Protection

Get effective (composed) protection with provenance

Returns the composed canonical protection card (platform → org → team → agent cascade applied) with _composition.field_provenance always populated. The provenance map carries per-key {layer, layer_id?, kind?} entries showing which authoring scope contributed each leaf. Caller-aware redaction: layer labels (platform / org / team / agent / derived) are always visible; layer_id is only revealed to callers who can read that scope. cards-as-primitive Phase 4 W2.2.

get/protection/agent/{agent_id}/effective

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/protection/agent/{agent_id}/effective
  • Auth: one of:
    • HTTP bearer
    • API key in header X-Mnemom-Api-Key
    • API key in cookie mnemom_session

Path parameters

agent_idstring required

Agent identifier (e.g. smolt-abc123)

Response

Composed effective card with per-key field_provenance.

card_versionstring required
content_versionstring

Optional. Which default content the card carries, e.g. mnemom-agent-default/2.1.0 (semver within a lineage). Distinct from card_version, the schema version. New agents are born with it; composition carries the agent card's value onto the canonical card.

card_idstring
agent_idstring required
issued_atstring date-time
expires_atstring date-time nullable
mode'off' | 'observe' | 'nudge' | 'enforce' required

Strictest-wins composition: enforce > nudge > observe > off.

extensionsobject

Free-form extension slot for non-canonical fields. Ignored by the composer; preserved on read for tooling that needs an audit-tail metadata bag.

content_hashstring

Response-only: content hash of the composed card (sha256:<hex>), injected by the GET/PUT response. Server-assigned — do not send on a PUT.

versioninteger

Response-only: monotonic card version, injected by the GET/PUT response. Server-assigned — do not send on a PUT.

Changes

No recorded changes to this operation across all 1 revision of this API.