---
title: "Verify audit log chain integrity"
method: GET
path: "/v1/governance/audit-logs/verify"
tags: ["Governance"]
---

# Verify audit log chain integrity

`GET /v1/governance/audit-logs/verify`

Re-verifies the calling tenant's tamper-evident audit hash chain and returns a structured verdict (intact, verified count, and the first broken tenant_seq when a break is found). The check is strictly read-only: it recomputes nothing into storage and never mutates an audit record. Use the optional maxRecords query parameter to bound how many records are inspected.

## Query parameters

- `maxRecords` integer — Maximum number of records to inspect; clamped to the server bound. Omit to use the default bound.

## Response `200`

OK

- AuditChainVerificationResponse
  - `firstBrokenSeq` integer — tenant_seq of the first record that failed verification; omitted when the chain is intact
  - `intact` boolean, required — True when every inspected record links to the previous one and matches its stored hash
  - `truncated` boolean, required — True when the chain has more records than the inspection bound allowed; the verdict then covers only a prefix
  - `verifiedCount` integer, required — Number of records confirmed intact (full inspected count when intact, otherwise the count before the first break)

## Other responses

- `default` — Error

---

[API](https://skmtc.net/lerian/apis/identity-plugin.md) · [All operations](https://skmtc.net/lerian/apis/identity-plugin/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lerian/identity-plugin/versions/25daba385532/schema)