SubmitProductionLogDto

signaturestring

Base64 ECDSA-P256 signature over the canonical payload.

signaturePublicKeyIdstring

UserSigningKey.id referenced by the signature.

signedPayloadHashstring

SHA-256 hex digest of the canonical payload as signed on the client; used to detect canonicalization drift.

licenseOverrideJustificationstring

Required only when the zone license check fails. Captured on the log + audit trail.

SubmitProductionLogDto

{
  "signature": "string",
  "signaturePublicKeyId": "string",
  "signedPayloadHash": "string",
  "licenseOverrideJustification": "string"
}