Anchorage API reference
    Preparing search index...

    Structured record emitted by a breakwater enforcement boundary.

    interface AuditEvent {
        action: string;
        actor: Actor | null;
        decision: "error" | "allowed" | "denied";
        decisionCode?:
            | "CONNECTOR_ALLOWED"
            | "PERMISSION_GRANTED"
            | "APPROVAL_GRANTED"
            | "IDEMPOTENCY_TAKEOVER"
            | "EGRESS_INPUT_INVALID"
            | "EGRESS_URL_INVALID"
            | "EGRESS_SCHEME_NOT_ALLOWED"
            | "EGRESS_HOST_NOT_DECLARED"
            | "EGRESS_REDIRECT_URL_INVALID"
            | "EGRESS_REDIRECT_SCHEME_NOT_ALLOWED"
            | "EGRESS_REDIRECT_HOST_DENIED"
            | "EGRESS_REDIRECT_UNVERIFIABLE"
            | "EGRESS_REDIRECT_LIMIT_EXCEEDED"
            | "EGRESS_REDIRECT_BODY_UNREPLAYABLE"
            | "EGRESS_DENIED"
            | "EGRESS_HOST_NOT_ALLOWED_BY_ORG"
            | "PERMISSION_PROJECTION_INVALID"
            | "PERMISSION_MISSING"
            | "APPROVAL_GRANT_MISSING"
            | "RATE_LIMIT_EXCEEDED"
            | "IDEMPOTENCY_KEY_MISSING"
            | "IDEMPOTENCY_CONFLICT"
            | "IDEMPOTENCY_LEGACY_AMBIGUOUS"
            | "IDEMPOTENCY_MIGRATION_REQUIRED"
            | "DRY_RUN_UNSUPPORTED"
            | "DRY_RUN_INVALID"
            | "WORKFLOW_SCOPE_MISSING"
            | "CROSS_WORKFLOW_ACCESS_DENIED"
            | "ISOLATION_SCOPE_MISSING"
            | "ISOLATION_SCOPE_INVALID"
            | "BACKGROUND_OVERRIDE_DENIED"
            | "BACKGROUND_TASK_DENIED"
            | "BACKGROUND_EXECUTION_DENIED"
            | "EVALUATOR_DENIED"
            | "EVALUATOR_FAILED"
            | "STORE_UNAVAILABLE"
            | "STORE_COMMIT_FAILED"
            | "STORE_RELEASE_FAILED"
            | "CONNECTOR_EXECUTION_FAILED"
            | "CONNECTOR_INPUT_INVALID"
            | "CONNECTOR_OUTPUT_INVALID"
            | "CONNECTOR_UNREGISTERED"
            | "CONNECTOR_BOUNDARY_MODIFIED"
            | "CONNECTOR_INVOCATION_OPTIONS_INVALID"
            | "CONNECTOR_BOUNDARY_UNVERIFIABLE";
        detail?: Record<string, unknown>;
        policyKind?: ConnectorPolicyName;
        reason?: string;
        resource: string;
        retryable?: boolean;
        timestamp: string;
    }
    Index

    Properties

    action: string

    Dotted verb, e.g. 'agent.input.authorize'

    actor: Actor | null

    Actor attributed to the decision, or null when none was resolved.

    decision: "error" | "allowed" | "denied"

    'error' = the gate itself failed (evaluator/getActor threw), not a denial.

    decisionCode?:
        | "CONNECTOR_ALLOWED"
        | "PERMISSION_GRANTED"
        | "APPROVAL_GRANTED"
        | "IDEMPOTENCY_TAKEOVER"
        | "EGRESS_INPUT_INVALID"
        | "EGRESS_URL_INVALID"
        | "EGRESS_SCHEME_NOT_ALLOWED"
        | "EGRESS_HOST_NOT_DECLARED"
        | "EGRESS_REDIRECT_URL_INVALID"
        | "EGRESS_REDIRECT_SCHEME_NOT_ALLOWED"
        | "EGRESS_REDIRECT_HOST_DENIED"
        | "EGRESS_REDIRECT_UNVERIFIABLE"
        | "EGRESS_REDIRECT_LIMIT_EXCEEDED"
        | "EGRESS_REDIRECT_BODY_UNREPLAYABLE"
        | "EGRESS_DENIED"
        | "EGRESS_HOST_NOT_ALLOWED_BY_ORG"
        | "PERMISSION_PROJECTION_INVALID"
        | "PERMISSION_MISSING"
        | "APPROVAL_GRANT_MISSING"
        | "RATE_LIMIT_EXCEEDED"
        | "IDEMPOTENCY_KEY_MISSING"
        | "IDEMPOTENCY_CONFLICT"
        | "IDEMPOTENCY_LEGACY_AMBIGUOUS"
        | "IDEMPOTENCY_MIGRATION_REQUIRED"
        | "DRY_RUN_UNSUPPORTED"
        | "DRY_RUN_INVALID"
        | "WORKFLOW_SCOPE_MISSING"
        | "CROSS_WORKFLOW_ACCESS_DENIED"
        | "ISOLATION_SCOPE_MISSING"
        | "ISOLATION_SCOPE_INVALID"
        | "BACKGROUND_OVERRIDE_DENIED"
        | "BACKGROUND_TASK_DENIED"
        | "BACKGROUND_EXECUTION_DENIED"
        | "EVALUATOR_DENIED"
        | "EVALUATOR_FAILED"
        | "STORE_UNAVAILABLE"
        | "STORE_COMMIT_FAILED"
        | "STORE_RELEASE_FAILED"
        | "CONNECTOR_EXECUTION_FAILED"
        | "CONNECTOR_INPUT_INVALID"
        | "CONNECTOR_OUTPUT_INVALID"
        | "CONNECTOR_UNREGISTERED"
        | "CONNECTOR_BOUNDARY_MODIFIED"
        | "CONNECTOR_INVOCATION_OPTIONS_INVALID"
        | "CONNECTOR_BOUNDARY_UNVERIFIABLE"
    detail?: Record<string, unknown>

    Additional structured fields supplied by the emitting boundary.

    policyKind?: ConnectorPolicyName
    reason?: string

    Human-readable decision or failure reason.

    resource: string

    What was gated, e.g. the processor id

    retryable?: boolean
    timestamp: string

    ISO 8601