Download a call recording
Streams the call’s selected verified immutable recording through the authenticated API as an attachment. The response never exposes a storage URI or signed URL and never converts or rewrites audio. With no Range header it returns the whole object. One satisfiable byte range returns 206; an unsatisfiable range returns 416 with no body; malformed or multiple ranges return 400. A malformed or foreign call id, a call without servable recording evidence, and stored metadata that contradicts the index all return the same hidden 404.
Authentication
Create and manage workspace-owned keys through the existing app session routes, outside this public API. Creator and manager identities are audit actors only. Key validity follows workspace policy, expiry and explicit revocation, independently of creator membership. Do not include a workspace-selection header.
Path parameters
Headers
Optional single RFC 9110 byte range, for example bytes=0-1048575.
Response headers
Exact response-body byte count.
Quoted SHA-256 of the verified recording.
Private no-store caching policy.