---
title: "Review Run Scip"
method: GET
path: "/v1/internal/review-runs/{job_id}/scip"
---

# Review Run Scip

`GET /v1/internal/review-runs/{job_id}/scip`

## Request

- Base URL: `https://api.graphify.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.graphify.com/v1/internal/review-runs/{job_id}/scip`
- Auth: none declared

Presigned reads of the workspace members' promoted SCIP artifacts + manifests,
for the review worker's cross-repo TRUST chain (issue #210).

Same auth + tenant-derivation guarantees as ``/peer-graphs`` (a job token bound to
this run PLUS an active lease; the tenant/group/home/base-SHA all read from the
AUTHENTICATED run, never from client input). Gated behind BOTH the cross-repo group
flag AND a dedicated ``scip_trust_enabled`` flag, so it 404s until the gate-capable
path is deliberately armed. The service applies the package-collision + base-SHA
provenance downgrades before returning anything (see ``presign_group_scip``).

## Path parameters

- `job_id` string, required

## Headers

- `X-Graphify-Lease-Token` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graphify/apis/graphify-control-plane.md) · [All operations](https://skmtc.dev/graphify/apis/graphify-control-plane/llms.txt) · [OpenAPI document](https://skmtc.dev/graphify/apis/graphify-control-plane/revisions/0e75c82b5ea8?raw)