Attestation digests and webhooks

Attestation gives you an outside record of review activity, so your audit trail is corroborated beyond the site itself.

Digest emails

Under Editant → Attestation, choose a digest cadence (daily, weekly, or monthly) and one or more recipients. Each digest summarises the period’s activity and reports the current head of the audit chain. Comparing the chain head across digests is how you confirm the log has not been altered. If no recipients are set, no digest is sent.

Webhooks

On the same page, tick Enable webhook and set a Webhook URL (https, except on localhost) to post review activity to an external endpoint. Choose a Webhook mode: every event, or a daily batch.

Each delivery is signed so the receiver can trust it: an X-Editant-Signature header carries an HMAC-SHA-256 signature computed with your Signing secret. Copy that secret to the receiving endpoint and recompute the signature over the request body to confirm each request genuinely came from your site. A delivery log on the same page records recent successes and failures.