Enterprise Trust,
Cryptographically
Enforced.

Register Key

A tenant admin calls POST /keys to generate an Ed25519 keypair. The private key is stored securely server-side; the public key is registered for the tenant's namespace and returned for client verification.

// POST /api/v2/tenants/:tenantId/keys
{
  "name": "production-signing-key",
  "algorithm": "ed25519"
}

// Response
{
  "keyId": "key_7f3a9b2c",
  "publicKey": "MCowBQYDK2VdAyEA...",
  "tenantId": "tenant_acme",
  "createdAt": "2026-04-22T10:00:00Z"
}

Sign & Append Record

The Trust Engine hashes the record payload (SHA-256), appends the previousHash from the chain tip, then signs the resulting hash with the tenant's Ed25519 private key. The record is atomically appended to the chain.

// POST /api/v2/tenants/:tenantId/records
{
  "keyId": "key_7f3a9b2c",
  "payload": {
    "action": "contract.approved",
    "subjectId": "contract_8819",
    "metadata": { "approvedBy": "alice@acme.com" }
  }
}

// Response — immutable chain entry
{
  "recordId": "rec_4c1d87ea",
  "hash": "a3f9b2...d7e1c4",
  "previousHash": "c1e02a...9f3b82",
  "signature": "0x4d3f...",
  "timestamp": "2026-04-22T10:01:22Z",
  "approvalStatus": "pending"
}

Verify & Approve

Verifiers call POST /trust/verify to confirm a record's signature against the public key. Approvers cast signed votes via POST /approvals. When the policy quorum is met, the record status transitions to 'trusted'.

// POST /api/v2/tenants/:tenantId/trust/verify
{
  "recordId": "rec_4c1d87ea"
}
// → { "valid": true, "signedBy": "key_7f3a9b2c" }

// POST /api/v2/tenants/:tenantId/approvals
{
  "recordId": "rec_4c1d87ea",
  "vote": "approve",
  "approverId": "user_alice"
}

// GET /api/v2/tenants/:tenantId/approvals/rec_4c1d87ea
{
  "quorum": { "required": 2, "received": 2 },
  "status": "approved",
  "voters": ["user_alice", "user_bob"]
}

Attach an approval policy to a record type or tenant namespace. Specify N (required votes) from M (allowlist members). Policies can be per-action, per-tenant, or global.

{
  "policyId": "policy_contract_approval",
  "required": 2,
  "allowlist": [
    "user_alice",
    "user_bob",
    "user_carol"
  ],
  "action": "contract.*"
}

Each approver in the allowlist calls POST /approvals with their vote. Every vote is signed with the approver's identity token. Votes are immutable once cast.

// Approver casts signed vote
POST /api/v2/tenants/:id/approvals
{
  "recordId":   "rec_4c1d87ea",
  "vote":        "approve",
  "approverId": "user_alice"
}

// Quorum status: 1/2 received

When the Nth vote is received and the quorum threshold is met, KTL atomically updates the record status to 'trusted'. Webhooks fire. The audit log entry is sealed.

// Quorum reached — record transitions
{
  "recordId":     "rec_4c1d87ea",
  "quorum":       { "required":2, "received":2 },
  "status":       "trusted",
  "trustedAt":    "2026-04-22T10:09:00Z",
  "webhookFired": true
}