The audit trail that survives your shamens.

This surface is a read-only ledger observatory: refusal codes, verification posture, freshness, and append-only event history all sit in the first viewport because that is the product.

Open ledger View verifier page

Refusal moat

typed codes live

Bad writes are meant to stop in public, not hide in logs.

Verification path

client-side ready

Tenant pubkeys and append-only event rows are first-class UI citizens.

Freshness

< 1 min target

If the stream is polling, it should say so plainly instead of faking realtime.

The magical moment

01 refusal

A malformed write is rejected with a stable code and zero append side effect.

02 correction

The caller resubmits a compliant payload with context, acceptance, and closeout proof.

03 ledger

A signed event lands and becomes a visible row instead of an invisible success.

Surface links

Session-centric ledger Task verifier detail Tenant pubkey example

Current deployed surface is a static observatory snapshot while live read wiring is still in progress.