Function verifyTimestampEvidencePresence

Parameters

• events: readonly Readonly<
      {
          id: string;
          sessionId: string;
          phase: string;
          event: string;
          timestamp: string;
          actor: string;
          auditFormatVersion?: "audit-chain.v1"
          | "audit-chain.v2";
          detail: Record<string, unknown>;
          actorInfo?: Readonly<
              {
                  id: string;
                  email: string
                  | null;
                  displayName?: string | null;
                  source: "unknown" | "env" | "git" | "claim" | "oidc";
                  assurance: "best_effort" | "claim_validated" | "idp_verified";
                  verificationMeta?: Readonly<
                      {
                          issuer: string;
                          audience: string[];
                          keyId: string;
                          algorithm: string;
                          verifiedAt: string;
                      },
                  >;
              },
          >;
          prevHash?: string;
          chainHash?: string;
          canonicalEventDigest?: string;
          timestampEvidence?: {
              status: | "local"
              | "ntp_checked"
              | "tsa_stamped"
              | "tsa_verified"
              | "tsa_failed";
              source: "local_clock"
              | "ntp"
              | "tsa";
              ntp?: { offsetMs: number; server: string; driftWarned: boolean };
              tsa?: {
                  tokenDerBase64: string;
                  receivedAt: string;
                  messageImprint?: string;
                  digestAlgorithm?: string;
                  policyOid?: string;
                  serialNumber?: string;
                  tsaTimestamp?: string;
                  signerSubject?: string;
                  verificationStatus: "unchecked" | "valid" | "invalid";
                  verificationReason?: string;
              };
              warning?: string;
              resolvedAt: string;
          };
          enforcementLevel?: "advisory"
          | "synchronous"
          | "hook_gated";
      },
  >[]

  Audit events in chronological order.

• criticalKinds: readonly string[]

  Event kinds that require evidence (e.g., ['decision', 'lifecycle']).