{
  "schema": "dfire.custody.chain_export.v1",
  "exported_at": "2026-08-20T16:52:13.509221+00:00",
  "tenant_uuid": "0b5e2a8c-31d4-4f6a-9c2e-8a1b7d4e6f90",
  "item_uuid": "7d1f0c52-9a3e-4b8e-b0c4-2f6a1d9e3c47",
  "item_name": "Workstation - J. Virtanen (Patient Zero)",
  "case_number": "CASE-2026-5897",
  "genesis_hash": "da79db93a954a38c523c4ebc8133b7f9bfc8fbd77520c43b516ac5315672406c",
  "head_hash": "fa12726d843f12cb1f73e2710628d08fd3dde884d961b846b4925e5abe419282",
  "entry_count": 3,
  "verification_status": "verified",
  "entries": [
    {
      "canonical_entry": {
        "transfer_type": "intake",
        "from_party": null,
        "to_party": {
          "display_name": "Sam Lindqvist",
          "entity_type": null,
          "kind": "user",
          "username": "sam"
        },
        "transfer_datetime": "2026-08-19T07:00:00.000000Z",
        "recorded_at": "2026-08-19T07:04:31.218004Z",
        "recorded_by": {
          "display_name": "Eddie Investigator",
          "entity_type": null,
          "kind": "user",
          "username": "eddie"
        },
        "location": "Reception desk, Meridian Healthcare HQ",
        "purpose": "Evidence intake following workstation seizure",
        "condition": "Powered off, disk intact, no visible damage",
        "notes": "Seized at the finance department, 3rd floor.",
        "item_uuid": "7d1f0c52-9a3e-4b8e-b0c4-2f6a1d9e3c47",
        "previous_hash": "da79db93a954a38c523c4ebc8133b7f9bfc8fbd77520c43b516ac5315672406c",
        "schema": "dfire.custody.entry.v1",
        "sequence": "1",
        "tenant_uuid": "0b5e2a8c-31d4-4f6a-9c2e-8a1b7d4e6f90"
      },
      "entry_hash": "0bdd4982afb0c45c04cd28e4c0c4e6eabc0fbbe629af83b469c9784681420a2b",
      "hash_version": 1
    },
    {
      "canonical_entry": {
        "transfer_type": "transfer",
        "from_party": {
          "display_name": "Sam Lindqvist",
          "entity_type": null,
          "kind": "user",
          "username": "sam"
        },
        "to_party": {
          "display_name": "Eddie Investigator",
          "entity_type": null,
          "kind": "user",
          "username": "eddie"
        },
        "transfer_datetime": "2026-08-19T07:20:00.000000Z",
        "recorded_at": "2026-08-19T07:22:09.840512Z",
        "recorded_by": {
          "display_name": "Eddie Investigator",
          "entity_type": null,
          "kind": "user",
          "username": "eddie"
        },
        "location": "Reception desk, Meridian Healthcare HQ",
        "purpose": "Transfer to lead investigator for forensic imaging",
        "condition": "Powered off, disk intact, no visible damage",
        "notes": "",
        "item_uuid": "7d1f0c52-9a3e-4b8e-b0c4-2f6a1d9e3c47",
        "previous_hash": "0bdd4982afb0c45c04cd28e4c0c4e6eabc0fbbe629af83b469c9784681420a2b",
        "schema": "dfire.custody.entry.v1",
        "sequence": "2",
        "tenant_uuid": "0b5e2a8c-31d4-4f6a-9c2e-8a1b7d4e6f90"
      },
      "entry_hash": "cb4269ce48d4a741a52249e0b21d40b4e26331eff793545a090c635629dde5fa",
      "hash_version": 1
    },
    {
      "canonical_entry": {
        "transfer_type": "transfer",
        "from_party": {
          "display_name": "Eddie Investigator",
          "entity_type": null,
          "kind": "user",
          "username": "eddie"
        },
        "to_party": {
          "display_name": "Forensic Imaging Lab",
          "entity_type": "TEAM",
          "kind": "legal_entity",
          "username": null
        },
        "transfer_datetime": "2026-08-19T09:45:00.000000Z",
        "recorded_at": "2026-08-19T09:47:52.004117Z",
        "recorded_by": {
          "display_name": "Eddie Investigator",
          "entity_type": null,
          "kind": "user",
          "username": "eddie"
        },
        "location": "Imaging lab, HQ Helsinki",
        "purpose": "Disk imaging with a hardware write blocker",
        "condition": "Sealed in evidence bag, seal 004417",
        "notes": "Seal number checked on receipt.",
        "item_uuid": "7d1f0c52-9a3e-4b8e-b0c4-2f6a1d9e3c47",
        "previous_hash": "cb4269ce48d4a741a52249e0b21d40b4e26331eff793545a090c635629dde5fa",
        "schema": "dfire.custody.entry.v1",
        "sequence": "3",
        "tenant_uuid": "0b5e2a8c-31d4-4f6a-9c2e-8a1b7d4e6f90"
      },
      "entry_hash": "fa12726d843f12cb1f73e2710628d08fd3dde884d961b846b4925e5abe419282",
      "hash_version": 1
    }
  ]
}