Audit

Package auditlog is your org's tamper-evident audit trail: every security-relevant event, hash-chained and readable.

All API references → · Six flows, four surfaces →


Base URL	`https://api.hanzo.ai`
Operations	1
Auth	`Authorization: Bearer $HANZO_API_KEY`

List reads the caller's OWN org audit trail, newest first, with the total the filter matched so a console can page it.

GET /v1/audit

List reads the caller's OWN org audit trail, newest first, with the total the filter matched so a console can page it.

Every filter is optional and applies WITHIN the caller's org — the org itself is the validated principal's and can never be widened by a request. Fails closed: an absent principal is a true "not signed in" (401), and a deployment with no local tamper-evident store answers an honest 501 rather than silently serving somebody else's trail.

Parameter	In	Type	Required	Description
`sub`	query	string	—	Sub narrows the trail to one actor — the validated subject that made the request.
`action`	query	string	—	Action narrows it to one action name, e.g.
`resource`	query	string	—	Resource narrows it to one resource TYPE, e.g.
`resourceId`	query	string	—	ResourceID narrows it to one resource instance.
`result`	query	string	—	Result narrows it to one outcome: "success", "deny" or "error".
`since`	query	string	—	Since is the inclusive lower time bound, RFC3339.
`until`	query	string	—	Until is the upper time bound, RFC3339, with the same tolerance.
`pageSize`	query	string	—	PageSize is rows per page, default 100.
`p`	query	string	—	Page is the 1-based page number, driving the offset.

All Hanzo APIs · Interactive reference

Audit

audit

List reads the caller's OWN org audit trail, newest first, with the total the filter matched so a console can page it.

On this page