Audit Archive Export
Exporting the audit archive to customer-controlled storage
Esta página aún no está disponible en tu idioma.
The audit archive is written to the configured S3-compatible bucket or filesystem archive root. Operators can copy archive objects to customer-controlled storage with ordinary object-store tooling after each anchor has been published.
Export Contents
Section titled “Export Contents”meta-roots/*.json: signed meta-root manifests.batches/<tenant_id>/<batch_id>/events.ndjson.zst: compressed canonical event JSON lines for each batch.
Verification Before Transfer
Section titled “Verification Before Transfer”Build the verifier from the repository (release images ship service containers only, not this binary):
cargo build --release -p nexus-audit --bin nexus-audit-verifyThen run:
nexus-audit-verify verify --archive-path ./archiveOnly transfer archives that pass local verification. If verification fails, follow Runbook: Audit Verifier Failure.
See also Audit Event Contract for the schema and Merkle construction behind these archive objects, and Audit Proof Format for the inclusion-proof structure the verifier checks.