Core Primitives

Evidence

An artifact or record supporting operational truth. Evidence is attached to operations and preserved with chain-of-custody metadata, hashing, and timestamps.

The Evidence object

Evidence

{
  "id": "ev_xyz789",
  "operation_id": "op_abc123",
  "type": "wallet_address",
  "source": "victim_submission",
  "content": {
    "address": "bc1q...",
    "chain": "bitcoin"
  },
  "hash": "sha256:abc123...",
  "verified": false,
  "created_at": "2025-01-15T10:00:00Z",
  "metadata": {}
}

Parameter	Type	Description
`id`	string	Unique identifier. Prefixed with ev_
`operation_id`required	string	The operation this evidence belongs to
`type`required	string	Evidence type classification
`source`required	string	How the evidence was obtained
`content`required	object	The evidence payload — structure varies by type
`hash`	string	SHA-256 hash for integrity verification
`verified`	boolean	Whether the evidence has been independently verified
`created_at`	datetime	ISO 8601 creation timestamp
`metadata`	object	Arbitrary key-value pairs

Evidence types

wallet_addresstransaction_hashchat_logemailscreenshotdomainfake_platformbank_wirepolice_reportvictim_statementlegal_documentai_analysis

Source values

victim_submissioninvestigator_collectionexchange_responselaw_enforcementpublic_recordai_extractionchain_analysis

Endpoints

Attach evidence

POST

/v1/operations/:id/evidence

curl -X POST https://api.microndelta.com/v1/operations/op_abc123/evidence \
  -H "Authorization: Bearer md_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "wallet_address",
    "source": "victim_submission",
    "content": {
      "address": "bc1q...",
      "chain": "bitcoin"
    }
  }'

List evidence

GET

/v1/operations/:id/evidence

Returns all evidence attached to an operation

Retrieve evidence

GET

/v1/evidence/:id

Verify evidence

POST

/v1/evidence/:id/verify

Mark evidence as independently verified

cURL

curl -X POST https://api.microndelta.com/v1/evidence/ev_xyz789/verify \
  -H "Authorization: Bearer md_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{ "method": "chain_analysis", "notes": "Confirmed on-chain" }'

←Operations Participants→