> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truenroll.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get forensics results

> Returns fraud and tamper-detection analysis for each credential in the case.



## OpenAPI

````yaml /partner-api/openapi.json get /cases/{id}/forensics
openapi: 3.0.3
info:
  title: TruEnroll Partner API
  version: 1.0.0
  description: >-
    Submit academic documents and retrieve structured extraction, forensics, and
    translation results.
servers:
  - url: https://eval-api.trential.dev/partner/v1
    description: Sandbox
  - url: https://api.truenroll.com/partner/v1
    description: Production
security:
  - apiKey: []
tags:
  - name: Cases
    description: Create and manage processing cases.
  - name: Results
    description: Fetch extraction, forensics, and translation results.
  - name: Webhooks
    description: Register endpoints that receive case events.
paths:
  /cases/{id}/forensics:
    get:
      tags:
        - Results
      summary: Get forensics results
      description: >-
        Returns fraud and tamper-detection analysis for each credential in the
        case.
      operationId: getCaseForensics
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
          description: TruEnroll case ID.
      responses:
        '200':
          description: Forensics result.
          content:
            application/json:
              schema:
                allOf:
                  - $ref: '#/components/schemas/SuccessResponse'
                  - properties:
                      data:
                        $ref: '#/components/schemas/ForensicsResult'
        '401':
          description: Missing or invalid API key.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Case not found or deleted.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Forensics was not requested for this case.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
components:
  schemas:
    SuccessResponse:
      type: object
      properties:
        success:
          type: boolean
          example: true
        message:
          type: string
        meta:
          type: object
          description: >-
            Optional metadata (e.g. pagination). Empty object when not
            applicable.
        data: {}
      required:
        - success
        - message
        - meta
        - data
    ForensicsResult:
      type: object
      properties:
        id:
          type: string
        externalId:
          type: string
          nullable: true
        forensics:
          type: array
          items:
            $ref: '#/components/schemas/ForensicsCredential'
      required:
        - id
        - forensics
    ErrorResponse:
      type: object
      properties:
        statusCode:
          type: integer
        message:
          type: string
      required:
        - statusCode
        - message
    ForensicsCredential:
      type: object
      description: >-
        Forensics result for one analyzed file. Rich fields (`verdict` through
        `checks`) are populated once `status` is `completed`; otherwise only the
        identifiers, `status`, and `reportUrl` are present.
      properties:
        uploadId:
          type: string
          nullable: true
        credentialId:
          type: string
          nullable: true
          description: >-
            ID of the credential this result relates to. `null` for raw-file
            forensics (uploads submitted with `classify: false`), where `fileId`
            identifies the source file instead.
        fileId:
          type: string
          description: ID of the source file the forensics result was produced from.
        status:
          $ref: '#/components/schemas/CaseStatus'
        verdict:
          type: string
          nullable: true
          description: >-
            Overall risk verdict, e.g. `LOW RISK`, `MEDIUM RISK`, `HIGH RISK`.
            Present once `status` is `completed`.
        documentName:
          type: string
          nullable: true
          description: Name/title of the document as identified during analysis.
        candidateName:
          type: string
          nullable: true
          description: Candidate name extracted from the document.
        registrationNumber:
          type: string
          nullable: true
          description: Registration or serial number extracted from the document.
        issuerName:
          type: string
          nullable: true
          description: Issuing institution identified for the document.
        issuerSubName:
          type: string
          nullable: true
          description: >-
            Secondary issuer (e.g. affiliated college or partner program), when
            applicable.
        issuanceYear:
          type: integer
          nullable: true
          description: Year the document was issued.
        summary:
          type: string
          nullable: true
          description: Plain-language summary of the overall forensics assessment.
        topEvidence:
          type: array
          items:
            type: string
          description: Key evidence statements supporting the verdict.
        checks:
          type: array
          items:
            $ref: '#/components/schemas/ForensicsCheck'
          description: Per-check outcomes from the standard forensics check set.
        reportUrl:
          type: string
          nullable: true
          description: >-
            URL to the full forensics PDF report. Available once `status` is
            `completed`.
      required:
        - fileId
        - status
    CaseStatus:
      type: string
      enum:
        - queued
        - processing
        - completed
        - failed
      description: Processing status.
    ForensicsCheck:
      type: object
      description: A single forensics check outcome.
      properties:
        checkNumber:
          type: integer
          description: 1-based position of the check in the standard check set.
        title:
          type: string
          description: Short name of the check.
        status:
          type: string
          description: >-
            Outcome of the check, e.g. `PASS`, `FAIL`, or `UNVERIFIED` when it
            could not be conclusively evaluated.
        description:
          type: string
          description: Human-readable explanation of the check outcome.
      required:
        - checkNumber
        - title
        - status
        - description
  securitySchemes:
    apiKey:
      type: apiKey
      in: header
      name: x-api-key
      description: 'Partner API key. Also accepted as `Authorization: Bearer <key>`.'

````