Records and security

Export and verify the signed ledger

Download every request and decision as a signed export, check it offline, and share a record with an auditor.

About 5 minutes

Transcript (30 seconds)

Every request and decision is signed and chained.

Export the ledger as JSONL, CSV or an evidence pack.

Verify it offline with one command.

Share a single record with an auditor.

Legal holds keep a record past retention.

Before you start

Steps

  1. Start an export

    Under Exports, pick JSONL (verifiable), CSV or an evidence pack, and optional filters. Large exports run in the background.

  2. Download

    Download from the page, or use the signed link from the API. Links last 24 hours.

  3. Verify offline

    The verifier checks every sequence number, hash link, payload hash and Ed25519 signature.

    npx -p @promptcompute/ledger-verify pc-ledger verify ledger.jsonl \
      --keys https://api.promptcompute.ai/.well-known/promptcompute-keys.json
  4. Share one record

    On a request, press Share with an auditor to create a read-only link that lasts 1 to 30 days.

  5. Keep a record

    Place a legal hold on a request so retention never removes it.

Use cases

An audit

The situation
An auditor asks for proof that every production change was approved.
What to do
Export the last quarter as JSONL and an evidence pack.
What happens
They verify the export themselves; the pack maps records to the controls they test.

A customer dispute

The situation
A customer disputes a refund decision.
What to do
Place a legal hold and share the record with your counsel.
What happens
The record stays, and counsel sees who decided, when and why.

What you will see

You have a file anyone can check without trusting promptcompute, and a record you can share or hold.

It worked when

Example output: pc-ledger verify

Checked 1,284 entries: sequence, hash chain, payload hashes, signatures
OK: ledger verified for org_01j... (keys: 2)

If something goes wrong

Verification fails on a filtered export
Filtered exports are checked entry by entry; use the file as downloaded, with its header line.
The download link expired
Links last 24 hours. Download again from Exports.
Old payloads are missing
Retention removes payloads past your plan's period. Legal holds keep them.