Admin · NDHM HDMP §10.5 · DPDP Act §8(4)
Audit log - hash-chained
Per-request audit pointers, persisted when VAIDYAH_SQLITE_PATH is set. Each row is chained via SHA-256(prev_hash + payload) so tampering breaks the chain. Validation surface ships with every record. Stage-2 production deploys pipe this into S3 Object Lock / Cloud Audit Logs.
GET /v1/admin/audit · GET /v1/admin/audit/validate · POST /v1/admin/audit/purge
Entries (visible)
0
0 success · 0 errored
Hash-chain
-
every prev_hash matches
Last purge
-
no purge this session
Purge applies to the active tenant only (resolved server-side from the auth token). DPDP Act 2023 §8(7) - right to erasure.
| Timestamp (UTC) | Endpoint | Status | Job | Hash |
|---|---|---|---|---|
| No audit rows. Make a workflow request, then refresh. | ||||
Tip: configure VAIDYAH_API_KEY with the admin role to access this surface. See api/app/auth.py + _require_admin in api/app/main.py.