---
title: "Get guardrail shadow divergence report"
method: GET
path: "/v1/org/guardrail-shadow-report"
tags: ["Organization"]
---

# Get guardrail shadow divergence report

`GET /v1/org/guardrail-shadow-report`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/org/guardrail-shadow-report`
- Auth: HTTP bearer

Returns Convention 6 shadow-mode violations (`guardrail_shadow.would_deny` audit events)
grouped by reason code. Owner/admin only.

## Query parameters

- `since` string, date-time
- `until` string, date-time

## Response `200`

Guardrail shadow report

- GuardrailShadowReportResponse
  - `org_id` string, uuid
  - `since` string, date-time
  - `until` string, date-time
  - `total_would_deny` integer
  - `by_reason` GuardrailShadowReasonRow[]
    - `reason_code` string
    - `would_deny_count` integer
    - `enforced_count` integer

## Other responses

- `401`: Authentication required or invalid
- `403`: Insufficient permissions

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/ae109b496830?raw)