Decisions & Overrides

List recent governance decisions

Lists recent decisions for the tenant, newest first. The lookback window and maximum page size are tier-gated: Community/Free sees the last 5 decisions in 24h; Evaluation 100 decisions in 14 days; Enterprise up to 1000 with an unbounded window. Requesting a limit above the tier cap returns 429 with the upgrade envelope (error, limit_type: decision_list_size, tier, limit, remaining, upgrade{tier, wording, compare_url, buy_url}) plus the X-Axonflow-Tier-Limit and X-Axonflow-Upgrade-URL headers. A since earlier than the tier window is silently clamped to the window.

Role-scoped reads (#2922): admin/owner list every user's decisions; every other role lists only their own (rows attributed to their identity). A caller with no resolvable per-user identity gets an empty list. The role/scope is trusted only over the internal proxy-auth channel. DEPLOYMENT_MODE=community lists tenant-wide, and community-saas lists tenant-wide over the agent gateway — see POST /api/v1/audit/search for the single-operator rationale (#3060).

get/api/v1/decisions

Request

Query parameters

limitinteger

Page size (positive integer). Defaults to the tier maximum.

sincestring date-time

RFC3339 lower bound; defaults to (and is clamped to) the tier lookback window

decision'allowed' | 'blocked' | 'redacted' | 'needs_approval' | 'error'

Canonical verdict filter

policy_idstring

Filter to decisions where this policy fired

tool_signaturestring

Filter by tool signature

Headers

X-Tenant-IDstring required

Tenant identifier scoping the request. The AxonFlow Agent gateway sets this header after authentication; the orchestrator fails closed when it is absent (401 on audit/decision endpoints, 400 on others — see each operation). Clients cannot widen their scope through it: handlers force the tenant filter from this header, never from the request body.

Response

Decision list (decisions is [] when empty, never null)

Changes

No recorded changes to this operation across all 1 revision of this API.