taskq.xyz / audit-reports
Audit-ready evidence

Turn the chain into the report. Not a screenshot.

TaskQ audit reports package signed HashIQ entries, placement proofs, credential access events, registry snapshots, blocked attempts, settlement references, and external anchors into evidence a buyer can review, export, and verify.

AUDIT REPORTVERIFIED
scopeCA / production
requests1,000
blocked17
chain_replaypassed
anchor_statusverified
credential_events1,000
settlementreconciled
exportableyes
Export bundle

Evidence leaves as a bundle, not a PDF alone.

The PDF is the human layer. The export bundle is the proof layer: signed chain entries, placement proofs, credential access events, registry snapshot proofs, attestation references, settlement journals, anchor proofs, and verifier instructions.

audit-export.json — verifiable
{
  "report_id": "rpt_2026_06_12_ca",
  "scope": { "tenant": "cus_...", "range": "184000-184999" },
  "chain_entries": "entries.ndjson",
  "placement_proofs": "placement.ndjson",
  "credential_access": "credential-access.ndjson",
  "registry_snapshots": "registry-proofs.json",
  "settlement_journals": "settlement.ndjson",
  "anchors": "anchors.json",
  "verifier": "taskq-verify"
}
Report contents

The table of evidence is the product surface.

Each row in the report maps back to a signed event. The buyer can inspect the summary, then drill into the exact proof behind any request.

Evidence classWhat it provesExport material
Policy enforcementResolved policy, constraints, blocked attempts, no looseningpolicy_hash + rejection entries
PlacementChosen worker satisfied constraints; no cheaper compliant option skippedplacement_proof + registry snapshot
Credential accessWhich fingerprint was used, where, under which custody classcredential.access events
Execution integrityCanonical request/response hashes and terminal statusHashIQ chain entries
SettlementEvery billable request maps to a journal linejournal entries + reconciler output
AnchoringThe chain range was witnessed and cannot silently moverange root + witness signatures
Verifier flow

The auditor does not need to believe the dashboard.

Verification replays the chain range, validates signatures, checks anchors, rebuilds placement decisions from registry snapshots, confirms credential access events, and reconciles settlement references.

load export bundleok
validate chain signaturesok
verify anchor rangewitnessed
replay placement proofno cheaper skipped
check credential accessbound
reconcile settlementparity
resultBUNDLE_VERIFICATION_PASSED
Exception reporting

Blocked attempts are not shame. They are proof the control plane worked.

When a request cannot meet jurisdiction, custody, attestation, capacity, or price policy, TaskQ returns refusal with evidence instead of silently relaxing constraints.

409
NO_COMPLIANT_CAPACITY

The pool was empty. The report shows the policy hash, empty eligible-set proof, and the constraints that eliminated workers.

422
POLICY_LOOSENING_FORBIDDEN

The request tried to weaken defaults. The report proves customer defaults stayed stronger than a request-level override.

402
OVER_CEILING

Compliant capacity existed but exceeded the price ceiling. The report shows floor-price evidence and why execution was refused.

✓
RECONCILIATION

Each closed billable request has exactly one settlement journal, and every journal points back to a valid chain entry.

Give buyers evidence they can take with them.

TaskQ’s honest moat is exportable proof: the customer can leave with their evidence, but no competitor can backfill yesterday’s witnessed chain.