Evidence API

POST https://api.xase.ai/v1/evidence/bundles

# Request Body
{
  "session_id": "sess_7f6e5d4c",
  "purpose": "regulatory_audit",
  "format": "standard",  // standard, pdf, legal_bundle
  "include_operations": true
}

# Response (200 OK)
{
  "bundle_id": "bundle_a1b2c3d4",
  "status": "PROCESSING",
  "created_at": "2026-01-20T14:30:00Z",
  "estimated_completion": "2026-01-20T14:32:00Z",
  "session_id": "sess_7f6e5d4c"
}

GET https://api.xase.ai/v1/evidence/bundles/{bundle_id}

# Response (200 OK)
{
  "bundle_id": "bundle_a1b2c3d4",
  "status": "COMPLETED",  // PROCESSING, COMPLETED, FAILED
  "created_at": "2026-01-20T14:30:00Z",
  "completed_at": "2026-01-20T14:31:45Z",
  "session_id": "sess_7f6e5d4c",
  "size_bytes": 1457892,
  "download_url": "https://api.xase.ai/v1/evidence/bundles/bundle_a1b2c3d4/download",
  "contents": {
    "records": 157,
    "operations": 89,
    "timestamp_range": {
      "first": "2026-01-15T14:32:00Z",
      "last": "2026-01-20T14:28:12Z"
    }
  }
}

GET https://api.xase.ai/v1/evidence/bundles/{bundle_id}/download

# Response
# Binary file (application/zip)
# Contains evidence bundle as a ZIP file

GET https://api.xase.ai/v1/evidence/bundles?session_id=sess_7f6e5d4c

# Query Parameters
# session_id (optional) - Filter by session ID
# status (optional) - Filter by status (PROCESSING, COMPLETED, FAILED)
# created_after (optional) - Filter by creation date
# created_before (optional) - Filter by creation date
# limit (optional) - Limit results (default: 20, max: 100)
# offset (optional) - Pagination offset

# Response (200 OK)
{
  "data": [
    {
      "bundle_id": "bundle_a1b2c3d4",
      "status": "COMPLETED",
      "created_at": "2026-01-20T14:30:00Z",
      "completed_at": "2026-01-20T14:31:45Z",
      "session_id": "sess_7f6e5d4c",
      "size_bytes": 1457892
    },
    {
      "bundle_id": "bundle_e5f6g7h8",
      "status": "COMPLETED",
      "created_at": "2026-01-15T18:12:00Z",
      "completed_at": "2026-01-15T18:14:22Z",
      "session_id": "sess_7f6e5d4c",
      "size_bytes": 982451
    }
  ],
  "pagination": {
    "total": 2,
    "limit": 20,
    "offset": 0,
    "has_more": false
  }
}

POST https://api.xase.ai/v1/evidence/verify

# Request Body
{
  "bundle_id": "bundle_a1b2c3d4"
}

# Alternative: Upload a bundle file
# POST https://api.xase.ai/v1/evidence/verify
# Content-Type: multipart/form-data
# bundle: [binary file]

# Response (200 OK)
{
  "verification": {
    "valid": true,
    "signature_valid": true,
    "chain_intact": true,
    "timestamps_valid": true,
    "contents_valid": true
  },
  "details": {
    "signing_authority": "Xase Certificate Authority",
    "signature_algorithm": "RSA-SHA256",
    "timestamp_authority": "SwissSign TSA",
    "records_count": 157,
    "operations_count": 89
  }
}

evidence_bundle_{id}.zip
├── manifest.json            # Bundle metadata and integrity hashes
├── session.json             # Access session details
├── policy.json              # Policy that was applied
├── authorization.json       # Authorization details and signatures
├── records/                 # Records accessed in the session
│   ├── record_001.json
│   ├── record_002.json
│   └── ...
├── operations/              # Operations performed on records
│   ├── operation_001.json
│   ├── operation_002.json
│   └── ...
├── signatures/
│   ├── bundle.sig           # Signature of the entire bundle
│   ├── certificate.pem      # Xase signing certificate
│   └── timestamp_token.tst  # Qualified timestamp (eIDAS)
└── verify.sh                # Offline verification script

evidence_bundle_{id}.zip
├── [Standard Bundle Contents]
├── legal_documentation/
│   ├── legal_summary.pdf          # Legal summary of the evidence
│   ├── compliance_statement.pdf   # Compliance with regulations
│   ├── chain_of_custody.pdf       # Chain of custody documentation
│   └── expert_analysis.pdf        # Technical expert analysis
└── report.pdf                     # Complete evidence report in PDF format

{
  "bundle_id": "bundle_a1b2c3d4",
  "created_at": "2026-01-20T14:30:00Z",
  "version": "1.0",
  "session_id": "sess_7f6e5d4c",
  "format": "standard",
  "contents": [
    {
      "file": "session.json",
      "hash": "sha256:8a02a0ab12fe4c8b3487bb9f2aef57b82d90b7ec4e0b04ef9d731e8m7f7dfd1a"
    },
    {
      "file": "policy.json",
      "hash": "sha256:7f8e9d2b34a5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d5e6f7a8b9c0d1"
    },
    {
      "file": "records/record_001.json",
      "hash": "sha256:1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f1a2b"
    },
    // ... more file hashes
  ],
  "merkle_root": "sha256:9f8e7d6c5b4a3b2c1d0e9f8a7b6c5d4e3f2a1b0c9d8e7f6a5b4c3d2e1f0a9b8c7"
}

import xase
import time

client = xase.Client(api_key="sk_...")

# Generate evidence bundle
bundle_request = client.evidence.create_bundle(
    session_id="sess_7f6e5d4c",
    purpose="regulatory_audit",
    format="legal_bundle",
    include_operations=True
)

# Poll for completion
while bundle_request.status == "PROCESSING":
    print("Processing bundle...")
    time.sleep(5)
    bundle_request.refresh()

if bundle_request.status == "COMPLETED":
    # Download bundle
    bundle_request.download("./evidence_bundle.zip")
    print(f"Bundle downloaded: {bundle_request.size_bytes} bytes")
else:
    print(f"Bundle generation failed: {bundle_request.error}")

# List all evidence bundles
bundles = client.evidence.list_bundles(
    session_id="sess_7f6e5d4c",
    status="COMPLETED"
)

for bundle in bundles:
    print(f"Bundle {bundle.id}")
    print(f"Created: {bundle.created_at}")
    print(f"Size: {bundle.size_bytes} bytes")
    
    # Download specific bundle
    bundle.download(f"./evidence_{bundle.id}.zip")

# Verify bundle by ID
verification = client.evidence.verify_bundle(bundle_id="bundle_a1b2c3d4")

if verification.valid:
    print("Bundle is valid!")
    print(f"Signed by: {verification.details.signing_authority}")
    print(f"Timestamp: {verification.details.timestamp_authority}")
else:
    print("Bundle verification failed:")
    for error in verification.errors:
        print(f"- {error}")
        
# Verify local bundle file
with open("./evidence_bundle.zip", "rb") as f:
    local_verification = client.evidence.verify_bundle_file(f)
    
if local_verification.valid:
    print("Local bundle is valid!")

# Extract and parse bundle contents
import zipfile
import json
import os

# Extract bundle
with zipfile.ZipFile("./evidence_bundle.zip", "r") as zip_ref:
    zip_ref.extractall("./evidence_extracted")

# Read manifest
with open("./evidence_extracted/manifest.json") as f:
    manifest = json.load(f)

# Read session details
with open("./evidence_extracted/session.json") as f:
    session = json.load(f)
    
print(f"Session ID: {session['session_id']}")
print(f"Dataset: {session['dataset_id']}")

# Verify individual files against manifest
for content in manifest["contents"]:
    file_path = os.path.join("./evidence_extracted", content["file"])
    if os.path.exists(file_path):
        # Verify hash matches manifest
        # (implementation not shown)