Audit ledger & signed exports
The platform signs every render decision and every operator action into an append-only ledger ( services/spatialChain and auditEvent). The operator-facing read surface previewed below — list rows, walk the parent chain, issue a signed evidence pack — is wired in the backend (modules/proof/routes.ts) and is rendered here against seeded data while the tenant control plane is being provisioned. The sandbox at /sandbox exercises the same canonical encoder + signing path against the real @enfinitos/sandbox-core package and produces packs the open-source auditor verifies offline.
Audit ledger
Every right issuance, offer event, challenge, and render is recorded as a signed proof linked to its parent.
Pick a proof to inspect.
Click any row to see its full payload + the parent chain back through the ledger.
Export a signed proof pack (conceptual preview)
Tamper-evident archive an auditor can verify offline with the open-source verifier. The backend export endpoint is wired (POST /v1/proof/export); this preview returns a deterministic envelope so the round-trip shape is demonstrable without a live tenant.