Surfaces
Finance Audit Trail
Investigate immutable finance receipts, safe differences, evidence access, approvals, and export integrity.
First created Last updated
Search and filters
Filter by actor, action, target type/id, result, source, date, partner/event, request/correlation ID, evidence state, and provider. Search must not reveal secrets or unauthorized records. Cursor sort is deterministic and the result count or truncation state is explicit.
Receipt detail
Receipt detail includes actor and role at action time, server timestamp, partner/event scope, command/result, request/correlation and idempotency identifiers, safe before/after difference, current/previous version, approval chain, journal relationships, evidence access history, provider receipt class, and linked correction. Secrets, raw provider bodies, internal SQL, full private identifiers, and unnecessary personal data are redacted.
Integrity and export
An audit export has immutable requested scope, cutoff, schema/profile version, row count, digest, requester, created/expiry time, and opaque proxy artifact. Integrity verification compares manifest, digest, journal relationships, and lifecycle sequence. Export generation must disclose failure or truncation rather than silently cap results.
Investigation procedure
Record the visible receipt and correlation ID, reproduce the state from authoritative records, compare versions and related journals, then collect sanitized evidence. Missing receipts, duplicate authoritative transitions, actor mismatch, unauthorized evidence access, digest mismatch, or an unexplained journal relationship is a release-blocking finding.