Skip to content

Get provenance

GET
/api/v1/runs/{run_id}/provenance

Inspect a consistent versioned snapshot of recorded run evidence.

Credential scopes: runs:read

Resource authority: Run submitter or current model owner/co-admin; model-administrator reads are audited. Connector administration and model execution grants alone confer no scientific read access.

Retry: Repeat GET using the same resource identity; each request rechecks current credential and resource authority.

Guards: No mutation or execution authority is granted.

Retain: Run identity; opaque cursor where returned.

Specific failures: 403 insufficient_scope; 404 not_found: missing or unauthorized resource

Next action: Inspect current state; follow exact referenced artifact identities. Worked workflow

A consistent snapshot of recorded acceptance, scientific definition, execution receipts, exact verified input/output versions and direct upstream producers. In-progress runs accumulate evidence. Contains no storage locators, credentials or temporary transfer authorization. The submitter retains historical access after model-grant revocation. Current model owners/co-admins may read with an audit record; removing that administrative membership removes its read authority. Historical storage availability does not govern metadata retrieval.

run_id
required
string format: uuid

Run identity readable by its submitter or current model owner/co-admin.

Version-1 provenance JSON; deterministic while recorded facts are unchanged.

Media typeapplication/json

Versioned JSON document; the download endpoint serializes this same document. Stable ordering and the absence of an inspection timestamp make unchanged evidence byte-for-byte reproducible. In-progress runs accumulate more facts.

object
cancellation
One of:
null
definition
required

Immutable registered scientific contract, including schemas and examples. Identity labels are provider claims, not independent software attestation.

object
contract_version
required

Enumeray’s interpretation of schema restrictions and input/output values. This is independent of the wrapper protocol and JSON Schema dialect.

integer format: int32
dataset_identities
required
Array<string>
examples
required
Array<object>

A named example validated at registration and preserved for discovery.

object
inputs
required
name
required
string
outputs
input_schema
required
log_files

Up to eight optional diagnostics, keyed by [a-z][a-z0-9_-]{0,63}. Paths are confined to the run workspace; diagnostics are independent of results.

object
key
additional properties
object
path
required
string
>= 1 characters <= 1024 characters
model_identity
required
string
output_schema
required
runtime_identity
required
string
wrapper_identity
required
string
wrapper_protocol_version
required
integer format: int32
execution
One of:
null
format_version
required
integer format: int32
input_artifacts
required

Accepted file dependencies, ordered by declared input name.

Array<object>

Immutable verified file evidence. Availability is deliberately separate: an expired file does not rewrite the exact version used or produced by a run.

object
artifact_id
required
string format: uuid
checksum
required
object
algorithm
required

Only sha256 is supported.

string
Allowed values: sha256
checksum_type
required

Only full_object is supported; multipart checksums are not accepted.

string
Allowed values: full_object
value
required

Canonical base64 of the 32-byte SHA-256 digest.

string
>= 44 characters <= 44 characters /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/
created_at
required
string format: date-time
logical_name
required
string
media_type
required
string
name
required

Declared input/output position, independent of the artifact logical name.

string
producer
One of:
null
scientific_metadata
required
size_bytes
required
integer format: int64
storage_destination_id
required
string
verified_at
required
string format: date-time
version_id
required
string
input_collections
Array<object>
object
collection_id
required
string format: uuid
manifest_digest
required
string
member_count
required
integer format: int32
name
required
string
total_bytes
required
integer format: int64
output_artifacts
required

Verified files included in the committed result, ordered by output name. Empty until finalization. Pending uploads are not execution results.

Array<object>

Immutable verified file evidence. Availability is deliberately separate: an expired file does not rewrite the exact version used or produced by a run.

object
artifact_id
required
string format: uuid
checksum
required
object
algorithm
required

Only sha256 is supported.

string
Allowed values: sha256
checksum_type
required

Only full_object is supported; multipart checksums are not accepted.

string
Allowed values: full_object
value
required

Canonical base64 of the 32-byte SHA-256 digest.

string
>= 44 characters <= 44 characters /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/
created_at
required
string format: date-time
logical_name
required
string
media_type
required
string
name
required

Declared input/output position, independent of the artifact logical name.

string
producer
One of:
null
scientific_metadata
required
size_bytes
required
integer format: int64
storage_destination_id
required
string
verified_at
required
string format: date-time
version_id
required
string
output_collections
Array<object>
object
collection_id
required
string format: uuid
manifest_digest
required
string
member_count
required
integer format: int32
name
required
string
total_bytes
required
integer format: int64
publication
required

Immutable publication facts and separately attributed connector observation.

object
compute_grant_id
required
string format: uuid
context_id
required
string
disclosure
required
string
execution_location
required
string
generation
required
integer format: int64
installation
required

Model-provider claims retained verbatim, not independent attestation.

object
dataset_identities
required
Array<string>
model_identity
required
string
runtime_identity
required
string
wrapper_identity
required
string
wrapper_protocol_version
required
integer format: int32
publication_id
required
string
validation
One of:
null
resolution
One of:
null
result
One of:
null
run
required
object
cancelled_at
string | null format: date-time
contract_version
required
integer format: int32
created_at
required
string format: date-time
created_by_user_id
required
string format: uuid
effective_inputs
required
model_id
required
string
phase
One of:
null
publication_delegation_id
string | null format: uuid
publication_id
required
string
purpose

Immutable submission intent. Candidate trials retain author/compute authority checks.

string
Allowed values: standard candidate_trial
requested_inputs
required
run_id
required
string format: uuid
state
required

Public execution state. Delegated preparation and collection are running.

string
Allowed values: queued running succeeded failed cancelled
storage_destination_id
string | null
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Query parameters are not accepted.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Active user credential required.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

The credential does not permit this operation (insufficient_scope).

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Invalid, unknown or unauthorized run.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

413: the request body exceeds the configured size limit.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Provenance records unavailable.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

An HTTP request failed; inspect the stable error code and request ID.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object
code
required

Stable machine-readable error code.

string
details
One of:
null
message
required

Safe explanation without internal errors or submitted input values.

string
request_id
required

Matches the response’s x-request-id header.

string
Cache-Control
string

No-store

x-request-id
string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

Documentation 205dcb3116ea · public sources 8c70356d340f · built .Download documentation identity.