REST API · v1 · JWT Bearer Auth

API Reference

Full REST API for BrainPredict Compliance. All endpoints require a JWT Bearer token from your BrainPredict portal. Base URL: https://your-instance.brainpredict.ai. TLS 1.3 required. Australian data residency — no data leaves ap-southeast-2.

Authentication

# All requests require:
Authorization: Bearer $BP_API_KEY
Content-Type: application/json

# Get your API key: Portal → Settings → API Keys
# Key format: bp_compliance_live_<32 hex chars>

Endpoints

POST/api/v1/entities

{ "abn": "51824753556", "entity_name": "string", "entity_type": "company|trust|charity|listed", "sector": "finance|healthcare|...", "annual_revenue_aud": number }

POST/api/v1/audits

Trigger a full compliance scan. Activates all 62 AI models via AIIC cascade. Returns audit_id. Poll /status for completion.

{ "entity_id": "string", "domains": "all|asic|ato|oaic|fwo|austrac|accc|sector|esg", "conformal_ci": 0.90 }

GET/api/v1/audits/{audit_id}

Retrieve completed audit results including all domain scores, findings, penalty CI bands, and Sentinel L4 decision card.

GET/api/v1/audits/{audit_id}/status

Poll audit status: pending | running | completed | failed. Returns progress percentage and current model being executed.

GET/api/v1/audits/{audit_id}/sentinel

Retrieve Sentinel L4 Decision Card: SHA-256 assessment hash, Dilithium-3 signature, timestamp, jurisdiction, EU AI Act Art.12 metadata.

POST/api/v1/penalties/quantify

On-demand penalty risk quantification for a specific domain and obligation. Returns P50 estimate with 90% Conformal CI band.

{ "entity_id": "string", "domain": "asic|ato|oaic|...", "obligation_id": "string", "conformal_ci": 0.90 }

GET/api/v1/arip/changes

List ARIP-AU detected regulatory changes. SHA-256 + bigram cosine diff results. Filtered by date, source, severity.

POST/api/v1/acho/fixes

Trigger ACHO auto-fix for a specific finding. Requires Sentinel L4 approval token. Returns fix plan with human approval checkpoint.

{ "finding_id": "string", "fix_category": "lodgment_recovery|sgc_catchup|privacy_notice|asic_register|payroll_tax_registration", "approval_token": "string" }

POST/api/v1/webhooks

Register a webhook URL for ARIP-AU regulatory change events, audit completion, ACHO fix approval requests, and IB v12 events.

{ "url": "https://your-system/webhook", "events": ["arip.change", "audit.completed", "acho.approval_required"] }

IB v12 Event Schema

All ARIP-AU changes emit 5 Intelligence Bus v12 events. Subscribe via /api/v1/webhooks.

{
  "event": "arip.regulatory_change_detected",
  "version": "IB/v12",
  "source": "ASIC",
  "change_id": "arip_20260521_asic_003",
  "sha256_before": "3f7a2b...",
  "sha256_after": "9c1d4e...",
  "cosine_similarity": 0.07,
  "material_threshold_exceeded": true,
  "affected_models": ["C-02", "C-09"],
  "penalty_unit_change": { "old": 313, "new": 330, "effective": "2026-07-01" },
  "acho_triggered": true,
  "timestamp": "2026-05-21T09:00:00Z"
}

Quick Links

Getting Started →ASIC Domain →ATO Domain →Run interactive demo →