Trust Records

Bulk-export Execution Trust Records (compliance/audit)

Returns the full, signed Execution Trust Record (transaction, executions, verifications, receipts, authorization) for every transaction on the requested page — the periodic full-export capability for external audit/compliance review, distinct from GET /trust-records/ (single-record lookup) and GET /transactions (raw Business Transaction only, no execution/verification/receipt history). Scoping and pagination mirror GET /transactions exactly: an authenticated caller sees only transactions they submitted, page/pageSize page over the same storage-provider listing GET /transactions uses, and the response is a bare array with no pagination metadata. since/until (ISO 8601) additionally filter by transaction.createdAt for a bounded date-range export.

GET

trust-records

curl --request GET \
  --url http://localhost:3000/trust-records \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('http://localhost:3000/trust-records', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_PORT => "3000",
  CURLOPT_URL => "http://localhost:3000/trust-records",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "http://localhost:3000/trust-records"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("http://localhost:3000/trust-records")

http = Net::HTTP.new(url.host, url.port)

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

[
  {
    "trustRecordId": "759e916e-66d2-48c3-8869-55d557acf155",
    "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
    "transaction": {
      "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
      "metadata": {
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "correlationId": "6b97caca-1605-4711-bf00-7e5a65434d93",
        "sourceSystem": "vendor-payment-service",
        "submittedBy": "ap-automation",
        "submittedAt": "2026-07-07T16:38:59.285Z"
      },
      "authority": {
        "authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
        "authorityType": "SERVICE",
        "principalId": "ap-automation-svc",
        "displayName": "Accounts Payable Automation",
        "issuedAt": "2026-07-07T16:38:59.285Z"
      },
      "authorization": {
        "authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
        "authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
        "purpose": "Authorize vendor payment disbursement",
        "issuedAt": "2026-07-07T16:38:59.285Z"
      },
      "intent": {
        "intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
        "authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
        "action": "payments:execute",
        "target": "vendor/V-100",
        "parameters": {
          "amount": 4500,
          "currency": "USD"
        },
        "createdAt": "2026-07-07T16:38:59.285Z"
      },
      "policy": {
        "name": "vendor-payment",
        "version": "2.0.0",
        "schemaVersion": "1.0.0"
      },
      "signals": {
        "vendorVerified": true,
        "invoiceVerified": true,
        "paymentApproved": true,
        "sufficientFunds": true,
        "paymentAmount": 4500,
        "riskScore": 10
      },
      "status": "RECEIVED",
      "createdAt": "2026-07-07T16:38:59.325Z"
    },
    "overrides": [],
    "executions": [
      {
        "executionId": "2be38c15-f93c-4621-9a1c-7570c130dea0",
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "decision": {
          "decisionId": "9d69dc0b-333a-4be3-b09f-358fece806f3",
          "intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
          "policy": {
            "name": "vendor-payment",
            "version": "2.0.0",
            "schemaVersion": "1.0.0"
          },
          "signals": {
            "vendorVerified": true,
            "invoiceVerified": true,
            "paymentApproved": true,
            "sufficientFunds": true,
            "paymentAmount": 4500,
            "riskScore": 10
          },
          "outcome": "APPROVED",
          "reason": "Vendor payment authorized. Vendor verification, invoice verification, payment approval, funding, and risk assessment requirements were satisfied.",
          "evaluatedAt": "2026-07-07T16:38:59.326Z"
        },
        "status": "COMPLETED",
        "mode": "SYNC",
        "startedAt": "2026-07-07T16:38:59.328Z",
        "metadata": {
          "authorizationId": "1dc2d137-fde2-4d9c-b298-79e9f8a0d03e"
        },
        "evidence": {
          "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
          "action": "payments:execute",
          "target": "vendor/V-100",
          "parameters": {
            "amount": 4500,
            "currency": "USD"
          },
          "success": true,
          "executedAt": "2026-07-07T16:38:59.328Z",
          "attributes": {
            "connector": {
              "connectorId": "vendor-payment",
              "connectorVersion": "1.0.0",
              "capability": "payments:execute",
              "sanitizedEndpoint": "vendor/V-100",
              "credentialProviderId": "environment",
              "requestSummary": {
                "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
                "action": "payments:execute",
                "target": "vendor/V-100",
                "parameters": {
                  "amount": 4500,
                  "currency": "USD"
                }
              },
              "responseSummary": {
                "success": true,
                "metadata": {}
              },
              "startedAt": "2026-07-07T16:38:59.328Z",
              "completedAt": "2026-07-07T16:38:59.328Z",
              "connectorEvidenceHash": "7bcacb3e399a713e44a4f48aa2783de8060ae28591e4fc1256b504bd32cd7aea"
            }
          }
        },
        "completedAt": "2026-07-07T16:38:59.329Z"
      }
    ],
    "verifications": [
      {
        "verificationId": "0b96c8b4-9cd8-4162-81fc-086575cf0924",
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "status": "VERIFIED",
        "message": "Execution Trust Record verified successfully.",
        "verifiedAt": "2026-07-07T16:38:59.331Z",
        "trustRecordHash": "989aef83d595202ec02bb338ac00461abec0541098ea065f965b5cde342d3b25"
      }
    ],
    "receipts": [
      {
        "receiptId": "3073a598-f927-4caf-8bb8-4f083f62b7e9",
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "trustRecordHash": "989aef83d595202ec02bb338ac00461abec0541098ea065f965b5cde342d3b25",
        "receiptHash": "8a5a0e9255dafef5ec588f0834e3c5b81dc7feb98a59f8bfa7083438fa58e231",
        "issuedAt": "2026-07-07T16:38:59.331Z",
        "algorithm": "ed25519",
        "signature": "vzpykBuJhoy/2BdiR1x02KYZqMtKJu39olRJdzM5veSo9nYmoNSYQnt9HELlb2jlGWf07jPhP8ZXlrQnN4KQBA=="
      }
    ],
    "createdAt": "2026-07-07T16:38:59.329Z",
    "updatedAt": "2026-07-07T16:38:59.329Z",
    "trustRecordHash": "989aef83d595202ec02bb338ac00461abec0541098ea065f965b5cde342d3b25",
    "signature": {
      "algorithm": "ed25519",
      "keyId": "default",
      "value": "l41lr6nCUbrzEfoil/3+gkXd4zEQ9TR1qFaSwLuE70L/9U6cVz3VXdM1lPsDfELKh6RO4qcDrFWF/S3k4CAxAQ==",
      "signedAt": "2026-07-07T16:38:59.330Z"
    }
  }
]

{
  "error": "authentication required"
}

Authorizations

Authorization

string

header

required

Caller API key issued by scripts/generate-api-key.ts. Sent as Authorization: Bearer . Verified against a stored SHA-256 hash in constant time by packages/api/src/auth/StaticKeyAuthenticator.ts. Required on every route except GET /health. See /api-reference/authentication.

Query Parameters

page

integer

default:1

Required range: x >= 1

pageSize

integer

default:25

Required range: x >= 1

since

string<date-time>

Only include records whose transaction.createdAt is on or after this ISO 8601 timestamp.

until

string<date-time>

Only include records whose transaction.createdAt is on or before this ISO 8601 timestamp.

Response

Every Execution Trust Record on the requested page (after ownership and date-range filtering).

trustRecordId

string

required

Unique Execution Trust Record identifier.

businessTransactionId

string

required

Business Transaction identifier.

transaction

Business Transaction · object

required

Canonical immutable business context accepted by Parmana for execution: Authority -> Authorization -> Intent -> Business Transaction -> Policy. Every Business Transaction produces exactly one Decision, one Execution, and one Execution Trust Record.

Show child attributes

Example:

{
  "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
  "metadata": {
    "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
    "correlationId": "6b97caca-1605-4711-bf00-7e5a65434d93",
    "sourceSystem": "vendor-payment-service",
    "submittedBy": "ap-automation",
    "submittedAt": "2026-07-07T16:38:59.285Z"
  },
  "authority": {
    "authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
    "authorityType": "SERVICE",
    "principalId": "ap-automation-svc",
    "displayName": "Accounts Payable Automation",
    "issuedAt": "2026-07-07T16:38:59.285Z"
  },
  "authorization": {
    "authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
    "authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
    "purpose": "Authorize vendor payment disbursement",
    "issuedAt": "2026-07-07T16:38:59.285Z"
  },
  "intent": {
    "intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
    "authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
    "action": "payments:execute",
    "target": "vendor/V-100",
    "parameters": { "amount": 4500, "currency": "USD" },
    "createdAt": "2026-07-07T16:38:59.285Z"
  },
  "policy": {
    "name": "vendor-payment",
    "version": "2.0.0",
    "schemaVersion": "1.0.0"
  },
  "signals": {
    "vendorVerified": true,
    "invoiceVerified": true,
    "paymentApproved": true,
    "sufficientFunds": true,
    "paymentAmount": 4500,
    "riskScore": 10
  },
  "status": "RECEIVED",
  "createdAt": "2026-07-07T16:38:59.325Z"
}

overrides

Override · object[]

required

Override history. Append-only; empty on every transaction in this repository today (no route creates an Override).

Show child attributes

executions

Execution · object[]

required

Execution history. Append-only.

Show child attributes

verifications

Verification · object[]

required

Verification history. Append-only.

Show child attributes

receipts

Receipt · object[]

required

Receipt history. Append-only.

Show child attributes

trustRecordHash

string

required

Canonical hash of the Execution Trust Record, computed over its canonical serialized form.

signature

object

required

Cryptographic signature over the canonical Execution Trust Record, proving it was produced by Parmana and has not been modified since signing.

Show child attributes

createdAt

string<date-time>

required

UTC timestamp when the Execution Trust Record was first created.

updatedAt

string<date-time>

required

UTC timestamp when the Execution Trust Record was last extended with a new immutable artifact.

Bulk-export Execution Trust Records (compliance/audit)

curl --request GET \
  --url http://localhost:3000/trust-records \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('http://localhost:3000/trust-records', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_PORT => "3000",
  CURLOPT_URL => "http://localhost:3000/trust-records",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "http://localhost:3000/trust-records"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("http://localhost:3000/trust-records")

http = Net::HTTP.new(url.host, url.port)

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

[
  {
    "trustRecordId": "759e916e-66d2-48c3-8869-55d557acf155",
    "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
    "transaction": {
      "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
      "metadata": {
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "correlationId": "6b97caca-1605-4711-bf00-7e5a65434d93",
        "sourceSystem": "vendor-payment-service",
        "submittedBy": "ap-automation",
        "submittedAt": "2026-07-07T16:38:59.285Z"
      },
      "authority": {
        "authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
        "authorityType": "SERVICE",
        "principalId": "ap-automation-svc",
        "displayName": "Accounts Payable Automation",
        "issuedAt": "2026-07-07T16:38:59.285Z"
      },
      "authorization": {
        "authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
        "authorityId": "c0c01c23-04a2-45f2-a821-ef24bfca02d3",
        "purpose": "Authorize vendor payment disbursement",
        "issuedAt": "2026-07-07T16:38:59.285Z"
      },
      "intent": {
        "intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
        "authorizationId": "6e9d6aa6-6d20-40a8-b05d-383516365cc7",
        "action": "payments:execute",
        "target": "vendor/V-100",
        "parameters": {
          "amount": 4500,
          "currency": "USD"
        },
        "createdAt": "2026-07-07T16:38:59.285Z"
      },
      "policy": {
        "name": "vendor-payment",
        "version": "2.0.0",
        "schemaVersion": "1.0.0"
      },
      "signals": {
        "vendorVerified": true,
        "invoiceVerified": true,
        "paymentApproved": true,
        "sufficientFunds": true,
        "paymentAmount": 4500,
        "riskScore": 10
      },
      "status": "RECEIVED",
      "createdAt": "2026-07-07T16:38:59.325Z"
    },
    "overrides": [],
    "executions": [
      {
        "executionId": "2be38c15-f93c-4621-9a1c-7570c130dea0",
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "decision": {
          "decisionId": "9d69dc0b-333a-4be3-b09f-358fece806f3",
          "intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
          "policy": {
            "name": "vendor-payment",
            "version": "2.0.0",
            "schemaVersion": "1.0.0"
          },
          "signals": {
            "vendorVerified": true,
            "invoiceVerified": true,
            "paymentApproved": true,
            "sufficientFunds": true,
            "paymentAmount": 4500,
            "riskScore": 10
          },
          "outcome": "APPROVED",
          "reason": "Vendor payment authorized. Vendor verification, invoice verification, payment approval, funding, and risk assessment requirements were satisfied.",
          "evaluatedAt": "2026-07-07T16:38:59.326Z"
        },
        "status": "COMPLETED",
        "mode": "SYNC",
        "startedAt": "2026-07-07T16:38:59.328Z",
        "metadata": {
          "authorizationId": "1dc2d137-fde2-4d9c-b298-79e9f8a0d03e"
        },
        "evidence": {
          "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
          "action": "payments:execute",
          "target": "vendor/V-100",
          "parameters": {
            "amount": 4500,
            "currency": "USD"
          },
          "success": true,
          "executedAt": "2026-07-07T16:38:59.328Z",
          "attributes": {
            "connector": {
              "connectorId": "vendor-payment",
              "connectorVersion": "1.0.0",
              "capability": "payments:execute",
              "sanitizedEndpoint": "vendor/V-100",
              "credentialProviderId": "environment",
              "requestSummary": {
                "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
                "action": "payments:execute",
                "target": "vendor/V-100",
                "parameters": {
                  "amount": 4500,
                  "currency": "USD"
                }
              },
              "responseSummary": {
                "success": true,
                "metadata": {}
              },
              "startedAt": "2026-07-07T16:38:59.328Z",
              "completedAt": "2026-07-07T16:38:59.328Z",
              "connectorEvidenceHash": "7bcacb3e399a713e44a4f48aa2783de8060ae28591e4fc1256b504bd32cd7aea"
            }
          }
        },
        "completedAt": "2026-07-07T16:38:59.329Z"
      }
    ],
    "verifications": [
      {
        "verificationId": "0b96c8b4-9cd8-4162-81fc-086575cf0924",
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "status": "VERIFIED",
        "message": "Execution Trust Record verified successfully.",
        "verifiedAt": "2026-07-07T16:38:59.331Z",
        "trustRecordHash": "989aef83d595202ec02bb338ac00461abec0541098ea065f965b5cde342d3b25"
      }
    ],
    "receipts": [
      {
        "receiptId": "3073a598-f927-4caf-8bb8-4f083f62b7e9",
        "businessTransactionId": "eed2a972-1bf5-4166-8472-761f76fbf1b2",
        "trustRecordHash": "989aef83d595202ec02bb338ac00461abec0541098ea065f965b5cde342d3b25",
        "receiptHash": "8a5a0e9255dafef5ec588f0834e3c5b81dc7feb98a59f8bfa7083438fa58e231",
        "issuedAt": "2026-07-07T16:38:59.331Z",
        "algorithm": "ed25519",
        "signature": "vzpykBuJhoy/2BdiR1x02KYZqMtKJu39olRJdzM5veSo9nYmoNSYQnt9HELlb2jlGWf07jPhP8ZXlrQnN4KQBA=="
      }
    ],
    "createdAt": "2026-07-07T16:38:59.329Z",
    "updatedAt": "2026-07-07T16:38:59.329Z",
    "trustRecordHash": "989aef83d595202ec02bb338ac00461abec0541098ea065f965b5cde342d3b25",
    "signature": {
      "algorithm": "ed25519",
      "keyId": "default",
      "value": "l41lr6nCUbrzEfoil/3+gkXd4zEQ9TR1qFaSwLuE70L/9U6cVz3VXdM1lPsDfELKh6RO4qcDrFWF/S3k4CAxAQ==",
      "signedAt": "2026-07-07T16:38:59.330Z"
    }
  }
]

{
  "error": "authentication required"
}

Get Started

Core Concepts

Guides

Architecture

Runtime

Cryptography & Storage

SDKs

REST API

Package Reference

Security & Deployment

Integrations

Tutorials

Trust and Claims

Reference

Changelog

Bulk-export Execution Trust Records (compliance/audit)

Authorizations

Query Parameters

Response