Evidence API
The Evidence API creates, lists, and downloads immutable signed records. Each record is a point-in-time JSON manifest with its receipt and verification material.
Signed record operations do not use the monthly action allowance or debit the Wallet. Creation requires the Enterprise entitlement. Normal API rate limits still apply. See the Missions API for Mission replay. Create and revise Operator reviews from Missions in the Console.
POST /v1/evidence-packs
Creates a Signed record claim and stores the exact final manifest as an immutable artifact. A mission export includes the reviews and signed operator decisions that exist at export time. A record exported before a review stays unchanged. Export again to include a later review.
curl -s https://api.getstack.run/v1/evidence-packs \
-H "Authorization: Bearer $STACK_API_KEY" \
-H "Content-Type: application/json" \
-d '{"scope":{"kind":"mission","ref":"ms_abc"}}'Request body
- scope.kind - mission | session | incident | period
- scope.ref - the mission id, session id, incident reference, or period reference
- supersedes - prior Signed record id when this export replaces an earlier record (optional)
- air_gap - record the producer's air-gap verification hint (optional)
GET /v1/evidence-packs
Lists signed record receipts newest-first. Use scope=mission:ms_abc to narrow the list. Each row includes artifact_state.
- stored_manifest - the exact exported file is available from the download route
- receipt_only - the pack predates stored artifacts; its signed receipt remains available
GET /v1/evidence-packs/:pack_id
Returns the signed record receipt and parsed claim. This route does not return the full manifest. It stays unchanged for existing clients.
GET /v1/evidence-packs/:pack_id/download
Returns the exact canonical manifest bytes stored at export time. The response usesapplication/json and includes attachment, length, and SHA-256 digest headers.
curl -fsS https://api.getstack.run/v1/evidence-packs/pck_abc/download \
-H "Authorization: Bearer $STACK_API_KEY" \
-o pck_abc.jsonA missing object, changed byte length, or SHA-256 mismatch fails closed. A receipt-only row has no reconstructed download. Reconstruction could include claims or revocation changes that did not exist at the original export time.
Operator reviews
- GET /v1/missions/:id/operator-review-source - load the signed source set for human review.
- GET /v1/missions/:id/operator-reviews - list dossier and Operator review records.
- POST /v1/missions/:id/operator-reviews - create a signed Operator review.
- POST /v1/missions/:id/operator-reviews/:claim_id/revisions - append a signed revision.
- GET /v1/missions/:id/operator-reviews/:claim_id/download - download the exact COSE artifact.
Source, create, and revise require a signed-in dashboard session from the owner or an active standard or admin member. List and download accept another direct operator principal. Agent and partner-grant contexts receive 403 on every Operator review route.
Current proof limits
The Signed record verifies its included signatures, claim relationships, hashes, and audit fields. It does not prove external chain anchoring when no external anchor is present. It does not decide insurance coverage, liability, causation, or payment. STACK supplies the evidence rails. It does not supply insurance.