Event Ledger

Four endpoints for ingesting business events into the signed, append-only ledger, then listing, retrieving, and verifying them.

POST/eventsIngest event

Records any business event in the append-only ledger, who did what, when, and under what authority. Immutable, timestamped, and cryptographically signed at ingestion. Retained according to the specified policy.

POST /events
Authorization: Bearer invoance_live_xxx
Idempotency-Key: policy-8472-approval
Content-Type: application/json

{
  "event_type":      "policy.approval",
  "event_time":      "2026-02-07T12:00:00Z",
  "payload": {
    "policy_id":     "pol_8472",
    "approved_by":   "risk_committee",
    "decision":      "approved"
  }
}

GET/eventsList events

Returns a paginated list of ledger events for the authenticated tenant. Supports filtering by date range and event type. Maximum 500 results per page, cached for 30 seconds.

GET /events?page=1&limit=50&event_type=policy.approval
Authorization: Bearer invoance_live_xxx

GET/events/:event_idRetrieve event

Returns an immutable event record including the full payload and all cryptographic hashes. Read-only. Requires the read scope. Records are append-only and cannot be modified or deleted.

GET /events/evt_01HX…
Authorization: Bearer invoance_live_xxx

POST/events/:event_id/verifyVerify event hash

Compares a submitted hash or raw payload against the anchored event hashes. You can submit either a pre-computed payload_hash or the raw payload object, the server will canonicalize and hash it for you.

POST /events/evt_01HX…/verify
Authorization: Bearer invoance_live_xxx
Content-Type: application/json

{
  "payload_hash": "a3f2b1c9d4e8f7…"
}

POST /events Authorization: Bearer invoance_live_xxx Idempotency-Key: policy-8472-approval Content-Type: application/json { "event_type": "policy.approval", "event_time": "2026-02-07T12:00:00Z", "payload": { "policy_id": "pol_8472", "approved_by": "risk_committee", "decision": "approved" } }