Build WORM-Style Investment Document Archives

import { QnsiClient } from "@heossihq/qnsi";

const qnsp = new QnsiClient({ apiKey: process.env.QNSI_API_KEY! });

// Vault with retention lock (immutable until expiry)
const secret = await qnsp.vault.createSecret({
  name: `trade-confirm:${tradeId}`,
  payloadB64: confirmDocBase64,
  retention: {
    lockUntil: "2030-12-31",  // SEC 17a-4: minimum 3 years
    immutable: true,           // WORM enforcement
  },
  metadata: {
    pqcAlgorithm: "ml-kem-768",
    regulatoryClass: "sec-17a-4",
  },
});

// Source-linked Audit call; ML-DSA signing and ingestion are NOT VERIFIED
await qnsp.audit.logEvent({
  eventType: "trade.confirm.archived",
  payload: { tradeId, secretId: secret.id, retainUntil: "2030-12-31" },
});