Replay

Reconstruct the exact signed material for any agent action. Replay is read-only and returns the canonical message bytes, the signature, the public key, and every field the agent recorded at sign time. Available on all plans, including Free.

Concept

Every signed action is stored with a deterministic payload. Replay returns that payload plus provenance fields so an auditor can rebuild the world the agent saw at that instant, including:

• the system prompt hash
• model params
• tool input hash
• trace id
• token count, cost, and latency
• the hash-chain links to the previous record.

Replay a signature

Replay uses the signature ID returned when you signed the original action.

curl -X POST https://api.asqav.com/api/v1/signatures/sig_abc123/replay \
  -H "X-API-Key: sk_live_..."

Response:

{
  "signature_id": "sig_abc123",
  "agent_id": "agt_x7y8z9",
  "action_id": "act_...",
  "action_type": "tool_call",
  "signed_at": "2026-04-19T12:00:00+00:00",
  "algorithm": "ml-dsa-65",
  "payload": { "tool": "send_email", "args": {"...": "..."} },
  "canonical_message_b64": "...",
  "signature_b64": "...",
  "public_key_b64": "...",
  "system_prompt_hash": "sha256:...",
  "model_params": { "model": "gpt-4o", "temperature": 0.2 },
  "tool_inputs_hash": "sha256:...",
  "trace_id": "tr_...",
  "parent_id": "sig_...",
  "token_count": 842,
  "cost_usd": 0.0031,
  "latency_ms": 412.5,
  "previous_hash": "sha256:...",
  "record_hash": "sha256:..."
}

Scopes and tier

Requires the signatures:replay scope on the API key and the replay feature flag (available on all plans). A signature can only be replayed by a key belonging to the organization that issued it. Cross-organization calls return 403.