Skip to main content

Governance Evidence

Download and delete the evidence files uploaded to evidence gates. Files are uploaded with POST /api/v1/governance/solutions/:id/gates/:gateId/evidence; each upload returns an attachment whose _id is the evidence id used here, and whose url is the download path below.

Authenticate with an API key in the X-API-Key header. Evidence links in the Governance pages also work for the signed-in user in the browser.

Attachment object​

Evidence files appear in a gate submission's attachments array:

{
  "_id": "evf123",
  "name": "bias-report.pdf",
  "type": "application/pdf",
  "size": 524288,
  "url": "/api/v1/governance/evidence/evf123",
  "uploadedAt": "2026-09-23T03:40:11.201Z",
  "uploadedBy": "okRpaKPh8B9asdKb2"
}

GET /api/v1/governance/evidence/:id​

Download an evidence file. You must be able to see the requirements of the solution the file belongs to (the solution's organization, or everyone in a single-organization installation, plus its owner and administrators).

Scope: governance:read

Response 200 OK: the file's bytes, with headers:

  • Content-Type: the file's content type (default application/octet-stream)
  • Content-Length: size in bytes
  • Content-Disposition: attachment; filename="..."; filename*=UTF-8''...
  • X-Content-Type-Options: nosniff

Errors: 401 without authentication, 404 not-found for an unknown file or one you cannot see.

DELETE /api/v1/governance/evidence/:id​

Remove an evidence file from its gate and delete it. You must be able to submit the solution's requirements. The gate's submission is updated, and it returns to pending if fewer files than the gate's minimum remain.

Scope: governance:write

Response 204 No Content.

Errors: 404 not-found for an unknown file, 403 forbidden without access to the solution.

Evidence files are also deleted automatically when their policy is removed from the solution, the solution is deleted, or the policy is deleted.