> ## Documentation Index > Fetch the complete documentation index at: https://docs.visiqlabs.com/llms.txt > Use this file to discover all available pages before exploring further. # Get the unified rule bundle > The single compiled bundle covering both facets for one agent, carrying the resolved agent attributes and dialect version. Responds with an `ETag`; send `If-None-Match` to get a `304`. Requires permission `allow_rules:view`. ## OpenAPI ````yaml /api-reference/openapi.yaml get /rules/bundle openapi: 3.1.0 info: title: VisIQ Governance API version: 1.0.0 description: > The VisIQ platform API for governing agentic AI. One rule engine evaluates every governed agent event against your policies and returns a decision (permit, deny, approval-required, redact, mask, or escalate), records a cryptographically-verifiable audit trail, and governs agent-to-agent delegation. All requests are authenticated with a bearer API key. Mint a key in the dashboard under **Connectors -> API Keys**; it is presented as `Authorization: Bearer vq_prod_...`. Keys are scoped: harness/agent keys reach the operational surface (evaluate, rule bundles, telemetry, record ingestion), while management keys and dashboard sessions govern rules, agents, settings, and audit reads through role-based permissions. Decision vocabularies differ per facet. Action governance emits `permit | deny | approval_required | mask`. Retrieval governance emits `allow | deny | redact | escalate`. The unified `POST /evaluate` surface projects both into a single union vocabulary (`permit | deny | approval_required | redact | escalate | mask`). contact: name: VisIQ Labs url: https://docs.visiqlabs.com servers: - url: https://api.visiqlabs.com description: Production security: - bearerAuth: [] tags: - name: Evaluation description: Per-event governance decisions for action, retrieval, and delegation. - name: Action Rules description: Manage the rules that govern agent actions (writes/tool calls). - name: Retrieval Rules description: Manage the rules that govern retrieval and context exposure. - name: Unified Rules description: Operation-native rule management across both facets in one surface. - name: Rule Bundles description: Compiled, cacheable rule bundles the SDK runtime pulls per agent. - name: Agents description: Register and manage the agents whose events you govern. - name: Human-in-the-loop description: The approval queue for events that require a human decision. - name: Settings description: Per-account governance defaults. - name: Delegation description: Govern scoped agent-to-agent hand-offs with signed grant tokens. - name: Records description: Ingest, retrieve, finalize, and verify the tamper-evident audit trail. - name: Audit Log description: Versioned, paginated read APIs over recorded decisions and events. - name: Cognition description: >- Read captured Agent Cortex cognition sessions and beats (dedicated cognition:read scope). paths: /rules/bundle: get: tags: - Rule Bundles summary: Get the unified rule bundle description: > The single compiled bundle covering both facets for one agent, carrying the resolved agent attributes and dialect version. Responds with an `ETag`; send `If-None-Match` to get a `304`. Requires permission `allow_rules:view`. operationId: getUnifiedBundle parameters: - $ref: '#/components/parameters/AgentIdQuery' responses: '200': description: The compiled unified bundle. content: application/json: schema: $ref: '#/components/schemas/UnifiedBundle' '304': description: Not modified. '400': $ref: '#/components/responses/BadRequest' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' security: - bearerAuth: [] components: parameters: AgentIdQuery: name: agent_id in: query required: true schema: type: string minLength: 1 maxLength: 255 description: The human-readable agent identifier the bundle is compiled for. schemas: UnifiedBundle: type: object description: > The unified bundle carries the dialect version, resolved agent attributes, and the raw effective-rule projection. The shutdown variant matches the action bundle's shutdown shape. properties: version: type: string dialect_version: type: integer min_dialect: type: integer agent_mode: type: string enum: - enforce - monitor - 'off' agent_mode_by_operation: type: object additionalProperties: type: string enum: - enforce - monitor - 'off' cognition_capture: type: boolean agent_attributes: type: object properties: trust_tier: type: - string - 'null' categories: {} business_functions: type: array items: type: string business_function: type: - string - 'null' blast_radius_tier: type: - string - 'null' no_coverage: {} shutdown: type: boolean rules: type: array items: type: object additionalProperties: true no_coverage: $ref: '#/components/schemas/NoCoverageBlock' NoCoverageBlock: type: object properties: no_coverage_defaults: type: object properties: read: type: string write: type: string delete: type: string admin: type: string autopilot_enabled: type: boolean enduser_hitl_enabled: type: boolean hitl_timeout_seconds: type: integer Error: type: object required: - error description: > The standard error envelope. `details` carries the validation issue list on 400s; authorization failures add fields such as `detail`, `requiredScopes`, or `requiredPermission`. properties: error: type: string detail: type: string code: type: string details: type: array items: type: object additionalProperties: true additionalProperties: true responses: BadRequest: description: The request was malformed or failed validation. content: application/json: schema: $ref: '#/components/schemas/Error' example: error: Invalid request body details: - path: - agent_id message: Required Unauthorized: description: Missing or invalid API key. content: application/json: schema: $ref: '#/components/schemas/Error' example: error: Unauthorized Forbidden: description: The key lacks the required permission or scope. content: application/json: schema: $ref: '#/components/schemas/Error' example: error: insufficient_scope detail: This API key is not authorized for the requested operation. NotFound: description: >- The requested resource does not exist (or is not visible to this account). content: application/json: schema: $ref: '#/components/schemas/Error' example: error: Rule not found securitySchemes: bearerAuth: type: http scheme: bearer description: > A VisIQ API key presented as `Authorization: Bearer vq_prod_...`. Mint keys under **Connectors -> API Keys** in the dashboard. ````