# description
Versioned, portable audit log record summarizing a single verified KYA-OS tool call. Provides a standard, cross-implementation format for compliance and non-repudiation trails (audit.v1).

# properties.ts.description
Unix timestamp in seconds when the record was generated.

# properties.session.description
Session identifier the tool call belongs to.

# properties.audience.description
Intended audience of the call (server DID or URL).

# properties.kid.description
Key identifier of the signing key (matches the proof JWS header kid).

# properties.reqHash.description
SHA-256 hash of the JCS-canonicalized request. Format: 'sha256:<64 hex chars>'.

# properties.resHash.description
SHA-256 hash of the JCS-canonicalized response. Format: 'sha256:<64 hex chars>'. Optional: omitted when the call produced no response body to bind (e.g. a denied or step-up-required outcome), mirroring the optional responseHash in the detached-proof schema.

# properties.verified.description
Whether the call's detached proof verified against the signer's DID.