RFC 0006 — Audit export v1

Purpose

Procurement‑friendly artifact that answers who did what when, with hashes.

Fields (audit_export_v1)

schema: "helix.audit.export.v1"
canonicalization_id: "json.c14n.v1"

export_id: string
workspace_id: string
project_id: optional string

time_range:
  start_utc: RFC3339
  end_utc: RFC3339

events_digest: "sha256:…"      # digest of canonical events array
events_blob_sha256: "sha256:…" # sha256 of the stored events blob bytes

signature:
  alg: "ed25519"
  key_id: string
  sig_b64: string

Event format

Each event is canonical JSON with fields:

event_id, ts_utc, actor_subject, action, object_type, object_id, object_digest, metadata

Reference schema

• schemas/hub/audit_export_v1.schema.json
• src/helix/schema/hub/audit_export_v1.schema.json