---
title: "Submit a moderator review of an incident (Art 14 human oversight)"
method: POST
path: "/api/v1/incidents/{incident_id}/review"
tags: ["Incidents"]
---

# Submit a moderator review of an incident (Art 14 human oversight)

`POST /api/v1/incidents/{incident_id}/review`

## Request

- Base URL: `https://api.tuteliq.ai`
- URL: `https://api.tuteliq.ai/api/v1/incidents/{incident_id}/review`
- Auth: one of:
  - HTTP bearer
  - API key in header `x-api-key`

Records a deployer-side moderator decision (confirm / downgrade / escalate / reclassify / dismiss) on a model-produced incident. The override is persisted to the incident document and a separate signed Art 12 audit receipt is emitted linking back to the original. The optional reason_comment is encrypted with the customer's registered public key (end-to-end) when enabled; otherwise server-side AES.

## Path parameters

- `incident_id` string, required

## Request body

- object
  - `action` 'confirm' | 'downgrade' | 'escalate' | 'reclassify' | 'dismiss' | 'resolve' | 'reopen', required
  - `reason_code` 'confirmed_accurate' | 'false_positive' | 'out_of_context' | 'insufficient_severity' | 'incorrect_category' | 'requires_law_enforcement' | 'parent_notified' | 'other', required
  - `reason_comment` string
  - `new_risk_level` 'low' | 'moderate' | 'high' | 'critical'
  - `new_risk_category` 'bullying' | 'grooming' | 'unsafe' | 'self_harm' | 'other' | 'social_engineering' | 'app_fraud' | 'romance_scam' | 'mule_recruitment' | 'gambling_harm' | 'coercive_control' | 'vulnerability_exploitation' | 'radicalisation' | 'distress_signals' | 'tfgbv' | 'synthetic_content'
  - `moderator_external_id` string
  - `retention_class` 'biometric-high-risk' | 'safety-high-risk' | 'limited-risk' | 'minimal-risk'

## Response `200`

Default Response

- object
  - `incident_id` string
  - `original` object
    - `risk_category` string
    - `risk_level` string
  - `revised` object
    - `risk_category` string
    - `risk_level` string
  - `audit_receipt` object
    - `request_id` string
    - `timestamp` string
    - `signature` string

## Changes

- **2026-10-19** `8490332e0031`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/tuteliq/apis/tuteliq-api/changes/api/v1/incidents/:incident_id/review/post.md)

---

[API](https://skmtc.dev/tuteliq/apis/tuteliq-api.md) · [All operations](https://skmtc.dev/tuteliq/apis/tuteliq-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tuteliq/apis/tuteliq-api/revisions/8490332e0031?raw)