Evidence packs
Every completed run produces a signed evidence pack: the transcripts, the grader decisions, the configuration, and the run metadata, sealed so an auditor can reproduce the result without trusting the dashboard.
Key points
- Signed with HMAC-SHA256; signature is part of the pack manifest.
- Scoped to the run that produced it; never aggregated across tenants.
- Exportable as a tarball or a signed URL valid for 7 days.
- Retention follows the tenant data-retention contract (default: while the account is active).
01
What is inside
- Per-probe request/response transcripts.
- Grader decisions with rubric IDs.
- Run configuration (target, profile, scenario catalogue version).
02
How to use it
- Download from the run detail page or via GET /v1/runs/{id}/evidence-pack.
- Verify the signature with your tenant signing key before treating it as authoritative.
- Hand to an auditor along with the methodology link (/docs/technical-foundations).