> ## Documentation Index > Fetch the complete documentation index at: https://docs.checkfu.com/llms.txt > Use this file to discover all available pages before exploring further. # Create a reviewed Application plan > Compiles one immutable publication receipt into a durable, lock-free reviewed live plan for the authenticated Workspace: the server resolves the exact Blueprint lineage, derives canonical managed-resource actions against the current live snapshot, persists the exact secret-free review artifact, and answers the bounded plan projection. Non-consequential control-plane mutation: the plan creates no governed resource, claim, reservation, or lock, and it never mutates an existing resource. Requires an Idempotency-Key; an exact retry returns the same plan. A publication whose source has no supported review provenance (a governed source revision, until exact Git provenance ships) is refused with configuration.review_provenance_unavailable before any durable write. Responses never echo source text or exact semantic values (§7.4). Checkfu support posture: alpha; hosted. Required evidence journey: blueprint-authority. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities. ## OpenAPI ````yaml /openapi.json post /v1/agent-blueprint-application-plans openapi: 3.1.0 info: title: Checkfu API version: '2026-08-31' description: >- Authentication is declared per operation: API-key, runtime, or connector bearer; Automation signature; or credential-free pairing redemption. Every general Checkfu REST request requires the dated `Checkfu-Version` header (one of: 2026-08-31); the three MCP JSON-RPC transports use `MCP-Protocol-Version`, A2A uses `A2A-Version`, and the provider OAuth callback carries neither Checkfu header. API keys resolve one Workspace without a request selector; authenticated responses identify it with `Checkfu-Workspace-Id`. servers: - url: https://api.checkfu.com security: - bearerAuth: [] tags: - name: organizations - name: sourceRepositories - name: tenants - name: workspaces - name: principals - name: principalGroups - name: principalAccessCredentials - name: apiKeys - name: agents - name: harnesses - name: harnessRuntime - name: computerProfiles - name: permissionAssignments - name: actionPolicies - name: files - name: memoryStores - name: dreams - name: modelCredentials - name: modelRoutingProfiles - name: blueprintInstallations - name: toolSources - name: skills - name: skillSources - name: agentSources - name: agentBlueprints - name: skillProposals - name: instructionProposals - name: catalog - name: concepts - name: agentBlueprintApplications - name: agentBlueprintApplicationPlans - name: support - name: bootstrapRequests - name: connections - name: connectionVaults - name: connectionAssignments - name: connectedRuntimes - name: fileTrees - name: collaboration - name: automationGraphs - name: automations - name: actionApprovals - name: standingApprovals - name: usage - name: models - name: outcomes - name: budgets - name: billing - name: sessions - name: audit - name: sessionExports - name: runs - name: runnerPools - name: transcripts - name: sessionWatches - name: sessionHandoffs - name: sessionCapsules - name: sessionTrajectories - name: webhookEndpoints - name: integrationGateway - name: workEnvironments - name: computers - name: computerScreens - name: computerBrowserObservations - name: computerBrowserActions - name: environments - name: vaults - name: apiMcp - name: a2a paths: /v1/agent-blueprint-application-plans: post: tags: - agentBlueprintApplications summary: Create a reviewed Application plan description: >- Compiles one immutable publication receipt into a durable, lock-free reviewed live plan for the authenticated Workspace: the server resolves the exact Blueprint lineage, derives canonical managed-resource actions against the current live snapshot, persists the exact secret-free review artifact, and answers the bounded plan projection. Non-consequential control-plane mutation: the plan creates no governed resource, claim, reservation, or lock, and it never mutates an existing resource. Requires an Idempotency-Key; an exact retry returns the same plan. A publication whose source has no supported review provenance (a governed source revision, until exact Git provenance ships) is refused with configuration.review_provenance_unavailable before any durable write. Responses never echo source text or exact semantic values (§7.4). Checkfu support posture: alpha; hosted. Required evidence journey: blueprint-authority. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities. operationId: agentBlueprintApplications.createPlan parameters: - name: checkfu-version in: header schema: type: string enum: - '2026-08-31' required: true - name: idempotency-key in: header schema: type: string allOf: - maxLength: 255 - minLength: 1 required: true requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateAgentBlueprintApplicationPlanRequest' required: true responses: '201': description: >- Sole bounded REST and generated-SDK projection of a reviewed Application plan. content: application/json: schema: $ref: '#/components/schemas/BlueprintApplyPlanBoundedProjection' headers: checkfu-workspace-id: description: The Workspace resolved from the authenticated bearer credential. required: true schema: $ref: '#/components/schemas/WorkspaceId' '400': description: Typed Checkfu wire error content: application/json: schema: $ref: '#/components/schemas/ValidationMalformedError' '401': description: Typed Checkfu wire error content: application/json: schema: type: object required: - error properties: error: type: object required: - type - message - more properties: type: type: string enum: - auth.invalid_key message: type: string more: type: string enum: - >- https://docs.checkfu.com/reference/errors#auth-invalid-key description: >- Stable public documentation and remedy for this error type. additionalProperties: false additionalProperties: false '403': description: >- The organization, tenant, or workspace backing this key is administratively disabled. | Deployment governance or retention policy denied the request. content: application/json: schema: anyOf: - type: object required: - error properties: error: type: object properties: type: type: string enum: - auth.disabled_tenancy message: type: string more: type: string enum: - >- https://docs.checkfu.com/reference/errors#auth-disabled-tenancy description: >- Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false additionalProperties: false - $ref: '#/components/schemas/PolicyDeniedError' '404': description: >- The requested resource does not exist in the resolved deployment boundary. content: application/json: schema: $ref: '#/components/schemas/ValidationNotFoundError' '409': description: >- The request conflicts with the resource's current state. | An idempotent mutation conflicts with a completed or in-progress request for the same key. content: application/json: schema: anyOf: - $ref: '#/components/schemas/ValidationConflictError' - $ref: '#/components/schemas/IdempotencyConflictError' '429': description: Typed Checkfu wire error headers: retry-after: description: >- Delay in seconds for rate limits or deployment quotas with a known release or UTC reset boundary required: false schema: type: integer minimum: 1 content: application/json: schema: type: object required: - error properties: error: type: object required: - type - message - more properties: type: type: string enum: - budget.exceeded message: type: string more: type: string enum: - >- https://docs.checkfu.com/reference/errors#budget-exceeded description: >- Stable public documentation and remedy for this error type. additionalProperties: false additionalProperties: false '500': description: >- An unexpected internal failure occurred; the message contains an opaque incident reference. content: application/json: schema: $ref: '#/components/schemas/RuntimeInternalError' security: - bearerAuth: [] components: schemas: CreateAgentBlueprintApplicationPlanRequest: type: object properties: publication_id: $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId' required: - publication_id additionalProperties: false description: >- Request to compile one immutable publication receipt into a durable reviewed live plan. BlueprintApplyPlanBoundedProjection: anyOf: - $ref: '#/components/schemas/Objects_91' - $ref: '#/components/schemas/Objects_97' - $ref: '#/components/schemas/Objects_98' - $ref: '#/components/schemas/Objects_99' - $ref: '#/components/schemas/Objects_100' - $ref: '#/components/schemas/Objects_102' - $ref: '#/components/schemas/Objects_103' - $ref: '#/components/schemas/Objects_104' - $ref: '#/components/schemas/Objects_105' - $ref: '#/components/schemas/Objects_106' - $ref: '#/components/schemas/Objects_107' - $ref: '#/components/schemas/Objects_108' WorkspaceId: type: string allOf: - pattern: ^wrkspc_[0-9a-f]{32}$ ValidationMalformedError: type: object properties: error: type: object properties: type: type: string enum: - validation.malformed message: type: string more: type: string enum: - https://docs.checkfu.com/reference/errors#validation-malformed description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: >- The request could not be decoded or violated a declared input constraint. PolicyDeniedError: type: object properties: error: type: object properties: type: type: string enum: - policy.denied message: type: string more: type: string enum: - https://docs.checkfu.com/reference/errors#policy-denied description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: Deployment governance or retention policy denied the request. ValidationNotFoundError: type: object properties: error: type: object properties: type: type: string enum: - validation.not_found message: type: string more: type: string enum: - https://docs.checkfu.com/reference/errors#validation-not-found description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: >- The requested resource does not exist in the resolved deployment boundary. ValidationConflictError: type: object properties: error: type: object properties: type: type: string enum: - validation.conflict message: type: string more: type: string enum: - https://docs.checkfu.com/reference/errors#validation-conflict description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: The request conflicts with the resource's current state. IdempotencyConflictError: anyOf: - $ref: '#/components/schemas/ValidationIdempotencyConflictError' - $ref: '#/components/schemas/ValidationIdempotencyInProgressError' description: >- An idempotent mutation conflicts with a completed or in-progress request for the same key. RuntimeInternalError: type: object properties: error: type: object properties: type: type: string enum: - runtime.internal message: type: string more: type: string enum: - https://docs.checkfu.com/reference/errors#runtime-internal description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: >- An unexpected internal failure occurred; the message contains an opaque incident reference. AgentBlueprintPublicationReceiptId: type: string allOf: - pattern: ^abpub_[0-9a-f]{32}$ Objects_91: type: object properties: disposition: type: string enum: - blocked readiness: type: string enum: - not_applicable lifecycle: type: string enum: - planned approval_event_capacity: type: string enum: - available execution: type: 'null' id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_97: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - ready - approval_required - input_required - prerequisite_unready lifecycle: type: string enum: - planned approval_event_capacity: type: string enum: - available execution: type: 'null' id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_98: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - applying approval_event_capacity: type: string enum: - available execution: anyOf: - type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: number enum: - 0 effect_started_count: type: number enum: - 0 last_effect_order_sequence: type: number enum: - 0 phase: type: string enum: - forward stop_reason: type: 'null' pending_terminal_lifecycle: type: 'null' required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - stop_reason - pending_terminal_lifecycle additionalProperties: false - type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: integer allOf: - exclusiveMinimum: 0 effect_started_count: type: integer allOf: - minimum: 0 last_effect_order_sequence: type: integer allOf: - exclusiveMinimum: 0 phase: type: string enum: - forward stop_reason: type: 'null' pending_terminal_lifecycle: type: 'null' required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - stop_reason - pending_terminal_lifecycle additionalProperties: false id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_99: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - applying approval_event_capacity: type: string enum: - available - exhausted execution: anyOf: - type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: number enum: - 0 effect_started_count: type: number enum: - 0 last_effect_order_sequence: type: number enum: - 0 phase: type: string enum: - stop_requested stop_reason: $ref: '#/components/schemas/Union_174' pending_terminal_lifecycle: $ref: '#/components/schemas/Union_175' required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - stop_reason - pending_terminal_lifecycle additionalProperties: false - type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: integer allOf: - exclusiveMinimum: 0 effect_started_count: type: integer allOf: - minimum: 0 last_effect_order_sequence: type: integer allOf: - exclusiveMinimum: 0 phase: type: string enum: - stop_requested stop_reason: $ref: '#/components/schemas/Union_174' pending_terminal_lifecycle: $ref: '#/components/schemas/Union_175' required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - stop_reason - pending_terminal_lifecycle additionalProperties: false id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_100: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - recovery_required approval_event_capacity: type: string enum: - available execution: type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: integer allOf: - exclusiveMinimum: 0 effect_started_count: type: integer allOf: - minimum: 0 last_effect_order_sequence: type: integer allOf: - exclusiveMinimum: 0 phase: type: string enum: - resume_allowed pending_terminal_lifecycle: type: 'null' recovery_reason: type: string enum: - worker_interrupted - adapter_retryable_failure - authority_store_temporarily_unavailable - operator_repair_completed repair_completion: anyOf: - $ref: '#/components/schemas/Objects_101' - type: 'null' required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - pending_terminal_lifecycle - recovery_reason - repair_completion additionalProperties: false id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_102: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - recovery_required approval_event_capacity: type: string enum: - available - exhausted execution: type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: integer allOf: - exclusiveMinimum: 0 effect_started_count: type: integer allOf: - minimum: 0 last_effect_order_sequence: type: integer allOf: - exclusiveMinimum: 0 phase: type: string enum: - settlement_only recovery_reason: $ref: '#/components/schemas/Union_174' pending_terminal_lifecycle: type: string enum: - stale - expired - cancelled required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - recovery_reason - pending_terminal_lifecycle additionalProperties: false id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_103: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - recovery_required approval_event_capacity: type: string enum: - available execution: type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: integer allOf: - exclusiveMinimum: 0 effect_started_count: type: integer allOf: - minimum: 0 last_effect_order_sequence: type: integer allOf: - exclusiveMinimum: 0 phase: type: string enum: - settlement_only recovery_reason: type: string enum: - adapter_permanent_failure - review_artifact_integrity_failure - operator_repair_terminal_failure repair_completion: anyOf: - $ref: '#/components/schemas/Objects_101' - type: 'null' pending_terminal_lifecycle: type: string enum: - failed required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - recovery_reason - repair_completion - pending_terminal_lifecycle additionalProperties: false id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_104: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - recovery_required approval_event_capacity: type: string enum: - available execution: type: object properties: operation_id: type: string allOf: - minLength: 1 - maxLength: 256 operation_generation: type: integer allOf: - exclusiveMinimum: 0 committed_dispatch_count: type: integer allOf: - exclusiveMinimum: 0 effect_started_count: type: integer allOf: - minimum: 0 last_effect_order_sequence: type: integer allOf: - exclusiveMinimum: 0 phase: type: string enum: - operator_repair_required recovery_reason: $ref: '#/components/schemas/Union_176' repair_completion: type: 'null' pending_terminal_lifecycle: type: string enum: - failed required: - operation_id - operation_generation - committed_dispatch_count - effect_started_count - last_effect_order_sequence - phase - recovery_reason - repair_completion - pending_terminal_lifecycle additionalProperties: false id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_105: type: object properties: disposition: type: string enum: - executable readiness: type: string enum: - not_applicable lifecycle: type: string enum: - applied approval_event_capacity: type: string enum: - available execution: type: 'null' id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_106: type: object properties: disposition: type: string enum: - executable - blocked readiness: type: string enum: - not_applicable lifecycle: type: string enum: - stale - cancelled approval_event_capacity: type: string enum: - available execution: type: 'null' id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_107: type: object properties: disposition: type: string enum: - executable - blocked readiness: type: string enum: - not_applicable lifecycle: type: string enum: - expired approval_event_capacity: type: string enum: - available - exhausted execution: type: 'null' id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false Objects_108: type: object properties: disposition: type: string enum: - executable - blocked readiness: type: string enum: - not_applicable lifecycle: type: string enum: - failed approval_event_capacity: type: string enum: - available execution: type: 'null' failure_reason: type: string enum: - adapter_permanent_failure - review_artifact_integrity_failure - operator_repair_terminal_failure repair_completion: anyOf: - $ref: '#/components/schemas/Objects_101' - type: 'null' id: $ref: '#/components/schemas/BlueprintApplyPlanId' workspace_id: $ref: '#/components/schemas/WorkspaceId' publication: $ref: '#/components/schemas/AgentBlueprintPublicationBoundedProjection' protocol: $ref: '#/components/schemas/Objects_93' base: $ref: '#/components/schemas/Objects_94' entries: $ref: '#/components/schemas/Arrays_34' change_count: type: integer allOf: - minimum: 0 - maximum: 4096 risk: $ref: '#/components/schemas/BlueprintApplyRiskSummary' required_inputs: $ref: '#/components/schemas/Arrays_35' input_binding: $ref: '#/components/schemas/BlueprintApplyInputBindingProjection' review_artifact: $ref: '#/components/schemas/Objects_96' reviewed_provenance: $ref: '#/components/schemas/ReviewedPlanProvenanceBoundedProjection' approval_requirements_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ plan_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ approval: $ref: '#/components/schemas/BlueprintApprovalBoundedProjection' expires_at: $ref: '#/components/schemas/CurrentTimestamp' resource_version: type: integer allOf: - exclusiveMinimum: 0 created_at: $ref: '#/components/schemas/CurrentTimestamp' updated_at: $ref: '#/components/schemas/CurrentTimestamp' required: - disposition - readiness - lifecycle - approval_event_capacity - execution - failure_reason - repair_completion - id - workspace_id - publication - protocol - base - entries - change_count - risk - required_inputs - input_binding - review_artifact - reviewed_provenance - approval_requirements_digest - plan_fingerprint - approval - expires_at - resource_version - created_at - updated_at additionalProperties: false ValidationIdempotencyConflictError: type: object properties: error: type: object properties: type: type: string enum: - validation.idempotency_conflict message: type: string more: type: string enum: - >- https://docs.checkfu.com/reference/errors#validation-idempotency-conflict description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: The Idempotency-Key is already bound to a different request. ValidationIdempotencyInProgressError: type: object properties: error: type: object properties: type: type: string enum: - validation.idempotency_in_progress message: type: string more: type: string enum: - >- https://docs.checkfu.com/reference/errors#validation-idempotency-in-progress description: Stable public documentation and remedy for this error type. required: - type - message - more additionalProperties: false required: - error additionalProperties: false description: >- An identical idempotent request is still in progress and may be retried later. BlueprintApplyPlanId: type: string allOf: - pattern: ^bplan_[0-9a-f]{32}$ AgentBlueprintPublicationBoundedProjection: anyOf: - type: object properties: receipt_id: $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId' agent_blueprint_release: $ref: '#/components/schemas/Objects_92' source_type: type: string enum: - inline_files source_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ source_revision: type: 'null' source_root: type: 'null' source_map_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ compiler_version: $ref: '#/components/schemas/BoundedVersionCode_1' authoring_epoch: $ref: '#/components/schemas/AgentConfigurationAuthoringEpoch_1' required: - receipt_id - agent_blueprint_release - source_type - source_sha256 - source_revision - source_root - source_map_sha256 - compiler_version - authoring_epoch additionalProperties: false - type: object properties: receipt_id: $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId' agent_blueprint_release: $ref: '#/components/schemas/Objects_92' source_type: type: string enum: - source_revision source_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ source_revision: $ref: '#/components/schemas/ModelSafeTextCoordinate' source_root: $ref: '#/components/schemas/ModelSafeTextCoordinate' source_map_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ compiler_version: $ref: '#/components/schemas/BoundedVersionCode_1' authoring_epoch: $ref: '#/components/schemas/AgentConfigurationAuthoringEpoch_1' required: - receipt_id - agent_blueprint_release - source_type - source_sha256 - source_revision - source_root - source_map_sha256 - compiler_version - authoring_epoch additionalProperties: false - type: object properties: receipt_id: $ref: '#/components/schemas/AgentBlueprintPublicationReceiptId' agent_blueprint_release: $ref: '#/components/schemas/Objects_92' source_type: type: string enum: - canonical_package source_sha256: type: 'null' source_revision: type: 'null' source_root: type: 'null' source_map_sha256: type: 'null' compiler_version: type: 'null' authoring_epoch: type: 'null' required: - receipt_id - agent_blueprint_release - source_type - source_sha256 - source_revision - source_root - source_map_sha256 - compiler_version - authoring_epoch additionalProperties: false description: >- Model-safe immutable publication provenance for a reviewed Application plan. Objects_93: type: object properties: planner_version: $ref: '#/components/schemas/BoundedVersionCode_1' contract_epoch: $ref: '#/components/schemas/AgentConfigurationPlanContractEpoch' required: - planner_version - contract_epoch additionalProperties: false Objects_94: type: object properties: agent_blueprint_application: type: object properties: id: $ref: '#/components/schemas/AgentBlueprintApplicationId' materialization: type: string enum: - pending - materialized compatibility_blueprint_installation_id: anyOf: - $ref: '#/components/schemas/BlueprintInstallationId' - type: 'null' resource_version: type: integer allOf: - exclusiveMinimum: 0 required: - id - materialization - compatibility_blueprint_installation_id - resource_version additionalProperties: false authority_precondition_count: type: integer allOf: - minimum: 0 required: - agent_blueprint_application - authority_precondition_count additionalProperties: false Arrays_34: type: array items: $ref: '#/components/schemas/BlueprintApplyPlanEntry' allOf: - maxItems: 1024 BlueprintApplyRiskSummary: type: object properties: horizons: type: array items: $ref: '#/components/schemas/BlueprintAdoptionHorizon' allOf: - minItems: 1 - maxItems: 6 - uniqueItems: true consequential_actions: type: integer allOf: - minimum: 0 live_expansion_actions: type: integer allOf: - minimum: 0 required: - horizons - consequential_actions - live_expansion_actions additionalProperties: false description: Bounded risk counts and the non-ranked canonical horizon set. Arrays_35: type: array items: $ref: '#/components/schemas/BlueprintRequiredInput' allOf: - maxItems: 256 BlueprintApplyInputBindingProjection: anyOf: - type: object properties: state: type: string enum: - not_required - required active_binding: type: 'null' binding_count: type: integer allOf: - minimum: 0 revocation_count: type: integer allOf: - minimum: 0 required: - state - active_binding - binding_count - revocation_count additionalProperties: false - type: object properties: state: type: string enum: - bound active_binding: type: object properties: id: $ref: '#/components/schemas/BlueprintPlanInputBindingId' bound_input_count: type: integer allOf: - exclusiveMinimum: 0 expires_at: $ref: '#/components/schemas/CurrentTimestamp' required: - id - bound_input_count - expires_at additionalProperties: false binding_count: type: integer allOf: - exclusiveMinimum: 0 revocation_count: type: integer allOf: - minimum: 0 required: - state - active_binding - binding_count - revocation_count additionalProperties: false description: Opaque bounded state of the plan's protected input binding. Objects_96: type: object properties: id: $ref: '#/components/schemas/ReviewArtifactId' revision: type: integer allOf: - exclusiveMinimum: 0 reviewed_body_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ expires_at: $ref: '#/components/schemas/CurrentTimestamp' access: type: string enum: - authorized_person_non_model_only required: - id - revision - reviewed_body_digest - expires_at - access additionalProperties: false ReviewedPlanProvenanceBoundedProjection: anyOf: - type: object properties: kind: type: string enum: - git_merge source: anyOf: - type: object properties: kind: type: string enum: - agent_blueprint_source id: $ref: '#/components/schemas/AgentBlueprintSourceId' required: - kind - id additionalProperties: false - type: object properties: kind: type: string enum: - agent_source id: $ref: '#/components/schemas/AgentSourceId' required: - kind - id additionalProperties: false repository_id: $ref: '#/components/schemas/SourceRepositoryId' root: $ref: '#/components/schemas/ModelSafeTextCoordinate' reviewed_commit_sha: type: string allOf: - pattern: ^[0-9a-f]{40}$ merged_commit_sha: type: string allOf: - pattern: ^[0-9a-f]{40}$ review_artifact_id: $ref: '#/components/schemas/ReviewArtifactId' review_artifact_revision: type: integer allOf: - exclusiveMinimum: 0 review_equivalence_fingerprint: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ required: - kind - source - repository_id - root - reviewed_commit_sha - merged_commit_sha - review_artifact_id - review_artifact_revision - review_equivalence_fingerprint additionalProperties: false - type: object properties: kind: type: string enum: - checkfu_native review_artifact_id: $ref: '#/components/schemas/ReviewArtifactId' review_artifact_revision: type: integer allOf: - exclusiveMinimum: 0 reviewed_plan_body_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ required: - kind - review_artifact_id - review_artifact_revision - reviewed_plan_body_digest additionalProperties: false description: Attenuated projection of the canonical server-issued review provenance. BlueprintApprovalBoundedProjection: type: object properties: state: type: string enum: - not_required - required - approved atom_count: type: integer allOf: - minimum: 0 atoms: type: array items: $ref: '#/components/schemas/BlueprintApprovalAtomBoundedProjection' allOf: - maxItems: 32 current_witness_digest: anyOf: - type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ - type: 'null' receipt_count: type: integer allOf: - minimum: 0 revocation_count: type: integer allOf: - minimum: 0 last_approval_event_sequence: type: integer allOf: - minimum: 0 required: - state - atom_count - atoms - current_witness_digest - receipt_count - revocation_count - last_approval_event_sequence additionalProperties: false CurrentTimestamp: type: string allOf: - maxLength: 24 - pattern: ^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$ description: A canonical UTC ISO-8601 timestamp with millisecond precision. Union_174: type: string enum: - initiator_authority_revoked - approval_expired - approval_revoked - approval_policy_changed - cancellation_requested - intervention_active - plan_expired - review_artifact_expired - approval_event_capacity_exhausted - input_binding_expired - input_binding_revoked - input_capability_stale - claim_stale - target_stale Union_175: type: string enum: - stale - expired - cancelled Objects_101: type: object properties: original_repair_reason: $ref: '#/components/schemas/Union_176' repair_receipt_id: type: string allOf: - minLength: 1 - maxLength: 256 required: - original_repair_reason - repair_receipt_id additionalProperties: false Union_176: type: string enum: - adapter_outcome_unknown - command_integrity_failure - sealed_input_integrity_failure Objects_92: type: object properties: id: $ref: '#/components/schemas/AgentBlueprintReleaseId_1' blueprint_name: $ref: '#/components/schemas/ModelSafeTextCoordinate' release_number: type: integer allOf: - exclusiveMinimum: 0 content_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ required_wire_version: $ref: '#/components/schemas/ModelSafeTextCoordinate' required: - id - blueprint_name - release_number - content_sha256 - required_wire_version additionalProperties: false BoundedVersionCode_1: type: string allOf: - pattern: ^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$ description: >- Bounded ASCII version code for compiler, planner, and digest-key versions. AgentConfigurationAuthoringEpoch_1: anyOf: - type: string enum: - checkfu.dev/v1alpha1 description: Closed YAML/JSON authoring epoch; unknown epochs are rejected outright. ModelSafeTextCoordinate: type: object properties: keyed_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ digest_key_version: $ref: '#/components/schemas/BoundedVersionCode_1' utf8_bytes: type: integer allOf: - minimum: 0 required: - keyed_sha256 - digest_key_version - utf8_bytes additionalProperties: false description: Non-echoing keyed coordinate for source-controlled text. AgentConfigurationPlanContractEpoch: anyOf: - type: string enum: - checkfu.agent-configuration-plan/v1alpha1 description: Closed plan contract epoch binding one planner/contract generation. AgentBlueprintApplicationId: type: string allOf: - pattern: ^abapp_[0-9a-f]{32}$ BlueprintInstallationId: type: string allOf: - pattern: ^bins_[0-9a-f]{32}$ BlueprintApplyPlanEntry: type: object properties: sequence: type: integer allOf: - exclusiveMinimum: 0 operation: type: string enum: - create - update - publish_version - replace - remove - pause - resume - reuse - reference - handoff - blocked resource: $ref: '#/components/schemas/Union_172' logical_name: $ref: '#/components/schemas/ModelSafeTextCoordinate' authoring_owner: anyOf: - type: object properties: intended_owner: $ref: '#/components/schemas/Union_173' current_claim: $ref: '#/components/schemas/ManagedResourceClaimBoundedProjection' required: - intended_owner - current_claim additionalProperties: false - type: 'null' adoption_horizon: $ref: '#/components/schemas/BlueprintAdoptionHorizon' consequential: type: boolean source_location: anyOf: - $ref: '#/components/schemas/ModelSafeSourceLocation' - type: 'null' changes: type: array items: type: object properties: semantic_path: $ref: '#/components/schemas/ModelSafeTextCoordinate' before: anyOf: - $ref: '#/components/schemas/BlueprintApplyPlanSemanticValueRef' - type: 'null' after: anyOf: - $ref: '#/components/schemas/BlueprintApplyPlanSemanticValueRef' - type: 'null' redacted: type: boolean required: - semantic_path - before - after - redacted additionalProperties: false allOf: - maxItems: 128 reason_code: $ref: '#/components/schemas/BlueprintApplyPlanReasonCode' blocked_on_code: anyOf: - $ref: '#/components/schemas/AgentConfigurationErrorCode' - type: 'null' required: - sequence - operation - resource - logical_name - authoring_owner - adoption_horizon - consequential - source_location - changes - reason_code - blocked_on_code additionalProperties: false description: One bounded, ordered, immutable reviewed plan entry. BlueprintAdoptionHorizon: type: string enum: - versioned_behavior - new_exposure - live_expansion - live_narrowing - lifecycle_destructive - operational description: Blueprint adoption horizon; source cannot assert admission authority. BlueprintRequiredInput: type: object properties: input_id: type: integer allOf: - exclusiveMinimum: 0 display_name: $ref: '#/components/schemas/ModelSafeTextCoordinate' type: type: string enum: - secret - credential - connection write_only: type: boolean enum: - true reason_code: type: string enum: - secret_required - credential_required - connection_required required: - input_id - display_name - type - write_only - reason_code additionalProperties: false description: Opaque plan-local required input metadata; values are never returned. BlueprintPlanInputBindingId: type: string allOf: - pattern: ^bbind_[0-9a-f]{32}$ ReviewArtifactId: type: string allOf: - pattern: ^rview_[0-9a-f]{32}$ AgentBlueprintSourceId: type: string allOf: - pattern: ^absrc_[0-9a-f]{32}$ AgentSourceId: type: string allOf: - pattern: ^agsrc_[0-9a-f]{32}$ SourceRepositoryId: type: string allOf: - pattern: ^srepo_[0-9a-f]{32}$ BlueprintApprovalAtomBoundedProjection: type: object properties: atom_id: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ kind: type: string enum: - person - promotion required_receipt_count: type: integer allOf: - exclusiveMinimum: 0 valid_candidate_count: type: integer allOf: - minimum: 0 action_count: type: integer allOf: - exclusiveMinimum: 0 satisfied: type: boolean required: - atom_id - kind - required_receipt_count - valid_candidate_count - action_count - satisfied additionalProperties: false AgentBlueprintReleaseId_1: type: string allOf: - pattern: ^abrel_[0-9a-f]{32}$ Union_172: anyOf: - $ref: '#/components/schemas/ManagedResourceRef' - type: object properties: resource_kind: type: string enum: - action_policy - agent - agent_installation - automation - budget - memory_store - permission_assignment - principal - environment_recipe - surface_scope resource_id: type: 'null' required: - resource_kind - resource_id additionalProperties: false Union_173: anyOf: - type: object properties: type: type: string enum: - agent_source id: $ref: '#/components/schemas/AgentSourceId' required: - type - id additionalProperties: false - type: object properties: type: type: string enum: - agent_blueprint_application id: $ref: '#/components/schemas/AgentBlueprintApplicationId' required: - type - id additionalProperties: false - type: object properties: type: type: string enum: - automation_graph_application id: $ref: '#/components/schemas/AutomationGraphApplicationId' required: - type - id additionalProperties: false ManagedResourceClaimBoundedProjection: anyOf: - type: object properties: state: type: string enum: - absent claim_id: type: 'null' current_owner: type: 'null' generation: type: 'null' absence_revision: type: integer allOf: - exclusiveMinimum: 0 required: - state - claim_id - current_owner - generation - absence_revision additionalProperties: false - type: object properties: state: type: string enum: - present claim_id: type: string current_owner: $ref: '#/components/schemas/Union_173' generation: type: integer allOf: - exclusiveMinimum: 0 status: type: string enum: - reserved - active - drifted - source_missing - detached claim_revision: type: integer allOf: - exclusiveMinimum: 0 target: type: object properties: resource_id: anyOf: - type: string allOf: - minLength: 1 - maxLength: 256 - type: 'null' target_resource_version: anyOf: - type: integer allOf: - exclusiveMinimum: 0 - type: 'null' required: - resource_id - target_resource_version additionalProperties: false last_applied: anyOf: - type: object properties: owner_revision_sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ canonical_spec_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ target_resource_version: anyOf: - type: integer allOf: - exclusiveMinimum: 0 - type: 'null' required: - owner_revision_sha256 - canonical_spec_digest - target_resource_version additionalProperties: false - type: 'null' active_intervention_set_digest: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ required: - state - claim_id - current_owner - generation - status - claim_revision - target - last_applied - active_intervention_set_digest additionalProperties: false description: Attenuated exact claim-presence projection for a reviewed plan entry. ModelSafeSourceLocation: type: object properties: file: $ref: '#/components/schemas/ModelSafeTextCoordinate' canonical_path: anyOf: - $ref: '#/components/schemas/ModelSafeTextCoordinate' - type: 'null' start: $ref: '#/components/schemas/Objects_95' end: $ref: '#/components/schemas/Objects_95' derived: type: boolean required: - file - canonical_path - start - end - derived additionalProperties: false description: Model-safe source coordinates with no source-controlled text. BlueprintApplyPlanSemanticValueRef: type: object properties: sha256: type: string allOf: - pattern: ^sha256:[0-9a-f]{64}$ utf8_bytes: type: integer allOf: - exclusiveMinimum: 0 required: - sha256 - utf8_bytes additionalProperties: false description: Digest and byte count of one exact canonical semantic value. BlueprintApplyPlanReasonCode: type: string enum: - create_required - semantic_update - immutable_version_publish - replacement_required - removal_required - pause_required - resume_required - already_satisfied - external_reference - ownership_handoff - authoring_conflict - required_input_missing - prerequisite_unready - intervention_active - unsupported_resource - drift_conflict description: Closed reason vocabulary for one immutable plan entry. AgentConfigurationErrorCode: type: string enum: - configuration.source_invalid - configuration.source_ambiguous - configuration.source_too_large - configuration.source_unavailable - configuration.source_missing - configuration.source_stale - configuration.source_non_descendant - configuration.unsupported_authoring_epoch - configuration.authoring_conflict - configuration.handoff_required - configuration.claim_stale - configuration.target_stale - configuration.drift_conflict - configuration.plan_stale - configuration.plan_expired - configuration.plan_cancelled - configuration.plan_fingerprint_mismatch - configuration.plan_base_unstable - configuration.plan_projection_too_large - configuration.review_provenance_unavailable - configuration.review_artifact_unavailable - configuration.review_artifact_expired - configuration.review_artifact_integrity_failure - configuration.review_artifact_cursor_invalid - configuration.review_artifact_too_large - configuration.intervention_active - configuration.approval_required - configuration.approval_policy_unsupported - configuration.approval_expired - configuration.approval_revoked - configuration.human_input_required - configuration.input_binding_stale - configuration.input_binding_expired - configuration.input_binding_revoked - configuration.apply_blocked - configuration.apply_in_progress - configuration.apply_resumable - configuration.apply_operation_fenced - configuration.inline_source_unavailable_for_mcp description: >- Closed Plan 806 configuration error vocabulary; HTTP may overlap, semantics do not. ManagedResourceRef: anyOf: - type: object properties: resource_kind: type: string enum: - action_policy resource_id: $ref: '#/components/schemas/ActionPolicyId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - agent resource_id: $ref: '#/components/schemas/AgentId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - agent_installation resource_id: $ref: '#/components/schemas/AgentPlacementId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - automation resource_id: $ref: '#/components/schemas/AutomationId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - budget resource_id: $ref: '#/components/schemas/BudgetId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - memory_store resource_id: $ref: '#/components/schemas/MemoryStoreId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - permission_assignment resource_id: $ref: '#/components/schemas/PermissionAssignmentId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - principal resource_id: $ref: '#/components/schemas/PrincipalId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - environment_recipe resource_id: $ref: '#/components/schemas/EnvironmentId' required: - resource_kind - resource_id additionalProperties: false - type: object properties: resource_kind: type: string enum: - surface_scope resource_id: $ref: '#/components/schemas/CollaborationSpaceId' required: - resource_kind - resource_id additionalProperties: false description: Family-discriminated identity of one materialized managed resource. AutomationGraphApplicationId: type: string allOf: - pattern: ^agpa_[0-9a-f]{32}$ Objects_95: type: object properties: line: type: integer allOf: - exclusiveMinimum: 0 column: type: integer allOf: - exclusiveMinimum: 0 byte: type: integer allOf: - minimum: 0 required: - line - column - byte additionalProperties: false ActionPolicyId: type: string allOf: - pattern: ^apol_[0-9a-f]{32}$ AgentId: type: string allOf: - pattern: ^agent_[0-9a-f]{32}$ AgentPlacementId: type: string allOf: - pattern: ^aini_[0-9a-f]{32}$ AutomationId: type: string allOf: - pattern: ^auto_[0-9a-f]{32}$ BudgetId: type: string allOf: - pattern: ^bgt_[0-9a-f]{32}$ MemoryStoreId: type: string allOf: - pattern: ^memstore_[0-9a-f]{32}$ PermissionAssignmentId: type: string allOf: - pattern: ^perm_[0-9a-f]{32}$ PrincipalId: type: string allOf: - pattern: ^prin_[0-9a-f]{32}$ EnvironmentId: type: string allOf: - pattern: ^env_[0-9a-f]{32}$ CollaborationSpaceId: type: string allOf: - pattern: ^surf_[0-9a-f]{32}$ securitySchemes: bearerAuth: type: http scheme: bearer ````