Skip to main content
POST
Evaluate a governed event (unified)

Authorizations

Authorization
string
header
required

A VisIQ API key presented as Authorization: Bearer vq_prod_.... Mint keys under Connectors -> API Keys in the dashboard.

Body

application/json

The operation-native request. Include action fields (target_app, action) when operations contains action or delegation; include retrieval fields (resource_type, ...) when it contains retrieval. A legacy { kind: "action" | "retrieval", ... } body is also accepted.

operations
enum<string>[]
required
Required array length: 1 - 3 elements
Available options:
action,
retrieval,
delegation
agent_id
string
required
Required string length: 1 - 255
target_app
string
Required string length: 1 - 255
action
string
Required string length: 1 - 255
context
object
operation
enum<string>
Available options:
retrieve,
tool_call,
prompt_render
resource_type
string
Required string length: 1 - 255
resource_metadata
object
trust_tier
string | null
Maximum string length: 64
surface
string | null
Maximum string length: 128
query
string | null
Maximum string length: 4000
telemetry
object

Response

The unified decision. results[] is present for hybrid events.

For single-facet events the top-level fields carry the projected decision. For hybrid events, decision is the most-restrictive outcome and results[] carries the per-operation breakdown.

operations
enum<string>[]
required
Available options:
action,
retrieval,
delegation
decision
enum<string>
required
Available options:
permit,
deny,
approval_required,
redact,
escalate,
mask
plane_decision
string

The originating facet's verbatim decision word (single-facet responses).

reason
string | null
reason_code
string | null
rule_code
string | null
enforced
boolean | null
agent_mode
enum<string> | null
Available options:
off,
monitor,
enforce,
null
decision_id
string | null
redaction_rules
object[]
hitl_fallback
string
results
object[]

Present for hybrid events — one entry per evaluated operation.