---
title: "Review Run Result"
method: POST
path: "/v1/internal/review-runs/{job_id}/result"
---

# Review Run Result

`POST /v1/internal/review-runs/{job_id}/result`

## Request

- Base URL: `https://api.graphify.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.graphify.com/v1/internal/review-runs/{job_id}/result`
- Auth: none declared

A review worker reporting progress or its final review + gate verdict.

`InternalWorker` has already proved the caller holds a token minted for this
`{job_id}`. Unlike the index callback there is no `{tenant_id}` in the path:
the review route carries only the job id, so the tenant is read from the run
itself and the callback is verified with *that* tenant's derived secret. A
header-supplied tenant is never trusted -- it would let a valid token pick
which tenant's secret verifies the body.

## Path parameters

- `job_id` string, required

## Headers

- `X-Graphify-Signature` string, nullable
- `X-Graphify-Lease-Token` string, nullable

## Response `202`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graphify/apis/graphify-control-plane.md) · [All operations](https://skmtc.dev/graphify/apis/graphify-control-plane/llms.txt) · [OpenAPI document](https://skmtc.dev/graphify/apis/graphify-control-plane/revisions/0e75c82b5ea8?raw)