Trust Records
Get Execution Trust Record
Returns the complete signed Execution Trust Record for a transaction: what was asked, what the policy decided, what was executed and the connector’s answer, with signatures.
GET
/
trust-records
/
{businessTransactionId}
cURL
# TXN_ID: the businessTransactionId of the transaction. In the sandbox, use one from a playground run;
# sandbox data is deleted hourly, so an older id returns 404.
TXN_ID="${TXN_ID:?set TXN_ID to a businessTransactionId}"
curl https://parmana-api-real.vercel.app/trust-records/$TXN_ID \
-H "Authorization: Bearer $PARMANA_API_KEY"import { ParmanaClient } from "@parmana/sdk";
const client = new ParmanaClient({
endpoint: "https://parmana-api-real.vercel.app",
apiKey: process.env.PARMANA_API_KEY!,
});
const record = await client.trustRecord("5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90");
console.log(record.executions[0]?.decision.outcome);import os
from parmana import ParmanaClient
client = ParmanaClient(
endpoint="https://parmana-api-real.vercel.app",
api_key=os.environ["PARMANA_API_KEY"],
)
record = client.trust_record("5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90")
print(record.executions[0].decision.outcome)const options = {method: 'GET', headers: {Authorization: '<api-key>'}};
fetch('https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}")
.header("Authorization", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"trustRecordId": "65fee934-532c-4feb-88d9-72c0cd912a81",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"transaction": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"metadata": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"correlationId": "cc1ca975-4935-4e9a-a591-8897af6b56fb",
"sourceSystem": "vendor-payment-service",
"submittedBy": "ap-automation",
"submittedAt": "2026-07-13T17:36:00.835Z"
},
"authority": {
"authorityId": "db5c5260-bb4c-40a2-a081-2928b5fe7720",
"authorityType": "SERVICE",
"principalId": "ap-automation-svc",
"displayName": "Accounts Payable Automation",
"issuedAt": "2026-07-13T17:36:00.835Z"
},
"authorization": {
"authorizationId": "63bdc429-14e4-4ef4-8007-f3c0c9564261",
"authorityId": "db5c5260-bb4c-40a2-a081-2928b5fe7720",
"purpose": "Authorize vendor payment disbursement",
"issuedAt": "2026-07-13T17:36:00.835Z"
},
"intent": {
"intentId": "1e77d0b3-2e57-4e31-b780-03abc92f1b69",
"authorizationId": "63bdc429-14e4-4ef4-8007-f3c0c9564261",
"action": "payments:execute",
"target": "vendor/V-500",
"parameters": {
"amount": 5000,
"currency": "USD"
},
"createdAt": "2026-07-13T17:36:00.835Z"
},
"policy": {
"name": "vendor-payment",
"version": "2.0.0",
"schemaVersion": "1.0.0"
},
"signals": {
"vendorVerified": true,
"invoiceVerified": true,
"paymentApproved": true,
"sufficientFunds": true,
"paymentAmount": 5000,
"riskScore": 12
},
"status": "RECEIVED",
"createdAt": "2026-07-13T17:36:00.965Z"
},
"overrides": [],
"executions": [
{
"executionId": "90746492-7721-4228-b244-67bf8a45ca68",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"decision": {
"decisionId": "8ec880cb-677a-4889-96f1-5a18a4edc1b5",
"intentId": "1e77d0b3-2e57-4e31-b780-03abc92f1b69",
"policy": {
"name": "vendor-payment",
"version": "2.0.0",
"schemaVersion": "1.0.0"
},
"signals": {
"vendorVerified": true,
"invoiceVerified": true,
"paymentApproved": true,
"sufficientFunds": true,
"paymentAmount": 5000,
"riskScore": 12
},
"outcome": "APPROVED",
"reason": "Vendor payment authorized. Vendor verification, invoice verification, payment approval, funding, and risk assessment requirements were satisfied.",
"evaluatedAt": "2026-07-13T17:36:00.967Z"
},
"status": "COMPLETED",
"mode": "SYNC",
"startedAt": "2026-07-13T17:36:00.968Z",
"metadata": {
"authorizationId": "dbc09266-2078-4d4e-93d0-f355eb7eebcc"
},
"evidence": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"action": "payments:execute",
"target": "vendor/V-500",
"parameters": {
"amount": 5000,
"currency": "USD"
},
"success": true,
"executedAt": "2026-07-13T17:36:00.970Z",
"attributes": {
"connector": {
"connectorId": "vendor-payment",
"connectorVersion": "1.0.0",
"capability": "payments:execute",
"sanitizedEndpoint": "vendor/V-500",
"credentialProviderId": "environment",
"requestSummary": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"action": "payments:execute",
"target": "vendor/V-500",
"parameters": {
"amount": 5000,
"currency": "USD"
}
},
"responseSummary": {
"success": true,
"metadata": {}
},
"startedAt": "2026-07-13T17:36:00.970Z",
"completedAt": "2026-07-13T17:36:00.970Z",
"connectorEvidenceHash": "c97411026a82b608d9b0f8b137a64e26d8af24bdda09310b639e527e08a9aada"
}
}
},
"completedAt": "2026-07-13T17:36:00.970Z"
}
],
"verifications": [
{
"verificationId": "e22354e0-7f22-49b2-bd2f-09e47881d788",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"status": "VERIFIED",
"message": "Execution Trust Record verified successfully.",
"verifiedAt": "2026-07-13T17:36:00.973Z",
"trustRecordHash": "e20a8861864f1a0a6c5fe00e64abca04de18a7d165a82ef9d7beb458c2096b3f"
}
],
"receipts": [
{
"receiptId": "863947e6-9d36-492e-b9c9-78b0f3e9b6df",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"trustRecordHash": "e20a8861864f1a0a6c5fe00e64abca04de18a7d165a82ef9d7beb458c2096b3f",
"receiptHash": "c9666b08b42bb5ff77650b544c3c2183609f25e4d8dc09359b71a970c57ed3ce",
"issuedAt": "2026-07-13T17:36:00.973Z",
"algorithm": "ed25519",
"signature": "Pcr42EvbaUbLogvVhYiV3g7uuwvZr82HUJhVptnXRxmTtiEGiz2SCdz5Z80xRDvmvSxpOSG5OnvMAaRzJXncBg=="
}
],
"createdAt": "2026-07-13T17:36:00.971Z",
"updatedAt": "2026-07-13T17:36:00.971Z",
"trustRecordHash": "e20a8861864f1a0a6c5fe00e64abca04de18a7d165a82ef9d7beb458c2096b3f",
"signature": {
"algorithm": "ed25519",
"keyId": "default",
"value": "gjDYmHUBKIrv7bT3uwAkt3wHeoSwz5uANXQV5MfsFgbUIh83KiufZwxht3F3Een+7K/ZW9SRn0F0J7ACJRLbAg==",
"signedAt": "2026-07-13T17:36:00.972Z"
}
}{
"error": "authentication required"
}{
"error": "Execution Trust Record not found."
}Authorizations
Caller API key issued by scripts/generate-api-key.ts. Sent as Authorization: Bearer . Verified against a stored SHA-256 hash in constant time by packages/api/src/auth/StaticKeyAuthenticator.ts. Required on every route not listed as exempt in this document's top-level description. See /api-reference/authentication.
Path Parameters
The transaction's id, not the record's trustRecordId. In the sandbox, the value shown is a seeded transaction kept for these docs. To try your own, run the playground and use the businessTransactionId it prints.
Response
The Trust Record.
Response returned by POST /execute, POST /transactions, and GET /trust-records/{businessTransactionId}. A bare Execution Trust Record, no wrapper. POST /execute returns this with status 200; POST /transactions returns the identical shape with status 201.
Unique Execution Trust Record identifier.
Business Transaction identifier.
Canonical immutable business context accepted by Parmana for execution: Authority -> Authorization -> Intent -> Business Transaction -> Policy. Every Business Transaction produces exactly one Decision, one Execution, and one Execution Trust Record.
Show child attributes
Show child attributes
Example:
{
"businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
"metadata": {
"businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
"correlationId": "6b97caca-1605-4711-bf00-7e5a65434d93",
"sourceSystem": "vendor-payment-service",
"submittedBy": "ap-automation",
"submittedAt": "2026-07-07T16:38:59.285Z"
},
"authority": {
"authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
"authorityType": "SERVICE",
"principalId": "ap-automation-svc",
"displayName": "Accounts Payable Automation",
"issuedAt": "2026-07-07T16:38:59.285Z"
},
"authorization": {
"authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
"authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
"purpose": "Authorize vendor payment disbursement",
"issuedAt": "2026-07-07T16:38:59.285Z"
},
"intent": {
"intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
"authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
"action": "payments:execute",
"target": "vendor/V-100",
"parameters": { "amount": 4500, "currency": "USD" },
"createdAt": "2026-07-07T16:38:59.285Z"
},
"policy": {
"name": "vendor-payment",
"version": "2.0.0",
"schemaVersion": "1.0.0"
},
"signals": {
"vendorVerified": true,
"invoiceVerified": true,
"paymentApproved": true,
"sufficientFunds": true,
"paymentAmount": 4500,
"riskScore": 10
},
"status": "RECEIVED",
"createdAt": "2026-07-07T16:38:59.325Z"
}
Override history. Append-only; empty on every transaction in this repository today (no route creates an Override).
Show child attributes
Show child attributes
Execution history. Append-only.
Show child attributes
Show child attributes
Verification history. Append-only.
Show child attributes
Show child attributes
Receipt history. Append-only.
Show child attributes
Show child attributes
Canonical hash of the Execution Trust Record, computed over its canonical serialized form.
Cryptographic signature over the canonical Execution Trust Record, proving it was produced by Parmana and has not been modified since signing.
Show child attributes
Show child attributes
UTC timestamp when the Execution Trust Record was first created.
UTC timestamp when the Execution Trust Record was last extended with a new immutable artifact.
Explicit binding linking policy-governance provenance (transaction.policy.contentHash/governanceAnchor) to what a connector actually did (executions[].evidence.attributes.connector). Not a new cryptographic guarantee on its own -- both were already covered by trustRecordHash/signature -- but a single, explicitly-named pointer an auditor can check without reconstructing the binding themselves. Absent on a Trust Record built before this field existed.
Show child attributes
Show child attributes
⌘I
cURL
# TXN_ID: the businessTransactionId of the transaction. In the sandbox, use one from a playground run;
# sandbox data is deleted hourly, so an older id returns 404.
TXN_ID="${TXN_ID:?set TXN_ID to a businessTransactionId}"
curl https://parmana-api-real.vercel.app/trust-records/$TXN_ID \
-H "Authorization: Bearer $PARMANA_API_KEY"import { ParmanaClient } from "@parmana/sdk";
const client = new ParmanaClient({
endpoint: "https://parmana-api-real.vercel.app",
apiKey: process.env.PARMANA_API_KEY!,
});
const record = await client.trustRecord("5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90");
console.log(record.executions[0]?.decision.outcome);import os
from parmana import ParmanaClient
client = ParmanaClient(
endpoint="https://parmana-api-real.vercel.app",
api_key=os.environ["PARMANA_API_KEY"],
)
record = client.trust_record("5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90")
print(record.executions[0].decision.outcome)const options = {method: 'GET', headers: {Authorization: '<api-key>'}};
fetch('https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}")
.header("Authorization", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://parmana-api-real.vercel.app/trust-records/{businessTransactionId}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"trustRecordId": "65fee934-532c-4feb-88d9-72c0cd912a81",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"transaction": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"metadata": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"correlationId": "cc1ca975-4935-4e9a-a591-8897af6b56fb",
"sourceSystem": "vendor-payment-service",
"submittedBy": "ap-automation",
"submittedAt": "2026-07-13T17:36:00.835Z"
},
"authority": {
"authorityId": "db5c5260-bb4c-40a2-a081-2928b5fe7720",
"authorityType": "SERVICE",
"principalId": "ap-automation-svc",
"displayName": "Accounts Payable Automation",
"issuedAt": "2026-07-13T17:36:00.835Z"
},
"authorization": {
"authorizationId": "63bdc429-14e4-4ef4-8007-f3c0c9564261",
"authorityId": "db5c5260-bb4c-40a2-a081-2928b5fe7720",
"purpose": "Authorize vendor payment disbursement",
"issuedAt": "2026-07-13T17:36:00.835Z"
},
"intent": {
"intentId": "1e77d0b3-2e57-4e31-b780-03abc92f1b69",
"authorizationId": "63bdc429-14e4-4ef4-8007-f3c0c9564261",
"action": "payments:execute",
"target": "vendor/V-500",
"parameters": {
"amount": 5000,
"currency": "USD"
},
"createdAt": "2026-07-13T17:36:00.835Z"
},
"policy": {
"name": "vendor-payment",
"version": "2.0.0",
"schemaVersion": "1.0.0"
},
"signals": {
"vendorVerified": true,
"invoiceVerified": true,
"paymentApproved": true,
"sufficientFunds": true,
"paymentAmount": 5000,
"riskScore": 12
},
"status": "RECEIVED",
"createdAt": "2026-07-13T17:36:00.965Z"
},
"overrides": [],
"executions": [
{
"executionId": "90746492-7721-4228-b244-67bf8a45ca68",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"decision": {
"decisionId": "8ec880cb-677a-4889-96f1-5a18a4edc1b5",
"intentId": "1e77d0b3-2e57-4e31-b780-03abc92f1b69",
"policy": {
"name": "vendor-payment",
"version": "2.0.0",
"schemaVersion": "1.0.0"
},
"signals": {
"vendorVerified": true,
"invoiceVerified": true,
"paymentApproved": true,
"sufficientFunds": true,
"paymentAmount": 5000,
"riskScore": 12
},
"outcome": "APPROVED",
"reason": "Vendor payment authorized. Vendor verification, invoice verification, payment approval, funding, and risk assessment requirements were satisfied.",
"evaluatedAt": "2026-07-13T17:36:00.967Z"
},
"status": "COMPLETED",
"mode": "SYNC",
"startedAt": "2026-07-13T17:36:00.968Z",
"metadata": {
"authorizationId": "dbc09266-2078-4d4e-93d0-f355eb7eebcc"
},
"evidence": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"action": "payments:execute",
"target": "vendor/V-500",
"parameters": {
"amount": 5000,
"currency": "USD"
},
"success": true,
"executedAt": "2026-07-13T17:36:00.970Z",
"attributes": {
"connector": {
"connectorId": "vendor-payment",
"connectorVersion": "1.0.0",
"capability": "payments:execute",
"sanitizedEndpoint": "vendor/V-500",
"credentialProviderId": "environment",
"requestSummary": {
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"action": "payments:execute",
"target": "vendor/V-500",
"parameters": {
"amount": 5000,
"currency": "USD"
}
},
"responseSummary": {
"success": true,
"metadata": {}
},
"startedAt": "2026-07-13T17:36:00.970Z",
"completedAt": "2026-07-13T17:36:00.970Z",
"connectorEvidenceHash": "c97411026a82b608d9b0f8b137a64e26d8af24bdda09310b639e527e08a9aada"
}
}
},
"completedAt": "2026-07-13T17:36:00.970Z"
}
],
"verifications": [
{
"verificationId": "e22354e0-7f22-49b2-bd2f-09e47881d788",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"status": "VERIFIED",
"message": "Execution Trust Record verified successfully.",
"verifiedAt": "2026-07-13T17:36:00.973Z",
"trustRecordHash": "e20a8861864f1a0a6c5fe00e64abca04de18a7d165a82ef9d7beb458c2096b3f"
}
],
"receipts": [
{
"receiptId": "863947e6-9d36-492e-b9c9-78b0f3e9b6df",
"businessTransactionId": "44b34a79-e0f2-49d7-a48e-e52fff88182e",
"trustRecordHash": "e20a8861864f1a0a6c5fe00e64abca04de18a7d165a82ef9d7beb458c2096b3f",
"receiptHash": "c9666b08b42bb5ff77650b544c3c2183609f25e4d8dc09359b71a970c57ed3ce",
"issuedAt": "2026-07-13T17:36:00.973Z",
"algorithm": "ed25519",
"signature": "Pcr42EvbaUbLogvVhYiV3g7uuwvZr82HUJhVptnXRxmTtiEGiz2SCdz5Z80xRDvmvSxpOSG5OnvMAaRzJXncBg=="
}
],
"createdAt": "2026-07-13T17:36:00.971Z",
"updatedAt": "2026-07-13T17:36:00.971Z",
"trustRecordHash": "e20a8861864f1a0a6c5fe00e64abca04de18a7d165a82ef9d7beb458c2096b3f",
"signature": {
"algorithm": "ed25519",
"keyId": "default",
"value": "gjDYmHUBKIrv7bT3uwAkt3wHeoSwz5uANXQV5MfsFgbUIh83KiufZwxht3F3Een+7K/ZW9SRn0F0J7ACJRLbAg==",
"signedAt": "2026-07-13T17:36:00.972Z"
}
}{
"error": "authentication required"
}{
"error": "Execution Trust Record not found."
}