Verify an Execution Trust Record
Checks a Trust Record again on the server: recomputes its hash, verifies its signature and checks that every approved execution is bound to its authorization.
Authorizations
Caller API key issued by scripts/generate-api-key.ts. Sent as Authorization: Bearer . Verified against a stored SHA-256 hash in constant time by packages/api/src/auth/StaticKeyAuthenticator.ts. Required on every route not listed as exempt in this document's top-level description. See /api-reference/authentication.
Body
Request payload for POST /verify. businessTransactionId is required and must be a valid UUID; both are rejected with a 400, with distinct messages depending on which check fails.
Business Transaction to verify.
Response
The check ran. Read status: VERIFIED or FAILED. A 200 alone does not mean the record verified.
Response returned by POST /verify and GET /verification/{businessTransactionId}: a Verification.
Unique Verification identifier.
Business Transaction being verified.
Verification result.
VERIFIED, FAILED UTC timestamp when verification completed.
Hash of the verified Execution Trust Record, proving exactly which record was verified.
Human-readable verification summary: either the success message, or every failed check's message joined with "; ".