English

Attesto public handbook

This page gives the complete English path for users, developers, and external verifiers. English is the canonical API and SDK contract language.

User docs

Attesto helps teams create verifiable evidence streams. Tenant users manage systems, one-shot system keys, Proofstream views, exports, webhooks, connectors, billing, and verifier bundles from https://dashboard.attesto.eu.

Attesto 1.0 covers events, receipts, verification, anchoring, and exports.
Attesto 2.0 adds Proofstream, windows, checkpoints, consistency, witnesses, quorum, fork evidence, bundles, and offline verification.
Local Vault is the outbound-only enterprise relay, spool, and optional customer witness.

Developer docs

Use the Python SDK, TypeScript SDK, or the public API at https://verify.attesto.eu. Keep system keys out of browser bundles.

from attesto import AttestoClient
import os

client = AttestoClient(api_key=os.environ["ATTESTO_API_KEY"])
ack = client.log_event(
    type="ai.decision",
    status="verified",
    source_ref="case-2026-0001:decision-1",
    payload={"decision": "manual_review", "policy_id": "policy-2026-01"},
)
print(ack.id)

import { AttestoClient } from "@attesto/sdk";

const client = new AttestoClient({ apiKey: process.env.ATTESTO_API_KEY! });
const ack = await client.logEvent({
  type: "ai.decision",
  status: "verified",
  sourceRef: "case-2026-0001:decision-1",
  payload: { decision: "manual_review", policy_id: "policy-2026-01" },
});
console.log(ack.id);

API writes require idempotency. Webhook receivers must verify X-Attesto-Signature over the raw body and dedupe X-Attesto-Delivery-Id. Connector families include signed webhook, GitHub, GitLab, and S3/R2 object commitments.

Trust and verification docs

External parties can verify Attesto output with POST /v2/verify or the offline verifier:

curl -X POST https://verify.attesto.eu/v2/verify \
  -H "Content-Type: application/json" \
  --data-binary @attesto-bundle.json

attesto verify bundle ./attesto-bundle.json

The verifier rejects changed payloads, changed sequence numbers, removed events, inserted events, stale checkpoints, wrong witness signatures, wrong anchors, and ambiguous fork evidence.

Regulatory evidence

Attesto provides evidence support for compliance controls. It does not certify legal compliance by itself. Public mappings cover AI Act, NIS2, CRA, ISO 27001, SOC 2, and eIDAS/evidence support. Update the Changelog whenever public API, SDK, webhook, connector, verifier, or documentation behavior changes.