Skip to Content

Audit Evidence & Verification

AIX AEP operates under a zero-trust model where every state change, human decision, policy precheck, and tool execution must be cryptographically attested.

The Audit Evidence Timeline

Navigate to Observe → Audit (/aep/audit) to inspect all immutable events:

[2026-07-13 07:49]  policy      entitlement precheck    DECISION: review
[2026-07-13 08:06]  aep-worker  provider grant recorded DECISION: recorded
[2026-07-13 08:22]  ava.kim     release proposed        DECISION: recorded
[2026-07-13 08:45]  security    two-person signoff      DECISION: approved

Verification Coordinates

Each event record binds:

  • Correlation ID: Unique trace identifier (e.g., corr-20260713-001) linking API requests to backend tool runs.
  • Actor Identity: Authentik UUID / service account subject.
  • SLSA Provenance Receipt: Base64-encoded SLSA provenance signed with GCP KMS or Sigstore keys.

Compliance Export & Audit Bundles

Click Export Evidence Bundle to download a verifiable .tar.gz bundle containing:

  • Machine-readable event ledger (events.jsonl)
  • Cryptographic signature block (signature.sig)
  • Cosign public key reference for third-party auditing