger, Verifier, Export service	master-atc-public-demo	38266340…f8f75c	allow
#2	2026-05-06 16:00:03 UTC	Policy engine allows Tier 3 public demo only after named human approval.	Policy engine, Olivia-HQ, MASTER ATC public simulator	master-atc-public-demo	5586df15…917723	allow
#1	2026-05-06 16:00:01 UTC	Public evaluator submits a read-only MASTER ATC demo mission.	Buyer operator, MASTER ATC public simulator	master-atc-public-demo	70d5c975…27a41a	allow

Evidence package · seq #1

Public evaluator submits a read-only MASTER ATC demo mission.

task.contract.accepted · source master-atc-public-demo · 2026-05-06T16:00:01.200Z

Open export endpoint

HMAC-SHA256 · canonical JSON

Claim and acceptance criteria

Mission is scoped to public demo resources only
allowed_actions=read_demo_fixture,simulate_runner_log,write_evidence_pack,verify_hash_chain
Forbidden actions are declared before execution
read_secret,write_customer_data,execute_shell,delete_resource,charge_billing denied

Artifacts

Artifactdemo://contract/public-demo-task-001

Evidence quality score: 90.0%

Reviewer votes and judge decision

Decisionallowconfidence 90%

Reviewer votes

policyallow
custodyallow
exportallow

The task contract is read-only and safe for the public demo lane.

Policy clearance and operating envelope

Forbidden files touchedCLEAR
Forbidden commands runCLEAR
Budget exceededCLEAR

Hard gates

tests passedPASS
security clearPASS
policy clearPASS
evidence completePASS
budget okPASS
lease validPASS

Cost

$0.0000

Runtime

1.20s

Chain of custody

Previous hash

0000000000000000000000000000000000000000000000000000000000000000

This entry hash

70d5c97505dcca511e4261a08e4a15b3db1586e2e86b38a6450cdd5c8b27a41a

Tenant

griff-ai-public

Sequence

#1

View raw chain entry JSON

{
  "tenant_id": "griff-ai-public",
  "seq": 1,
  "previous_hash": "0000000000000000000000000000000000000000000000000000000000000000",
  "ts": "2026-05-06T16:00:01.200Z",
  "event": "task.contract.accepted",
  "source": "master-atc-public-demo",
  "payload": {
    "goal": "Public evaluator submits a read-only MASTER ATC demo mission.",
    "agents": [
      "Buyer operator",
      "MASTER ATC public simulator"
    ],
    "evidence_package": {
      "task_id": "public-demo-task-001",
      "attempt_id": "public-demo-attempt-001",
      "artifact_ids": [
        "demo://contract/public-demo-task-001"
      ],
      "acceptance_mapping": [
        {
          "criterion": "Mission is scoped to public demo resources only",
          "satisfied": true,
          "evidence": "allowed_actions=read_demo_fixture,simulate_runner_log,write_evidence_pack,verify_hash_chain"
        },
        {
          "criterion": "Forbidden actions are declared before execution",
          "satisfied": true,
          "evidence": "read_secret,write_customer_data,execute_shell,delete_resource,charge_billing denied"
        }
      ],
      "policy_clearance": {
        "forbidden_files_touched": false,
        "forbidden_commands_run": false,
        "budget_exceeded": false
      },
      "evidence_quality_score": 0.9
    },
    "judge_decision": {
      "decision": "allow",
      "confidence": 0.9,
      "hard_gates": {
        "tests_passed": true,
        "security_clear": true,
        "policy_clear": true,
        "evidence_complete": true,
        "budget_ok": true,
        "lease_valid": true
      },
      "votes": {
        "policy": "allow",
        "custody": "allow",
        "export": "allow"
      },
      "reason": "The task contract is read-only and safe for the public demo lane."
    },
    "cost_usd": 0,
    "runtime_seconds": 1.2
  },
  "hash": "70d5c97505dcca511e4261a08e4a15b3db1586e2e86b38a6450cdd5c8b27a41a"
}