# client.compliance.evidence

> client.compliance.evidence — the compliance.evidence operations.

`client.compliance.evidence` — the `compliance.evidence` operations.

On `AsyncKindgi` every method is the same, awaited.

## `client.compliance.evidence.list()`

```python signature
list(
    *,
    limit: int | None = None,
    cursor: str | None = None,
    run_id: str | UUID | None = None,
    agent_id: str | UUID | None = None,
    flow_id: str | UUID | None = None,
    kind: str | None = None,
    from_: str | None = None,
    to: str | None = None,
    timeout: float | None = None,
) -> ComplianceEvidenceCollectionPage
```

List compliance-evidence records. `GET /v1/compliance/evidence`

Cursor-paginated. Filters: `?runId=` / `?agentId=` / `?flowId=` / `?kind=` / `?from=` / `?to=` (all AND-composed). Fixed sort: `timestamp asc, id asc` — deterministic even when two records share a timestamp. Only mounted when `CreateAppInput.auditEvents` + `CreateAppInput.complianceClassifier` are both wired.

## `client.compliance.evidence.get()`

```python signature
get(evidence_id: str | UUID, /, *, timeout: float | None = None) -> ComplianceEvidence
```

Fetch one compliance-evidence record. `GET /v1/compliance/evidence/{evidenceId}`

Returns the full evidence record. 404 `compliance-evidence-not-found` when the id is unknown within the tenant scope (never leaks the existence of another tenant's records).

## `client.compliance.evidence.export()`

```python signature
export(
    body: ExportComplianceEvidenceBody | Mapping[str, Any] | None = None,
    /,
    *,
    idempotency_key: str | None = None,
    timeout: float | None = None,
    **fields: Any,
) -> SignedComplianceEvidenceBundle
```

Export a signed compliance-evidence bundle. `POST /v1/compliance/evidence/export`

Signs the evidence the filter matches (exportable kinds only) with the deployment's export key, and records the export (an `export-signed` audit event). The same envelope as the other signed exports; check `publicKey` against `GET /v1/export-signing-keys`. A deployment with no export key answers `404 signing-not-configured`.