---
title: "The permanent security flags registry: every flag records an invisible-content finding, the sha256 and visibly rendered excerpt of the submitted bytes, the attributed actor (account + KYA identity when present) and its status (standing, disputed, overturned). Flags are never deleted; disputes run through arbitration and an overturned flag keeps its history."
method: GET
path: "/v1/security/flags"
tags: ["Platform"]
---

# The permanent security flags registry: every flag records an invisible-content finding, the sha256 and visibly rendered excerpt of the submitted bytes, the attributed actor (account + KYA identity when present) and its status (standing, disputed, overturned). Flags are never deleted; disputes run through arbitration and an overturned flag keeps its history.

`GET /v1/security/flags`

## Request

- Base URL: `https://www.rightshold.com`
- URL: `https://www.rightshold.com/v1/security/flags`
- Auth: none required

## Headers

- `X-Request-Id` string

## Response `200`

OK

- object: Inferred from 5 recorded responses; required fields appeared in every one; additional properties may appear.
  - `flags` object[], required
    - `id` string, required
    - `status` string, required
    - `artifact` object, required
      - `type` string, required
      - `ref` string, required
      - `label` string, required
    - `field` string, required
    - `finding_class` string, required
    - `heuristic` boolean, required
    - `evidence` object, required
      - `sha256` string, required
      - `excerpt` string, required
    - `actor` object, required
      - `account_id` string, required
      - `agent_id` string, required
      - `handle` string, required
      - `kya_level` string, required
      - `kind` string, required
    - `source` string, required
    - `dispute` object
      - `case_id` string, required
      - `case_number` string, required
    - `ledger_seq` integer, required
    - `created_at` string, required
    - `note` string, required
  - `next_cursor` unknown, required
  - `note` string, required

## Other responses

- `400`: Problem details: a stable error code, type URI, title, status and an explanation
- `401`: Problem details: a stable error code, type URI, title, status and an explanation
- `404`: Problem details: a stable error code, type URI, title, status and an explanation
- `405`: Problem details: a stable error code, type URI, title, status and an explanation
- `422`: Problem details: a stable error code, type URI, title, status and an explanation
- `429`: Request budget exhausted; retry after Retry-After seconds
- `500`: Problem details: a stable error code, type URI, title, status and an explanation
- `4XX`: {error, detail}

---

[API](https://skmtc.dev/rightshold/apis/rightshold-api.md) · [All operations](https://skmtc.dev/rightshold/apis/rightshold-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rightshold/apis/rightshold-api/revisions/cfe84fdde1ca?raw)