public-api
public-investigations

Explain Asset

TECH-982: synchronous asset investigation returning an EvidenceCapsule.

Runs the same correlator pipeline as alert-driven investigations but does not persist an AlertInvestigation row. Use when you have an asset and a question but no firing alert.

post/api/v1/sdk/alerts/investigations/explain

Request

  • Base URL: http://localhost:8000
  • URL: http://localhost:8000/api/v1/sdk/alerts/investigations/explain
  • Auth: none declared

Headers

Authorizationstring

Request body

asset_idstring required

Asset public UUID

questionstring nullable

Natural-language question to anchor the capsule

event_typestring

One of: anomaly, freshness, schema_change, validity

Response

Successful Response

successboolean required
dataunknown
messagestring nullable
errorstring nullable
metaobject nullable

Changes

No recorded changes to this operation across all 1 revision of this API.