OpenChainGraph Suite · ART-517 · Government & Public-Money Payment Evidence

Audit-Trail Completeness Attestation

Attests that an audit log covering transactions and user activity is complete and gap-free over a window you declare, against a continuity mechanism you declare: sequence numbers, hash-chain links, or periodic control totals. Enumerates gap position where the mechanism can localize one, checks privileged-action coverage separately from transaction coverage, checks retention conformance, and reports an undecidable list where the mechanism genuinely cannot support a position-level verdict. Does not ingest or parse any log — you supply counts and the declared mechanism. Region-portable: window, retention duty, and mechanism are all inputs you declare, never a hardcoded country, currency, or scheme.

Sequence, hash-chain, or control-total mechanism Privileged-action coverage, evaluated separately Undecidable vs gap-detected, kept distinct

🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.

⚠ No log ingestion, no vendor log format parsing. Users are represented as role classes / opaque refs only — never a username, email, IP, or free-text identity field. This tool does not decide whether any underlying control has been met; it is a deterministic completeness check over the figures you supply for one window. It computes once when you press the button, stores nothing, runs on no schedule, and retains nothing.

Window and continuity mechanism

The demo figures below are synthetic and already loaded, so you can press Run without entering anything of your own. Load the known-gap demo to see the flag this tool exists to catch, or the region-portability demo for the §6.9 second-jurisdiction case.

Window start (ISO 8601)

Window end (ISO 8601)

Continuity mechanism

Declared retention (days)

Required retention (days, your regime's declared duty)

sequence_number mechanism

Sequence range start

Sequence range end

Observed sequence numbers (JSON array of integers)

Event counts and known candidates

Observed event counts by type (JSON object; include transaction and privileged_action) Gap candidates you already know about (JSON array: position)

Enumerated gaps

Undecidable positions

Privileged-action coverage

Retention conformance

Known gap candidates reconciled

Execution Hash (SHA-256)

What this does not do

It does not ingest a log, parse a vendor log format, or verify that the counts and mechanism summary you supply are themselves accurate — that is out of scope by design (zero PII, zero log ingestion). It is not a signature or cryptographic chain verifier: for structural conformance of a single IETF agent audit-trail record use ART-237; for a Merkle root over this suite's own execution receipts use CRY-05. Neither evaluates a window or a population of external log events, and neither checks privileged-action coverage — that is this node.

Pairs with ART-516 daily reconciliation attestation and ART-518 bulk disbursement integrity in the government-payment-lifecycle chain (§6.7), and with ART-459 for RBAC segregation-of-duties evidence.

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `validate_audit_trail_completeness`. Task: Attest that an audit log covering transactions and user activity is complete and gap-free over a caller-declared window, against a caller-declared continuity mechanism: sequence numbers, hash-chain links, or periodic control totals.
Call it with arguments: {"policy_parameters":{"window_start":"2026-07-01T00:00:00Z","window_end":"2026-07-01T23:59:59Z","continuity_mechanism":"sequence_number","sequence_start":1000,"sequence_end":1010,"observed_sequence_numbers":[1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010],"observed_event_counts_by_type":{"transaction":850,"user_activity":140,"privileged_action":12},"declared_retention_period_days":120,"required_retention_period_days":90,"gap_candidates":[]}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-517-audit-trail-completeness.html#p=v1.H4sIAAAAAAAA_wGvAVD-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-rwEAAA