compliance

Record transparency application

Record evidence that an AI system's transparency policy was applied.

Requires a transparency policy. Repeating a request with the same idempotency_key from the same caller returns the original record; different content with the same key returns 409.

Required permission: compliance.manage.

post/v1/projects/{project_id}/compliance/systems/{system_id}/transparency-applications

Request

  • Base URL: https://api.connic.co
  • URL: https://api.connic.co/v1/projects/{project_id}/compliance/systems/{system_id}/transparency-applications
  • Auth: HTTP bearer

Path parameters

project_idstring uuid required

ID of the project the API key belongs to.

system_idstring uuid required

AI system ID from GET /compliance/systems.

Request body

idempotency_keystring nullable

Retry key, scoped to the caller and system. Repeating a request with the same key and content returns the existing record; reusing the key with different content fails.

environment_idstring uuid nullable

Environment the record documents. Must be linked to the system if the system lists environments.

deployment_idstring uuid nullable

Deployment the record documents. Must be linked to the system if the system lists deployments.

run_idstring uuid nullable

Run the record documents. Its agent, environment, deployment and connector fill in omitted references and must match given ones.

connector_idstring uuid nullable

Connector the record documents.

agent_namestring nullable

Agent the record documents. Must be linked to the system if the system lists agents.

surfacestring nullable

Where the disclosure was delivered, such as a web application or email.

modestring nullable

Free-text label for how the disclosure was delivered.

disclosure_type'direct_interaction' | 'synthetic_content' | 'deepfake' | 'public_interest_text' | 'biometric_emotion' required

Disclosure or marking the record covers.

status'applied' | 'failed' | 'delivery_unknown' required

applied when delivery was confirmed; failed and delivery_unknown require failure_reason.

output_hashstring nullable

Hex SHA-256 digest of the delivered output. Stored in lowercase.

failure_reasonstring nullable

Why delivery failed or could not be confirmed. Must be omitted when status is applied.

application_metadataobject

Free-form JSON with additional details. At most 64 KiB when serialized.

applied_atstring date-time nullable

When the disclosure was applied or the attempt ended. Defaults to the time of the request; cannot be in the future.

Response

Successful Response

idstring uuid required
project_idstring uuid required

Project the record belongs to.

system_idstring uuid required

AI system the record belongs to.

policy_idstring uuid required

Transparency policy in effect when the record was created.

policy_versioninteger required

Version of that policy.

evidence_source'customer_attestation' | 'upstream_attestation' required

Source of the attestation, from provenance.source.

provenanceobject required

Who attested to the record and on what basis, as submitted.

idempotency_keystring required

SHA-256 digest derived from the submitted idempotency key, or a random value when none was sent.

request_digeststring required

SHA-256 digest of the submitted content, used to detect conflicting retries.

environment_idstring uuid nullable required

Environment the record documents.

deployment_idstring uuid nullable required

Deployment the record documents.

run_idstring uuid nullable required

Run the record documents.

connector_idstring uuid nullable required

Connector the record documents.

agent_namestring nullable required

Agent the record documents.

surfacestring nullable required

Where the disclosure was delivered.

modestring nullable required

Free-text label for how the disclosure was delivered.

disclosure_type'direct_interaction' | 'synthetic_content' | 'deepfake' | 'public_interest_text' | 'biometric_emotion' required

Disclosure or marking the record covers.

status'applied' | 'failed' | 'delivery_unknown' required

applied when delivery was confirmed, otherwise failed or delivery_unknown.

output_hashstring nullable required

Lowercase hex SHA-256 digest of the delivered output.

failure_reasonstring nullable required

Why delivery failed or could not be confirmed. null when applied.

policy_snapshotobject required

Copy of the transparency policy at the time of recording.

policy_hashstring required

SHA-256 hash of policy_snapshot.

application_metadataobject required

Additional details submitted with the record.

applied_atstring date-time nullable required

When the disclosure was applied. null unless status is applied.

finalized_atstring date-time nullable required

When the attempt ended.

recorded_bystring nullable required

ID of the user who recorded the evidence.

created_atstring date-time required

Changes

No recorded changes to this operation across all 2 revisions of this API.