Fleet

Node readiness evidence

Changed on

This node's readiness evidence: workload, security, and stored recovery facts, in the minimal shape the Fleet Readiness fan-out consumes. The control instance reads this during its fan-out, so a node that does not answer, or a domain it cannot produce, reads as unknown rather than as healthy. Requires stack:read permission.

get/api/readiness/evidence

Request

  • Base URL
    https://localhost:1852
  • URL
    https://localhost:1852/api/readiness/evidence
  • Auth
    HTTP bearer

Headers

x-node-idinteger
Example:1

Target a specific node by ID. If omitted, the default node is used. Can also be passed as ?nodeId= query parameter.

Response

Readiness evidence for the node.

generatedAtinteger required

Epoch ms this payload finished assembling, taken after both domains settled. Not the age of either domain: each carries its own generatedAt below, and a consumer ages a cell by its domain's.

workloadsobject nullable required

This node's workload facts, or null when they could not be read: { "generatedAt": <epoch ms>, "counts": { <status>: <number> }, "degraded": <boolean>, "stale": <boolean>, "problems": [{ "stack": <string>, "status": "exited" | "unknown" | "partial" }] }. Every status other than running is a problem, unknown and partial included. degraded and stale describe how the read itself went and are the only signal that a served payload is no longer current.

securityobject nullable required

This node's security posture pass, or null when it could not be computed: { "generatedAt": <epoch ms>, "posture": <string>, "posturePartial": <boolean>, "scannerAvailable": <boolean>, "staleScans": <number>, "failedScans": <number>, "lastSuccessfulScanAt": <epoch ms|null> }. posture is authoritative over the fields beside it; posturePartial is true when any bounded pass behind the posture was capped, so a 0 beside it is ambiguous between "none" and "not counted".

Changes