Live Demo

Audit Engine

Run a simulated ACK compliance pipeline and watch the audit trail build in real time. Every gate evaluation, sanctions screen, and credential check generates a structured audit record with evidence, timestamps, and regulatory tags.

Audit Record Format

Each audit record maps ACK compliance requirements to regulatory standards, enabling forensic traceability and regulatory alignment.

Field ACK Requirement Regulatory Standard
timestamp Event ordering & chronological proof ISO 8601 UTC timestamp for compliance record retention (FinCEN GuidanceGuide, FATF RCMR §22)
step Compliance pipeline stage identifier ACK 7-gate model: DID Resolution, Delegation Chain, Capability Envelope, Jurisdiction Screening, Sanctions Screening, Revocation Status, Crypto Health
checkpoint Control type classification (Gate/Monitor/Obligation) Gate: preventive control (must pass before transaction). Monitor: detective control (logged post-execution). Obligation: mitigative requirement (post-transaction remediation).
result Pass/Fail/Warn determination & remediation PASS: compliant. FAIL: non-compliant, transaction blocked. WARN: conditional, enhanced due diligence required. Maps to NIST SP 800-53 §SI-4 (Information System Monitoring).
evidence Detailed findings from each compliance check Key-value pairs documenting: verification results, screen matches, credential status, jurisdiction applicability. Satisfies audit log requirements under FinCEN Reg §1010.410 & EU AML5 §47.
regulatory Applicable regulatory frameworks per step Array of standards satisfied: W3C DID Core, NIST SP 800 series, FinCEN Guidance, FATF RCMR, OFAC regulations, EU Consolidated List, Travel Rule (FinCEN §1010.810), CA PECA Schedule 1.
durationMs Latency & performance monitoring Milliseconds spent on step execution. Enables SLA tracking and forensic timing analysis for transaction delay disputes.
id Unique audit record identifier & correlation ID UUID-like format (aud-001 through aud-007) for immutable audit trail. Enables record linkage to transaction hash & blockchain proof of custody.

Understanding Audit Checkpoints

⬡ Gate

Preventive control evaluated before transaction execution. Must result in PASS for transaction to proceed. If FAIL, transaction is blocked immediately.

◆ Obligation

Mitigative requirement evaluated after transaction execution. Failure triggers remediation workflow (e.g., reporting, account freezing). No post-execution reversal; used for advisory & regulatory notification.

Regulatory Alignment

Gate Controls (6 steps)
  • DID Resolution: W3C DID Core, NIST SP 800-122
  • Delegation Chain: NIST SP 800-162, ISO 27001
  • Capability Envelope: FinCEN Guidance, FATF RCMR
  • Jurisdiction Screening: FinCEN §1010.810, FATF RBA
  • Sanctions Screening: OFAC EO 13959, EU Reg 833/2014
  • Revocation Status: CA PECA Schedule 1, EU AML5
Obligation Metrics (1 step)
  • Crypto Health Advisory: Post-execution guidance on quantum resilience
  • Key Type Assessment: ED25519, CRYSTALS-Kyber readiness
  • Migration Recommendations: Threshold-based advisory
  • Standards: NIST SP 800-227, ETSI TR 103 645