API documentation

Validation packs

A validation pack is the org-level evidence bundle for Decionis. Use it when a policy team, auditor, or regulator needs a downloadable record of governance activity, export integrity, and current evidence posture, rather than one per-decision Decision Dossier.

When to use

Decision Dossiers and validation packs solve different evidence problems.

Decision Dossier

Use a Decision Dossier when you need the governed evidence for one decision, one case, or one workflow outcome. It is the per-decision proof surface.

Validation pack

Use a validation pack when you need the org-level evidence bundle: export metadata, hashes, current readiness posture, and optional workflow event coverage suitable for audit or supervisory review.

NeedBest surface
Verify one governed actionhttps://docs.decionis.com/decision-dossier
Download org-level regulator evidencehttps://docs.decionis.com/validation-packs
Review current policy mapping and onboarding statehttps://docs.decionis.com/quickstart

Routes

These routes are available to org-scoped callers with audit read/write scope.

POST/v1/orgs/:orgId/audit-exportsAPI key

Queue a new validation pack build in JSON, CSV, or PDF. Set include_events to false if you want a leaner bundle without workflow events.

curl -X POST https://api.decionis.com/v1/orgs/<org_id>/audit-exports \
  -H "Authorization: Bearer dcy_org_xxx" \
  -H "Content-Type: application/json" \
  -d '{
    "format": "json",
    "include_events": true
  }'
GET/v1/orgs/:orgId/audit-exports?limit=8API key

List recent validation packs so the workspace can reopen and download earlier evidence bundles.

GET/v1/orgs/:orgId/audit-exports/:exportIdAPI key

Read export status, manifest hash, bundle hash, and last error for one validation pack.

GET/v1/orgs/:orgId/audit-exports/:exportId/downloadAPI key

Download the built artifact once the export status is SUCCEEDED.

Bundle shape

A validation pack is intentionally an evidence bundle, not a hidden service export.

FieldMeaning
statusPENDING, RUNNING, SUCCEEDED, or FAILED export state.
include_eventsWhether the export includes workflow and event-log coverage.
manifest_sha256Hash of the export manifest metadata.
bundle_sha256Integrity hash of the generated downloadable artifact.
bundle_signature_hmac_sha256Signature fingerprint recorded with the generated bundle.
completed_atCompletion timestamp for the final downloadable pack.

Request flow

This is the common pattern after the workspace is live and using an org API key.

# 1. Queue a validation pack
curl -X POST https://api.decionis.com/v1/orgs/<org_id>/audit-exports \
  -H "Authorization: Bearer dcy_org_xxx" \
  -H "Content-Type: application/json" \
  -d '{"format":"pdf","include_events":true}'

# 2. Poll the export row
curl https://api.decionis.com/v1/orgs/<org_id>/audit-exports/<export_id> \
  -H "Authorization: Bearer dcy_org_xxx"

# 3. Download the finished artifact
curl https://api.decionis.com/v1/orgs/<org_id>/audit-exports/<export_id>/download \
  -H "Authorization: Bearer dcy_org_xxx" \
  -o decionis-validation-pack.pdf
Companion surfaceReason
Decision DossierPer-decision proof and public verification link.
Policy EncodingVersion boundary for the policy logic referenced by the pack.
QuickstartDocs-led zero-onboarding flow that issues the org key used here.