HALOWERKSicherwerk
log chain verify
Recomputes every record hash from a canonical JSON representation of id, sequence, timestamp, previous_hash and payload, then checks that each record points to the hash of the record before it. If a root_hash is supplied, the same computed record hashes are folded into a deterministic binary Merkle tree with the last leaf duplicated on odd levels.
POST https://sicher.halowerk.com/v1/log-chain-verifyEingaben
| Feld | Typ | Pflicht | Beschreibung |
|---|---|---|---|
| records | array | Ja | Audit records in chain order. |
| root_hash | string | Nein | Optional claimed Merkle root over the computed record hashes. |
| require_monotonic_sequence | boolean | Nein | Require sequence numbers to increase by one. |
Vollständiges Eingabeschema anzeigen
{
"type": "object",
"required": [
"records"
],
"additionalProperties": false,
"properties": {
"records": {
"type": "array",
"minItems": 1,
"maxItems": 500,
"description": "Audit records in chain order.",
"items": {
"type": "object",
"required": [
"id",
"sequence",
"timestamp",
"previous_hash",
"payload",
"hash"
],
"additionalProperties": false,
"properties": {
"id": {
"type": "string",
"minLength": 1,
"maxLength": 160,
"description": "Stable event id."
},
"sequence": {
"type": "integer",
"minimum": 0,
"maximum": 1000000000,
"description": "Monotonic event position."
},
"timestamp": {
"type": "string",
"minLength": 1,
"maxLength": 80,
"description": "Event time as supplied by the log producer."
},
"previous_hash": {
"anyOf": [
{
"type": "string",
"minLength": 64,
"maxLength": 71
},
{
"type": "null"
}
],
"description": "Hash of the previous record, or null for the first record."
},
"payload": {
"description": "Event payload to include in the record hash."
},
"hash": {
"type": "string",
"minLength": 64,
"maxLength": 71,
"description": "Claimed SHA-256 hash of this record."
}
}
}
},
"root_hash": {
"type": "string",
"minLength": 64,
"maxLength": 71,
"description": "Optional claimed Merkle root over the computed record hashes."
},
"require_monotonic_sequence": {
"type": "boolean",
"default": true,
"description": "Require sequence numbers to increase by one."
}
}
}Veröffentlichtes Eingabebeispiel
{
"records": [
{
"id": "evt-001",
"sequence": 1,
"timestamp": "2026-08-19T09:00:00Z",
"previous_hash": null,
"payload": {
"action": "created",
"actor": "build-bot",
"subject": "release-2026.08.19"
},
"hash": "7f07223905bb01a5b3f2eda8a61c69280b6e75c938712afcb187bbf2a0d696c4"
},
{
"id": "evt-002",
"sequence": 2,
"timestamp": "2026-08-19T09:01:00Z",
"previous_hash": "7f07223905bb01a5b3f2eda8a61c69280b6e75c938712afcb187bbf2a0d696c4",
"payload": {
"action": "approved",
"actor": "release-manager",
"subject": "release-2026.08.19"
},
"hash": "4584b3d398d3dd075f43d61a2c44991c61d3183c22243582c367cdccb1af664c"
}
],
"root_hash": "f6e5b0a2eeed0102fcdd3480a6f7a851bb55679f2d3c7e532df3780f46c1b426"
}Ergebnis & Dokumentation
Veröffentlichtes Ergebnisschema anzeigen
{
"$ref": "https://sicher.halowerk.com/v1/log-chain-verify/schema#/outputSchema"
}Veröffentlichtes Ergebnisbeispiel öffnen
Maschinenlesbare Dokumentation dieses Hubs
Quelle dieser Seite: der veröffentlichte HALOWERK-Katalog. Stand: 2026-11-01, 15:19 UTC.
Weitere Endpunkte dieses Hubs
- Sicherwerk0,005 USDC
container inspect
POSThttps://sicher.halowerk.com/v1/container-inspectReads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and t
- Sicherwerk0,005 USDC
cve check
POSThttps://sicher.halowerk.com/v1/cve-checkQueries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and
- Sicherwerk0,005 USDC
hash reputation
POSThttps://sicher.halowerk.com/v1/hash-reputationQueries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict.