Audit

The Audit tab in the operator portal lists per-day heads for every appliance on the tenant. Each head is signed by the appliance identity key and independently verifiable.

Inspecting

Open Tenant → Audit, pick a day, and you’ll see:

• Appliance
• Event count
• Last sequence number
• Merkle root (abbreviated, click to copy)
• Signed-at timestamp

Proofs

For any specific request you want to verify, click the head and paste a request ID. The portal returns a Merkle inclusion proof you can verify offline:

# Given head.json and proof.json:
operayde audit verify \
  --head head.json \
  --proof proof.json \
  --request-id req_01HZ...
# verified: sequence 7421 ∈ merkle_root b7c5...f21a

Export

For regulated workloads we support scheduled exports to your own object store (S3-compatible endpoint of your choosing). The exporter runs on the appliance and pushes batches encrypted with a key you own — we never see the bodies.