---
title: "GET /projects/{projectId}/agents/{agentId}/factory-policy"
method: GET
path: "/projects/{projectId}/agents/{agentId}/factory-policy"
---

# GET /projects/{projectId}/agents/{agentId}/factory-policy

`GET /projects/{projectId}/agents/{agentId}/factory-policy`

## Request

- Base URL: `https://api.caveman.so/api/v1`
- URL: `https://api.caveman.so/api/v1/projects/{projectId}/agents/{agentId}/factory-policy`
- Auth: one of:
  - OAuth 2
    - Authorization code: `/api/v1/oauth/authorize`
    - Token URL: `/api/v1/oauth/token` scopes: `trace:read_metadata`
  - HTTP bearer
  - API key in cookie `cave_access`
  - API key in cookie `__Secure-cave_identity.session_token`

GET /api/v1/projects/{projectId}/agents/{agentId}/factory-policy on the Caveman Cloud control plane. Requires the trace:read_metadata scope. Not exposed to autonomous agents: Native user authority over factory case admission, bounded policy, binding approval and cancellation. An agent session must never read a case, resolve a setup blocker, approve an execution binding, admit paid improvement work or cancel a fence.

## Response `200`

Current policy and exact shared allowance. Legacy policies have no shared allowance.

- FactoryPolicyResponse
  - `policy` FactoryPolicy, required
    - `revision` integer, required
    - `goal` string, required
    - `change_class` 'application-source', required
    - `case_budget_micros` string, required: Per-case cap. Initial approval also sets the shared allowance. Later edits retain its original amount; new_attempt explicitly approves an additional allowance.
    - `publication_policy` 'evaluated-draft-only' | 'none', required
    - `test_connections` string[], required
    - `model_connection_ref` string, nullable, required
    - `paused` boolean, required: Stops new case admissions. Already-admitted cases retain their original authority until cancelled or otherwise fenced.
    - `approved_by` string, uuid, required
    - `approved_at` string, date-time, required
    - `scope_digest` string, required
    - `allowance` FactoryAllowance, required
      - `id` string, uuid, required
      - `policy_revision` integer, required
      - `limit_micros` string, required: Exact integer micro amount.
      - `spent_micros` string, required: Exact integer micro amount.
      - `reserved_micros` string, required: Exact integer micro amount.
      - `held_micros` string, required: Unknown paid outcomes included in reserved_micros, never added twice.
      - `remaining_micros` string, required: Shared allowance remaining after spend and reservations; organization, project, repository and case ceilings still apply independently.
      - `approved_by` string, uuid, required
      - `approved_at` string, date-time, required
      - `basis` 'attempt_budget_rows_and_gateway_case_keys' | 'attempt_budget_rows', required: attempt_budget_rows_and_gateway_case_keys: the attempt budget row plus the gateway's spend on the factory keys of every case of the attempt. attempt_budget_rows: the row alone, when the gateway could not be read.
  - `latest_revision` integer, required

## Other responses

- `400`: Invalid policy.
- `403`: Native user authority required.
- `409`: Stale revision or changed fresh-approval retry.
- `4XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.
- `5XX`: Structured failure. `error.code` is stable; `error.request_id` is echoed in the x-cave-request-id header.

---

[API](https://skmtc.dev/caveman/apis/caveman-cloud-api.md) - [All operations](https://skmtc.dev/caveman/apis/caveman-cloud-api/llms.txt) - [OpenAPI document](https://skmtc.dev/caveman/apis/caveman-cloud-api/revisions/508312d01cfc?raw)