Technical Specification

Location: /Controllers/ProofController.cs
Responsibilities:
- Handle HTTP requests for proof operations
- Input validation and sanitization
- Response formatting and error handling
- Rate limiting enforcement

Key Endpoints:
- POST /api/proof - Create single proof
- POST /api/proof/batch - Create batch proof
- GET /api/proof/{recordId}/verify - Verify proof
- GET /api/proof/history - Get proof history
- GET /api/proof/balance - Get balance status

Location: /Services/DataProofLabsService.cs
Responsibilities:
- Proof creation workflow orchestration
- Data validation and hash generation  
- Blockchain service coordination
- Transaction status tracking
- Metadata management

Key Methods:
- RecordProofAsync() - Creates blockchain proof
- VerifyProofAsync() - Verifies existing proof
- GetProofHistoryAsync() - Retrieves proof records

Location: /Services/BatchBlockchainService.cs
Responsibilities:
- Merkle tree construction and validation
- Batch transaction creation
- Individual proof path generation
- Cost optimization algorithms

Key Methods:
- RecordBatchProofAsync() - Creates batch proof
- GetMerkleProofAsync() - Generates merkle proof
- VerifyMerkleProofAsync() - Validates merkle proof

-- Core proof storage table
CREATE TABLE ProofRecords (
    Id BIGINT IDENTITY(1,1) PRIMARY KEY,
    RecordId NVARCHAR(200) NOT NULL,
    EntityId NVARCHAR(100) NOT NULL,
    OrgId NVARCHAR(100) NOT NULL,
    DataHash NVARCHAR(64) NOT NULL,
    BlockchainType NVARCHAR(50) NOT NULL,
    TransactionHash NVARCHAR(66),
    BlockNumber BIGINT,
    NetworkName NVARCHAR(50),
    Timestamp DATETIME2 NOT NULL,
    IsVerified BIT DEFAULT(0),
    Metadata NVARCHAR(MAX), -- JSON metadata
    CreatedAt DATETIME2 DEFAULT(GETUTCDATE()),
    
    INDEX IX_ProofRecords_RecordId (RecordId),
    INDEX IX_ProofRecords_OrgId (OrgId),
    INDEX IX_ProofRecords_TransactionHash (TransactionHash)
);

-- Tenant management
CREATE TABLE TenantAccounts (
    Id BIGINT IDENTITY(1,1) PRIMARY KEY,
    TenantId NVARCHAR(100) UNIQUE NOT NULL,
    OrganizationName NVARCHAR(200) NOT NULL,
    ApiKey NVARCHAR(100) UNIQUE NOT NULL,
    IsActive BIT DEFAULT(1),
    CreatedDate DATETIME2 DEFAULT(GETUTCDATE()),
    LastActivity DATETIME2,
    
    INDEX IX_TenantAccounts_ApiKey (ApiKey),
    INDEX IX_TenantAccounts_TenantId (TenantId)
);

1. Data Preparation
   ├── Hash calculation (SHA-256)
   ├── Metadata encoding
   └── Batch optimization (if applicable)

2. Network Selection
   ├── Cost analysis
   ├── Performance requirements
   └── Network availability check

3. Transaction Creation
   ├── Key retrieval from Azure Key Vault
   ├── Transaction signing
   └── Gas/fee estimation

4. Blockchain Submission
   ├── RPC call to blockchain node
   ├── Transaction broadcast
   └── Initial confirmation

5. Status Monitoring
   ├── Block confirmation tracking
   ├── Success/failure detection
   └── Database status update

6. Client Notification
   ├── Webhook dispatch (if configured)
   ├── Status API updates
   └── Audit log creation

# Dockerfile structure
FROM mcr.microsoft.com/dotnet/aspnet:8.0
WORKDIR /app
COPY --from=build /app/publish .

# Security hardening
RUN adduser --disabled-password --gecos "" appuser
USER appuser

# Health check
HEALTHCHECK --interval=30s --timeout=10s --retries=3 \
  CMD curl -f http://localhost/health || exit 1

ENTRYPOINT ["dotnet", "DataProofLabs.Api.dll"]

Critical Alerts (Immediate Response):
- API availability < 99%
- Error rate > 1%
- Database connection failures
- Blockchain service outages

Warning Alerts (1-hour Response):
- Response time > 1 second
- Memory usage > 80%
- Disk space > 85%
- Unusual traffic patterns

Info Alerts (Daily Review):
- Performance trends
- Cost optimization opportunities
- Security events
- Business metrics updates

Audit Trail Specifications:
- All API requests with timestamps
- User authentication events
- Data access and modification logs
- System configuration changes
- Security incidents and responses
- Performance and availability metrics

Retention Policy:
- Audit logs: 7 years
- Performance metrics: 2 years  
- Error logs: 1 year
- Debug logs: 30 days

Access Controls:
- Audit logs: Read-only access
- Administrative actions: Multi-factor authentication
- Data export: Approval workflow required
- Log modification: Prohibited (immutable storage)