Brand Docs

Hash-chained audit trail. Tamper-evident event log with chain verification and evidence export.

Overview

Hash-chained audit trail. Tamper-evident event log with chain verification and evidence export. License: BSL 1.1. Default port: 8750.

Part of the Stockyard family of developer tools. See the product page →

Install

curl -fsSL https://stockyard.dev/brand/install.sh | sh

Or download a release binary from GitHub Releases.

Quickstart

# Install
curl -fsSL https://stockyard.dev/brand/install.sh | sh

# Run
BRAND_ADMIN_KEY=secret brand

# Append events (no auth required — call from any service)
curl -s -X POST http://localhost:8750/api/events \
  -H 'Content-Type: application/json' \
  -d '{"type":"user_login","actor":"alice","detail":{"ip":"1.2.3.4"}}'

# Verify chain integrity
curl -s http://localhost:8750/api/verify \
  -H 'Authorization: Bearer secret'
# {"valid":true,"checked":42,"message":"chain intact"}

# Apply a policy template
curl -s -X POST http://localhost:8750/api/policies/templates/soc2 \
  -H 'Authorization: Bearer secret'

# Export evidence
curl -s "http://localhost:8750/api/evidence/export?from=2026-01-01" \
  -H 'Authorization: Bearer secret' > evidence.json

Environment Variables

Variable	Description	Default
PORT	HTTP listen port	8750
DATA_DIR	SQLite data directory	./data
BRAND_ADMIN_KEY	Admin key for read/verify/export endpoints

API Reference

POST/api/events

Append an event (no auth — use network controls)

GET/api/events

List events with filters (admin)

GET/api/events/{id}

Get single event (admin)

GET/api/verify

Verify entire chain integrity (admin)

GET/api/evidence/export

Export evidence pack as JSON (admin)

GET/api/policies/templates

List policy templates

POST/api/policies/templates/{framework}

Apply template (soc2/hipaa/gdpr/eu_ai_act)

POST/api/webhooks

GET/api/stats

Summary stats (admin)

GET/health

Health check

Note — Admin endpoints require Authorization: Bearer <admin-key>. The admin key is set via the environment variable for this tool.

Deployment

Run the binary directly or use the provided Dockerfile. Set DATA_DIR to a persistent volume path. The binary is statically linked with no external dependencies.

docker build -t brand .
docker run -e FENCE_ADMIN_KEY=secret -v /data:/data -p 8750:8750 brand

When to use Stockyard instead

If you're building LLM-powered applications and need request tracing, cost tracking across 16 providers, model routing, prompt management, and team collaboration tools — Stockyard is the full platform. It includes capabilities from across the focused tools family in one binary.