Help

Run logs: where they are and who can read them

A session's run log is on your machine. asp run ... --keep-run-log (or asp run-log keep) seals a copy on the service: encrypted on your machine to your own keys; the service cannot read it.
asp run-log kept | fetch --id <id> | open <file> | drop --id <id>
To give a court the log: asp run-log disclose --id <id> --to <did> --reason "..." [--upload]. The disclosure is signed by you; the key is wrapped to the people you name.