Hanzo
OpenapiTrust

Reads the audit rows that stand behind one control, over a window.

Reads the audit rows that stand behind one control, over a window.

GET /v1/trust/evidence

Addresshttps://api.hanzo.ai/v1/trust/evidence
MethodGET
Operationget_trust_evidence
AuthAuthorization: Bearer $HANZO_API_KEY

Reads the audit rows that stand behind one control, over a window.

The inventory decides what evidences what: a control names the audit actions that are its trail, and this resolves the control id to those actions and reads them. So evidence cannot drift from the inventory, and it is scoped to your own organization — the query carries no organization field for a caller to fill in.

A control that nothing in the trail evidences says so plainly rather than answering an empty page, because an empty page reads like a clean quarter. A deployment with no audit store answers 501 and says the trail was not read, for the same reason.

Request

4 fields.

FieldInTypeRequiredDescription
controlquerystringControl is the control id whose trail to read.
fromquerystringFrom is the inclusive lower bound, an RFC 3339 date or instant ("2026-01-01" or "2026-01-01T00:00:00Z"). Empty leaves it unbounded.
toquerystringTo is the upper bound, same form and same tolerance.
limitquerystringLimit caps the rows returned, 1..1000, default 100.

Response

StatusBodyMeaning
200ok

200 body — 1 field.

FieldInTypeAlwaysDescription
(body)bodyanyyes

Failure carries the platform error shape — see Errors.

Examples

hanzo has no subcommand for this operation — the CLI serves only what cloud's live route table confirms. Use HTTP or an SDK.


Trust API · All Hanzo APIs · Interactive reference

How is this guide?

On this page