Skip to main content
POST
Sign an operator attestation envelope

Authorizations

Authorization
string
header
required

Supabase JWT token in Authorization: Bearer header

Body

application/json

Sign an operator-issued attestation about a checkpoint, signal, or audit-relevant event. Returns an Ed25519-signed envelope binding the operator's identity to the asserted statement at the asserted time.

subject
object
required

What's being attested about (e.g., {type: 'governance_signal', id: 'gs-...'}).

statement
string
required

Free-form operator statement.

actor_role
enum<string>

Audit-actor role per ADR-046.

Available options:
platform_admin,
org_owner,
org_admin,
team_admin,
member,
system

Response

Signed attestation.

attestation_id
string
required
signed_at
string<date-time>
required
signature
string
required

base64url Ed25519 signature.

signed_by
string<uuid>
actor_role
enum<string>

Audit-actor role per ADR-046.

Available options:
platform_admin,
org_owner,
org_admin,
team_admin,
member,
system
subject
object
statement
string
public_key
string

base64url Ed25519 public key.