Evidence packs
Each eligible Starter+ run produces a checksum-verified evidence pack with a manifest, SARIF, CSV, JSON, and run summary. LLM runs with eligible findings can also include conversation transcripts and a remediation playbook.
Key points
- Verified with SHA-256 checksums recorded in the pack manifest.
- Scoped to the run that produced it; never aggregated across tenants.
- Exportable as a ZIP or through a signed download URL valid for 10 minutes.
- Retention follows the tenant data-retention contract (default: while the account is active).
01
What is inside
- Manifest, SARIF, CSV, JSON, and a run summary.
- Run configuration (target, profile, scenario catalogue version).
- For eligible LLM findings: conversation transcripts and a remediation playbook.
02
How to use it
- Download from the run detail page or via GET /v1/runs/{id}/evidence-pack.
- Recalculate and compare the SHA-256 checksums in the manifest before treating the files as authoritative.
- Hand to an auditor along with the methodology link (/docs/technical-foundations).