> ## Documentation Index > Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt > Use this file to discover all available pages before exploring further. # Verify a recording-consent integrity digest > Recomputes the HMAC over a previously-issued digest's signed fields and reports whether it is intact. Lets an auditor confirm a stored digest was not altered without re-deriving it from live rows. Read-only — records nothing. ## OpenAPI ````yaml /openapi.yaml post /api/v1/compliance/recording-consent/integrity/verify openapi: 3.1.0 info: title: Devotel CPaaS API description: Orbit by Devotel — Communications Platform as a Service API version: 1.0.0 contact: name: Devotel url: https://devotel.io email: support@devotel.io license: name: Proprietary servers: - url: https://api.orbit.devotel.io description: Production security: - Bearer: [] - ApiKey: [] tags: - name: Messages description: >- Send and manage messages across all channels (SMS, WhatsApp, RCS, Email, Viber, etc.) - name: Fax description: >- List and track fax (MMS/T.38) transmissions on Telnyx-backed fax numbers (sending flows through the Messaging API) - name: Agents description: AI agent creation, configuration, and execution - name: Voice description: Voice calls, IVR, conferencing, and SIP trunking - name: OnCall description: On-call rotations and escalation policy planning for incident alerting - name: Webhooks description: Webhook endpoint management and delivery logs - name: Numbers description: Phone number search, provisioning, and configuration - name: Brand Identity description: >- Unified cross-channel brand trust posture (10DLC, toll-free, WhatsApp, RCS, branded calling, number KYC) - name: Contacts description: Contact management, segmentation, and lifecycle tracking - name: Campaigns description: Marketing campaign orchestration and analytics - name: Flows description: Automation flow builder and execution engine - name: Templates description: Message template management and approval workflows - name: Settings description: Organization, channel, and user preference settings - name: Verify description: OTP generation and verification across channels - name: Push description: Push notification delivery via FCM and APNs - name: Integrations description: Third-party service connections and OAuth management - name: CDP description: >- Customer Data Platform — activation surface (CRM object sync, streaming destinations, ad-audience activation) - name: Files description: >- Server-to-server media upload, listing, retrieval, and deletion (signed-URL backed) - name: Commerce description: >- Omnichannel conversational-commerce — persistent cart + checkout state machine, channel-agnostic hosted pay-by-link, native WhatsApp checkout, and AP2-style agent payment mandates. - name: Sync description: >- Real-time shared-state primitive (Twilio Sync parity) — Documents, Maps, Lists, and ephemeral Streams, with change events relayed over the /api/v1/ws/sync WebSocket gateway paths: /api/v1/compliance/recording-consent/integrity/verify: post: tags: - Compliance summary: Verify a recording-consent integrity digest description: >- Recomputes the HMAC over a previously-issued digest's signed fields and reports whether it is intact. Lets an auditor confirm a stored digest was not altered without re-deriving it from live rows. Read-only — records nothing. requestBody: required: true content: application/json: schema: type: object additionalProperties: false required: - digest properties: digest: type: object additionalProperties: false required: - consent_receipt_id - call_id - recording_id - consent_method - consent_state - jurisdiction - consent_text_version - captured_by - captured_at - revoked - recording_content_sha256 - recording_integrity_hash - binding_status - issued_at - signature properties: consent_receipt_id: type: string minLength: 1 maxLength: 128 description: Logical receipt id the audit trail groups under. call_id: type: string minLength: 1 maxLength: 64 description: The call this receipt covers. recording_id: type: string minLength: 1 maxLength: 128 nullable: true description: >- Bound recording id, or null when consent predates the artifact. consent_method: type: string minLength: 1 maxLength: 64 description: How consent was collected. consent_state: type: string minLength: 1 maxLength: 32 description: The consent state (granted, declined, etc). jurisdiction: type: string maxLength: 64 nullable: true description: Jurisdiction code the consent was captured under. consent_text_version: type: string minLength: 1 maxLength: 32 description: Version tag of the disclosure text. captured_by: type: string minLength: 1 maxLength: 128 description: User id or system that captured the consent. captured_at: type: string minLength: 1 maxLength: 64 description: ISO-8601 instant consent was captured. revoked: type: boolean description: True when any party has withdrawn consent. recording_content_sha256: type: string pattern: ^[0-9a-f]{64}$ nullable: true description: >- SHA-256 hex of the recording's media bytes, or null when unbound. recording_integrity_hash: type: string pattern: ^[0-9a-f]{64}$ nullable: true description: The recording seal's integrity-chain hash, or null. binding_status: type: string enum: - bound - bound_unsealed - recording_unavailable - unbound_no_recording description: Status of the binding to the recording artifact. issued_at: type: string minLength: 1 maxLength: 64 description: ISO-8601 instant the digest was issued. signature: type: string pattern: ^[0-9a-f]{64}$ description: HMAC-SHA256 signature over the digest's signed fields. responses: '200': description: >- Verification result — returns `{ verified, consent_receipt_id, binding_status }`. '422': description: Validation error in the digest payload. components: securitySchemes: Bearer: type: http scheme: bearer bearerFormat: JWT description: Dashboard JWT token from Clerk ApiKey: type: apiKey name: X-API-Key in: header description: Server-to-server API key (dv_live_sk_*) ````