Step 04 — Prove
Immutable trail → tamper‑evident export
Events hash into a chain you can hand to counsel — citations, approvals, and governed workflow steps — exports stay honest under review.
Exporter preview — tamper‑evident format (illustrative)
{
"export_id": "[sample]",
"tenant": "[your-org]",
"window": { "start": "[iso-from]", "end": "[iso-to]" },
"audit_chain": [
{ "step": "ingress.normalized", "fingerprint": "[hash]", "sources": ["[channel]", "[channel]"] },
{ "step": "ai.suggestion", "model": "[your-model]", "sources_cited": true, "approved_by": "[user]" },
{ "step": "workflow.fired", "playbook": "[your-playbook]", "controls_checked": true }
],
"signature": "[cryptographic]"
}
Structure is illustrative — your pilot mirrors your real schema and policies.