Webhooks

ai_governance.prompt.flagged

A prompt a user submitted to an AI product was flagged as risky.

Subscription filters

  • product — one of: ABACUS_CHAT, AMPCODE, ANAKIN_CHAT, ANDI_CHAT, BIG_AGI_CHAT, CANVA_CHAT, CHATBOX_AI_CHAT, CHATGLM_CHAT, CHATGOT_CHAT, CHATGPT_AGENTS, CHATGPT_CHAT, CHATGPT_CODEX, CHATHUB_CHAT, CHATON_CHAT, CHATPLAYGROUND_CHAT, CHERRY_STUDIO_CHAT, CLAUDE_CHAT, CLAUDE_CODE, CLAUDE_COWORK, CLAUDE_DESIGN, COPILOT_CHAT, CURSOR_AGENTS, CURSOR_CHAT, DEEPSEEK_CHAT, DOUBAO_CHAT, DUCK_AI_CHAT, ERNIE_CHAT, FANAR_CHAT, FELO_CHAT, FIREWORKS_CHAT, GEMINI_CHAT, GIGACHAT_CHAT, GLOBALGPT_CHAT, GOVAI_CHAT, GRAMMARLY_CHAT, GROK_CHAT, IASK_CHAT, IFLYTEK_SPARK_CHAT, INNER_AI_CHAT, JAIS_CHAT, KIMI_CHAT, KIRO_CLI, KIRO_CREW, KIRO_WEB, KOMO_CHAT, LMARENA_CHAT, LOVABLE_CHAT, LUZIA_CHAT, M365_COPILOT_CHAT, M365_COPILOT_EMBEDDED, MAGAI_CHAT, MAGICA_CHAT, MERLIN_CHAT, META_AI_CHAT, MISTRAL_CHAT, MONDAY_CHAT, MONICA_CHAT, MORPHIC_CHAT, MUSE_AI_CHAT, NANO_GPT_CHAT, NOTION_CHAT, ONE_MIN_AI_CHAT, OPENROUTER_CHAT, PERPLEXITY_CHAT, PERPLEXITY_COMPUTER, PI_CHAT, POE_CHAT, QOLABA_CHAT, QWEN_CHAT, REPLIT_CHAT, RIPPLING_CHAT, SENSECHAT_CHAT, SHAKUDO_CHAT, SIDER_CHAT, STEPFUN_CHAT, T3_CHAT, TYPINGMIND_CHAT, USE_AI_CHAT, VENICE_CHAT, WRTN_CHAT, YANDEX_ALICE_CHAT, YOU_COM_CHAT, YUANBAO_CHAT, Z_AI_CHAT
postWebhookai_governance.prompt.flagged

Payload

datacontenttypestring

media type of data

idstring

unique id for event

sourcestring

the event source; always /adaptive

specversionstring

CloudEvents spec version

subjectstring

reserved for the event's primary entity id; currently never set, so always omitted

timestring date-time

when the event occurred

type'ai_governance.prompt.flagged'

the event type

Example payload

{
  "data": {
    "payload": {
      "account_info": {
        "logged_in_email": "marcus.lee@gmail.com",
        "plan_type": "Free"
      },
      "file_names": [
        "q3_customer_refunds.xlsx",
        "internal_notes.txt"
      ],
      "flagged_at": "2026-06-09T18:00:00Z",
      "product": "CHATGPT_CHAT",
      "prompt_use_case": "Financial analysis",
      "raw_prompt": "Please summarize the attached refund spreadsheet and draft a reply to the cardholder using the notes in internal_notes.txt. Include the last four digits where helpful.",
      "risk_analysis": {
        "exposures": [
          {
            "exposure": "SOCIAL_SECURITY_NUMBER",
            "file_name": "q3_customer_refunds.xlsx",
            "source": "FILE"
          }
        ],
        "prompt_risk_summary": "The prompt and uploaded file may expose payment card data and customer PII to an external AI service."
      },
      "source": "BROWSER_EXTENSION",
      "surface": "BROWSER",
      "user": {
        "email": "jordan.lee@example.com",
        "id": "8d2c1f6a-9b3e-4c7a-bf21-2a5e9c1d4b88"
      }
    }
  },
  "datacontenttype": "application/json",
  "id": "9b2f6c1e-8d3a-4f0b-a1c2-5e7d9f3b6a48",
  "source": "/adaptive",
  "specversion": "1.0",
  "time": "2026-06-09T18:00:00Z",
  "type": "ai_governance.prompt.flagged"
}

Response

Return any 2xx status to acknowledge the delivery. Timeouts, 408, 429, and 5xx responses other than 501 are retried; any other status is a permanent failure.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.