Evidence API

Endpoints for accessing scan evidence and artifacts.

Overview

Evidence provides detailed context for scans, useful for debugging violations.

Get Evidence


GET /v1/scans/:scan_id/evidence

Response


{
  "scan_id": "scan_abc123",
  "evidence": {
    "request_count": 3,
    "total_tokens": 4500,
    "timeline": [
      {
        "timestamp": "2024-01-15T10:30:00Z",
        "action": "prompt",
        "tokens": 1500
      },
      {
        "timestamp": "2024-01-15T10:30:05Z",
        "action": "response",
        "tokens": 3000
      }
    ]
  }
}

Evidence Types

Type	Description
`timeline`	Sequence of actions
`token_breakdown`	Token usage by type
`violations`	Detected issues

Download Evidence


GET /v1/scans/:scan_id/evidence/download

Returns a ZIP file with full evidence package.