Export

Download a filtered event-log sliceCSV or Parquetsigned URL expires in 60 minutes

Rolecompliance_examiner

Least-privilege read role.

Timeout5 minutes

Statement guardrail.

Custodyexport_log

Every export is auditable.

Max 50,000 rows from this portal. Use a narrower date range for large supervisory reviews.

Chain of custody

Exports run under the compliance_examiner Postgres role with a 5-minute statement timeout. Files are produced into a scratch tmpfs and streamed to MinIO with a 60-minute presigned URL.

  • Confirm filter scope before download.
  • Store the export_id with the supervisory request.
  • Attach the matching compliance.examiner_audit row.
  • Do not forward presigned URLs outside the examiner session.