Signed, offline-verifiable contract-change authorization. Only a granted change can proceed.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Bearer <API key from https://coderifts.com>. X-API-Key is also accepted.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Retrieve a PAST CodeRifts decision by exactly one identifier (case_id | decision_id | fingerprint): full report, breaking changes, scores, and linked receipt metadata if stored. Use this when: - You have a decision_id (or fingerprint) from a previous preflight, PR comment, or CI log and need to inspect or explain that past decision. - You are auditing why a prior ALLOW/WARN/BLOCK was issued. - You are NOT requesting a new analysis of current before/after specs. Do not use when: - You need a decision for the CURRENT uncommitted or PR head change set — call coderifts.preflight_change_set with the current artifacts. - You hold a receipt token and only need cryptographic/lifecycle verification — use coderifts.verify_receipt. - You have no identifier — run preflight first to create one. Inputs: exactly one of case_id, decision_id, or fingerprint. {} → INVALID_INPUT; two identifiers → LOOKUP_IDENTIFIER_CONFLICT; case_id → CASE_NOT_FOUND (lookup never opens a case). Returns the stored document or not_found. Scoping — fingerprint lookup returns only YOUR OWN decisions. A fingerprint is derived from content, not from an account, so two callers who preflight byte-identical specs derive the same one; the lookup is therefore constrained to the decisions your credential can prove it owns. A decision that exists but is not yours returns the SAME not_found as one that was never issued. This is deliberate: a distinguishable "exists but forbidden" would confirm to any caller that a given content hash had been decided on by someone, which is the fact the scoping exists to withhold. Do not read not_found as proof that no such decision exists anywhere. Decisions persisted without context.repository cannot currently be attributed to an account, and are not retrievable by fingerprint at all — not by their owner either. Retrieve those by decision_id, which is unchanged and unscoped. This is a limitation of what older stored rows carry, not a property of the lookup: rows written from now on record the account directly, so the gap narrows as older rows age out. If a fingerprint you expect returns not_found, use the decision_id before concluding the decision is missing. When the stored envelope carries control fields, control_envelope.next_agent_step is structured remediation guidance the agent MAY follow for non-CONTINUE execution_action values (null on CONTINUE*). Still branch on execution_action; next_agent_step is a suggestion, not permission.
A case identifier. Lookup never opens a case. Until the case store exists this returns CASE_NOT_FOUND.
The decision_id from a prior decision_result envelope. Provide exactly one identifier.
A verdict fingerprint (sha256:...); returns the latest matching decision you own. Provide exactly one identifier.
Retrieve a PAST CodeRifts decision by exactly one identifier (case_id | decision_id | fingerprint): full report, breaking changes, scores, and linked receipt metadata if stored. Use this when: - You have a decision_id (or fingerprint) from a previous preflight, PR comment, or CI log and need to inspect or explain that past decision. - You are auditing why a prior ALLOW/WARN/BLOCK was issued. - You are NOT requesting a new analysis of current before/after specs. Do not use when: - You need a decision for the CURRENT uncommitted or PR head change set — call coderifts.preflight_change_set with the current artifacts. - You hold a receipt token and only need cryptographic/lifecycle verification — use coderifts.verify_receipt. - You have no identifier — run preflight first to create one. Inputs: exactly one of case_id, decision_id, or fingerprint. {} → INVALID_INPUT; two identifiers → LOOKUP_IDENTIFIER_CONFLICT; case_id → CASE_NOT_FOUND (lookup never opens a case). Returns the stored document or not_found. Scoping — fingerprint lookup returns only YOUR OWN decisions. A fingerprint is derived from content, not from an account, so two callers who preflight byte-identical specs derive the same one; the lookup is therefore constrained to the decisions your credential can prove it owns. A decision that exists but is not yours returns the SAME not_found as one that was never issued. This is deliberate: a distinguishable "exists but forbidden" would confirm to any caller that a given content hash had been decided on by someone, which is the fact the scoping exists to withhold. Do not read not_found as proof that no such decision exists anywhere. Decisions persisted without context.repository cannot currently be attributed to an account, and are not retrievable by fingerprint at all — not by their owner either. Retrieve those by decision_id, which is unchanged and unscoped. This is a limitation of what older stored rows carry, not a property of the lookup: rows written from now on record the account directly, so the gap narrows as older rows age out. If a fingerprint you expect returns not_found, use the decision_id before concluding the decision is missing. When the stored envelope carries control fields, control_envelope.next_agent_step is structured remediation guidance the agent MAY follow for non-CONTINUE execution_action values (null on CONTINUE*). Still branch on execution_action; next_agent_step is a suggestion, not permission.
| Argument | Type | Description |
|---|---|---|
| case_id | string | A case identifier. Lookup never opens a case. Until the case store exists this returns CASE_NOT_FOUND. |
| decision_id | string | The decision_id from a prior decision_result envelope. Provide exactly one identifier. |
| fingerprint | string | A verdict fingerprint (sha256:...); returns the latest matching decision you own. Provide exactly one identifier. |
{
"type": "object",
"properties": {
"case_id": {
"type": "string",
"minLength": 1,
"description": "A case identifier. Lookup never opens a case. Until the case store exists this returns CASE_NOT_FOUND."
},
"decision_id": {
"type": "string",
"minLength": 1,
"description": "The decision_id from a prior decision_result envelope. Provide exactly one identifier."
},
"fingerprint": {
"type": "string",
"minLength": 1,
"description": "A verdict fingerprint (sha256:...); returns the latest matching decision you own. Provide exactly one identifier."
}
},
"description": "Closed exclusive identifier union: exactly one of case_id | decision_id | fingerprint. Encoded as minProperties=1 + maxProperties=1 + additionalProperties=false, NOT as a top-level oneOf/anyOf/allOf — Anthropic (and other strict tool APIs) reject those combinators at the root of input_schema and then refuse the entire tools array (measured: test/mcp-input-oneof-honesty.test.js, mcp-streamable.js comment). The server enforces the same mutex with named codes: empty {} → INVALID_INPUT; two or more identifiers → LOOKUP_IDENTIFIER_CONFLICT; case_id alone → CASE_NOT_FOUND (no case store yet; lookup never opens a case).",
"maxProperties": 1,
"minProperties": 1,
"additionalProperties": false
}Use this when: a contract artifact (OpenAPI, GraphQL, protobuf, AsyncAPI, MCP manifests, or agent tool schemas) changes before merge, deploy, publish, or tool registration; AND any agent-executed operation with no supported contract type — send type agent_operation. Do not call for documentation-only changes, static readiness scoring, or receipt verification. Use analyze for risk only; authorize requires context.operation. Skipping this call is not permission. Absence of a key is not permission. Inputs: preflight_mode is required: "analyze" (risk only; no receipt, no execution_action) or "authorize" (may mint a receipt; requires context.operation — merge is not deploy is not publish). Supply exactly one artifact source: artifacts[] (1–20 items, each {id, type, before, after} as the FULL spec/schema text, not a path or URL; type is openapi|graphql|grpc|asyncapi|mcp_manifest|agent_tools|agent_operation) XOR derivation="server" (server reads GitHub Compare; needs context.repository + context.base + context.head; sending artifacts[] together is 400). Grant fields sit in one object, execution_grant_request {include_execution_grant, grant_version, tenant_id, executor_id, adapter_id, target_uri, expected_state_token, state_nonce, audience, policy_hash}; analyze ignores it; required is preflight_mode only. previous_receipt is a chain token base64url(body).base64url(signature) to LINK a prior decision — it does not re-verify; use coderifts.verify_receipt instead; for details of a past decision use coderifts.get_decision_details instead. idempotency_key replays authorize only (24h), never analyze.
| Argument | Type | Description |
|---|---|---|
| context | object | Optional apply-site context folded into the bundle fingerprint. operation distinguishes merge vs deploy vs publish (and other labels); the server accepts any non-empty string; conventional values: merge, deploy, tool_call, publish. The receipt/gate must match this label. |
| artifacts | array | 1–20 contract documents analyzed together. Each item is {id, type, before, after} where before/after are the FULL document strings (YAML/JSON/proto text), not URLs or file paths. Omit this array entirely when derivation="server". |
Verify a CodeRifts signed chain-receipt you ALREADY HOLD: cryptographic authenticity (signature + key id), body binding, and — when lifecycle indices are available — whether it is currently valid authorization (not expired, superseded, or revoked) for a stated operation/target. Use this when: - You already obtained a chain_receipt / receipt token from a prior preflight (or CI artifact) and are about to act (merge/deploy) under that receipt. - A contract-gate or policy requires offline/online proof that the receipt is authentic for this change before proceeding. - You must distinguish "signature ok" from "currently authorized" (stale or superseded receipts must not be treated as live approval). Do not use when: - You do not have a receipt yet — call coderifts.preflight_change_set first. - You need a NEW decision for a changed base→head set — preflight again; verify_receipt does not re-diff specs. - The receipt you hold binds a different operation or target than the one you are about to perform — call coderifts.preflight_change_set with context.operation set to that operation (a merge receipt does not authorize a deploy); verify_receipt cannot re-scope or re-issue a decision. - You only need human-readable history of an old decision_id without a receipt token — use coderifts.get_decision_details. - The change set itself is unknown or incomplete — fix the change set and preflight; do not "verify" a placeholder. Inputs: receipt token (required); target_id = decision_result.artifact_digest — required for an authorization verdict; omitted → target_not_stated. Optional intended context (operation, environment, fingerprint, audience, repository/branch/pull_request, base/head) and the body_hash-bound decision_result envelope. 30s clock-skew leeway on expiry. A 0s grace for declared destructive production operations is defined in the policy but is unreachable today: the intended-context schema has no destructive field, so nothing can declare one and the 30s leeway always applies. Returns { valid, status, currently_authorized (bool|null), reason, payload, authz_* }. Branch on currently_authorized; null = not evaluated. When a decision envelope is also in hand (e.g. from a prior preflight), its control_envelope.next_agent_step (if present) is structured remediation guidance the agent MAY follow after a non-CONTINUE decision — still branch on execution_action; next_agent_step is suggestion, not permission.
| derivation | string | "server" = the server derives artifacts[] from GitHub Compare via the App installation. Allowed only when context.repository, context.base and context.head are all present and the tenant has a proven binding for that repository. Do not send artifacts[] in the same call (400 — one source of truth). Omit this field for the caller-supplied artifacts[] path. |
| preflight_mode* | string | REQUIRED. "analyze" = informational risk only (no decision/execution_action/safe_for_agent; analysis_outcome + may_execute:false). "authorize" = operation-bound path; may mint a receipt (requires context.operation). Decision Spec 2.0: omission is INVALID_INPUT. Do not pin 1.0 — that pin retired. |
| idempotency_key | string | Optional client key; in authorize mode, a repeat with the same key + body replays the original decision (24h). Analyze responses are not replayed. |
| response_detail | string | How much of the response to return. control = the fields an agent branches on; standard = control + the human report and labelled break rows (the MCP default); full = everything (the REST default). Every value is copied from the full response. |
| previous_receipt | string | Optional prior chain token to LINK this call into a receipt chain: base64url(body).base64url(signature). Linking is not verification — a linked token is not re-checked here; use verify_receipt. |
| decision_spec_version | string | Optional. Omit or '2.0' = current contract. '1.0' retired (INVALID_INPUT); do not pin 1.0. |
| execution_grant_request | object | Authorize + include_execution_grant only: the execution-grant request fields. Analyze ignores them. Flat root-level spellings are also accepted; the same field sent both ways with different values is INVALID_INPUT. |
{
"if": {
"required": [
"preflight_mode"
],
"properties": {
"preflight_mode": {
"const": "authorize"
}
}
},
"then": {
"required": [
"context"
],
"properties": {
"context": {
"type": "object",
"required": [
"operation"
],
"properties": {
"operation": {
"type": "string",
"minLength": 1
}
}
}
}
},
"type": "object",
"required": [
"preflight_mode"
],
"properties": {
"context": {
"type": "object",
"properties": {
"base": {
"type": "string",
"description": "Base commit/ref SHA the change set was computed against (optional; PR/commit identity)"
},
"head": {
"type": "string",
"description": "Head commit/ref SHA of the proposed change (optional; PR/commit identity)"
},
"branch": {
"type": "string",
"description": "Branch name (optional; fingerprint context)"
},
"audience": {
"type": "string",
"description": "Optional audience (IntentContext parity; REST/MCP accept, server-derived audience still wins on the envelope)"
},
"operation": {
"type": "string",
"description": "Application operation for this change set (fingerprint + envelope). Server accepts any non-empty string; conventional values: merge, deploy, tool_call, publish. Merge is not deploy is not publish — the receipt/gate must match this label."
},
"target_id": {
"type": "string",
"description": "Optional apply-site target (IntentContext parity; not folded into the bundle fingerprint)"
},
"repository": {
"type": "string",
"description": "Repository identity (optional; fingerprint context)"
},
"target_uri": {
"type": "string",
"description": "Optional apply-site URI the cr.exec.v2 grant binds (handler fallback: input.target_uri, then context.target_uri, then repository/head-derived). Distinct from target_id."
},
"environment": {
"type": "string",
"description": "Target environment (e.g. production, staging, npm) — optional; folded into fingerprint when set."
},
"fingerprint": {
"type": "string",
"description": "Optional change fingerprint (IntentContext parity; not folded into the bundle fingerprint)"
},
"pull_request": {
"oneOf": [
{
"type": "string"
},
{
"type": "number"
}
],
"description": "Pull request id when applicable (optional; fingerprint context)"
},
"policy_profile": {
"type": "string",
"description": "Policy profile name (optional; fingerprint context)"
}
},
"description": "Optional apply-site context folded into the bundle fingerprint. operation distinguishes merge vs deploy vs publish (and other labels); the server accepts any non-empty string; conventional values: merge, deploy, tool_call, publish. The receipt/gate must match this label."
},
"artifacts": {
"type": "array",
"items": {
"type": "object",
"required": [
"id",
"type",
"before",
"after"
],
"properties": {
"id": {
"type": "string",
"description": "Caller-chosen id, unique within the bundle"
},
"type": {
"enum": [
"openapi",
"graphql",
"grpc",
"asyncapi",
"mcp_manifest",
"agent_tools",
"agent_operation"
],
"type": "string",
"description": "Artifact kind. One of openapi, graphql, grpc, asyncapi, mcp_manifest, agent_tools, agent_operation. Contract types determine how before/after text is parsed. agent_operation: An opaque proposed agent operation for which no supported contract-artifact type applies. CodeRifts does not semantically analyze this content and does not issue an execution grant. Not inferred from the filename."
},
"after": {
"type": "string",
"description": "The proposed document as raw text, same kind as before. Must be the bytes you intend to merge/deploy/publish, not a diff."
},
"before": {
"type": "string",
"description": "The baseline document as raw text (the spec/schema/manifest body). Empty string means \"no prior version\" (create), not \"load from disk\"."
}
}
},
"maxItems": 20,
"minItems": 1,
"description": "1–20 contract documents analyzed together. Each item is {id, type, before, after} where before/after are the FULL document strings (YAML/JSON/proto text), not URLs or file paths. Omit this array entirely when derivation=\"server\"."
},
"derivation": {
"enum": [
"server"
],
"type": "string",
"description": "\"server\" = the server derives artifacts[] from GitHub Compare via the App installation. Allowed only when context.repository, context.base and context.head are all present and the tenant has a proven binding for that repository. Do not send artifacts[] in the same call (400 — one source of truth). Omit this field for the caller-supplied artifacts[] path."
},
"preflight_mode": {
"enum": [
"analyze",
"authorize"
],
"type": "string",
"description": "REQUIRED. \"analyze\" = informational risk only (no decision/execution_action/safe_for_agent; analysis_outcome + may_execute:false). \"authorize\" = operation-bound path; may mint a receipt (requires context.operation). Decision Spec 2.0: omission is INVALID_INPUT. Do not pin 1.0 — that pin retired."
},
"idempotency_key": {
"type": "string",
"description": "Optional client key; in authorize mode, a repeat with the same key + body replays the original decision (24h). Analyze responses are not replayed."
},
"response_detail": {
"enum": [
"control",
"standard",
"full"
],
"type": "string",
"description": "How much of the response to return. control = the fields an agent branches on; standard = control + the human report and labelled break rows (the MCP default); full = everything (the REST default). Every value is copied from the full response."
},
"previous_receipt": {
"type": "string",
"description": "Optional prior chain token to LINK this call into a receipt chain: base64url(body).base64url(signature). Linking is not verification — a linked token is not re-checked here; use verify_receipt."
},
"decision_spec_version": {
"enum": [
"2.0"
],
"type": "string",
"description": "Optional. Omit or '2.0' = current contract. '1.0' retired (INVALID_INPUT); do not pin 1.0."
},
"execution_grant_request": {
"type": "object",
"properties": {
"audience": {
"type": "string",
"description": "Requester identity for the decision envelope. Accepted here; the server-derived audience wins when both are present."
},
"tenant_id": {
"type": "string",
"description": "Authorize+grant v2 only. Tenant the grant is issued under. ASCII slug. When omitted the server uses \"default\" — pin it if you are not on the default tenant."
},
"adapter_id": {
"type": "string",
"description": "Authorize+grant v2 only. Adapter that will apply the change. Conventional values: fs, postgres, git. Must match the adapter the executor actually uses; a git grant does not authorize an fs write."
},
"target_uri": {
"type": "string",
"description": "Authorize+grant v2 only. URI the grant binds (example: git://owner/repo.git/refs/heads/main). Fallback if omitted: context.target_uri, then repository/head-derived. Distinct from context.target_id."
},
"executor_id": {
"type": "string",
"description": "Authorize+grant v2 only. Executor identity the grant is bound to (example: agent:ci-bot, host:github-actions). Empty/absent is not \"any executor\"."
},
"policy_hash": {
"type": "string",
"description": "Authorize+grant v2 only. Policy identity bound into the grant, sha256: + 64 hex. When supplied, apply must use that same policy; a different policy is a different grant."
},
"state_nonce": {
"type": "string",
"description": "Authorize+grant only. Opaque nonce copied into the signed grant as its own field (not folded into scope_hash). Absent → BEARER grant. Ignored unless include_execution_grant is true."
},
"grant_version": {
"enum": [
"v1",
"v2"
],
"type": "string",
"description": "Grant envelope to mint when include_execution_grant is true. Omitting this yields cr.exec.v1 until 2026-09-18 and cr.exec.v2 on and after it (see x-coderifts-effective-default / x-coderifts-default-changes-at). The response meta.grant_version is the version actually issued. An explicit value always wins — pin \"v1\" to keep current behaviour with no code change on the date.",
"x-coderifts-effective-default": "v2",
"x-coderifts-default-changes-at": "2026-09-18"
},
"expected_state_token": {
"type": "string",
"description": "Authorize+grant v2 only. Compare-and-swap token the executor must observe at apply time (the \"before\" state). Signed as its own field. Omit only if the adapter has no prior state; do not send a placeholder."
},
"include_execution_grant": {
"type": "boolean",
"description": "Authorize only. When true on an allow-class authorize, the response includes a signed execution_grant, or HTTP 503 SIGNER_UNAVAILABLE — never an unsigned grant. Default false. Analyze ignores this flag. Ignored unless preflight_mode=\"authorize\"."
}
},
"description": "Authorize + include_execution_grant only: the execution-grant request fields. Analyze ignores them. Flat root-level spellings are also accepted; the same field sent both ways with different values is INVALID_INPUT."
}
}
}| Argument | Type | Description |
|---|
| base | string | Intended base commit/ref SHA the receipt must match (signed-wins vs envelope.base) |
| head | string | Intended head commit/ref SHA the receipt must match (signed-wins vs envelope.head) |
| token* | string | The chain receipt token (base64url(body).base64url(signature)) |
| branch | string | Intended branch the receipt must bind (place binding; optional) |
| audience | string | Intended audience — must match the receipt |
| operation | string | Intended operation the receipt must authorize (conventional: merge|deploy|tool_call|publish). Triggers authorization evaluation when non-empty; supply decision_result for full scope binding. |
| target_id | string | REQUIRED to authorize under a held receipt. Set it to decision_result.artifact_digest — the digest of the artifact the receipt was issued for, which you already hold in the decision_result you are passing. The server does NOT derive it for you: it carries YOUR intended apply-site, and taking it from the envelope would compare that document against itself. Omit it and the answer is currently_authorized false with authz_reason target_not_stated and authz_status VERIFIED_TARGET_NOT_STATED — a missing input, distinct from target_mismatch, which means the receipt covers a different target. |
| repository | string | Intended repository the receipt must bind (place binding; optional) |
| environment | string | Intended environment (e.g. production) — must match the receipt |
| fingerprint | string | Intended change fingerprint — must equal the receipt fp |
| pull_request | any | Intended pull-request id the receipt must bind (place binding; optional) |
| decision_result | object | The body_hash-bound decision envelope (carries operation/target/decision). Required for a meaningful AUTHORIZATION evaluation of scope; without it, intended context alone fails closed on authorization (currently_authorized false) while signature status remains independent. Full schema: https://coderifts.com/schemas/decision-result.v1.consumer.json. |
{
"type": "object",
"required": [
"token"
],
"properties": {
"base": {
"type": "string",
"description": "Intended base commit/ref SHA the receipt must match (signed-wins vs envelope.base)"
},
"head": {
"type": "string",
"description": "Intended head commit/ref SHA the receipt must match (signed-wins vs envelope.head)"
},
"token": {
"type": "string",
"description": "The chain receipt token (base64url(body).base64url(signature))"
},
"branch": {
"type": "string",
"description": "Intended branch the receipt must bind (place binding; optional)"
},
"audience": {
"type": "string",
"description": "Intended audience — must match the receipt"
},
"operation": {
"type": "string",
"description": "Intended operation the receipt must authorize (conventional: merge|deploy|tool_call|publish). Triggers authorization evaluation when non-empty; supply decision_result for full scope binding."
},
"target_id": {
"type": "string",
"description": "REQUIRED to authorize under a held receipt. Set it to decision_result.artifact_digest — the digest of the artifact the receipt was issued for, which you already hold in the decision_result you are passing. The server does NOT derive it for you: it carries YOUR intended apply-site, and taking it from the envelope would compare that document against itself. Omit it and the answer is currently_authorized false with authz_reason target_not_stated and authz_status VERIFIED_TARGET_NOT_STATED — a missing input, distinct from target_mismatch, which means the receipt covers a different target."
},
"repository": {
"type": "string",
"description": "Intended repository the receipt must bind (place binding; optional)"
},
"environment": {
"type": "string",
"description": "Intended environment (e.g. production) — must match the receipt"
},
"fingerprint": {
"type": "string",
"description": "Intended change fingerprint — must equal the receipt fp"
},
"pull_request": {
"oneOf": [
{
"type": "string"
},
{
"type": "number"
}
],
"description": "Intended pull-request id the receipt must bind (place binding; optional)"
},
"decision_result": {
"type": "object",
"properties": {
"base": {
"type": [
"string",
"null"
]
},
"head": {
"type": [
"string",
"null"
]
},
"receipt": {
"type": "object"
},
"audience": {
"type": [
"string",
"null"
]
},
"decision": {
"enum": [
"ALLOW",
"WARN",
"REQUIRE_APPROVAL",
"BLOCK"
],
"type": "string"
},
"authority": {
"type": [
"object",
"null"
],
"description": "Additive. { audience, tenant_scope: bound|unbound, binding_proven_at? }. Informational — not permission, not a verify-receipt gate, not an ACL."
},
"operation": {
"type": [
"string",
"null"
]
},
"derivation": {
"type": [
"object",
"null"
],
"description": "Additive. Present only when derivation:\"server\" produced this envelope. { source, platform?, base_sha, head_sha }. Covered by body_hash; not fingerprint."
},
"expires_at": {
"type": "string"
},
"repository": {
"type": [
"string",
"null"
]
},
"decision_id": {
"type": "string"
},
"environment": {
"type": [
"string",
"null"
]
},
"fingerprint": {
"type": "string"
},
"blast_radius": {
"type": "object",
"properties": {
"fields": {
"type": "integer",
"minimum": 0
},
"params": {
"type": "integer",
"minimum": 0
},
"endpoints": {
"type": "integer",
"minimum": 0
},
"graph_source": {
"type": "string"
},
"consumers_declared": {
"type": "integer",
"minimum": 0
},
"consumers_observed": {
"type": "integer",
"minimum": 0
}
},
"description": "Additive COUNTS (not a score). Not permission."
},
"spec_version": {
"type": "string",
"pattern": "^decision-result\\.v1(\\.[0-9]+)?$"
},
"safe_for_agent": {
"type": "boolean"
},
"execution_action": {
"enum": [
"CONTINUE",
"CONTINUE_WITH_MONITORING",
"REQUEST_APPROVAL",
"STOP"
],
"type": "string"
},
"input_fingerprint": {
"type": "string"
},
"decision_body_hash": {
"type": [
"string",
"null"
]
}
},
"description": "The body_hash-bound decision envelope (carries operation/target/decision). Required for a meaningful AUTHORIZATION evaluation of scope; without it, intended context alone fails closed on authorization (currently_authorized false) while signature status remains independent. Full schema: https://coderifts.com/schemas/decision-result.v1.consumer.json.",
"additionalProperties": true
}
},
"description": "Two evaluation modes (schema-documented; no mode discriminator field). SIGNATURE: supply token only — signature + expiry; currently_authorized is null. AUTHORIZATION: also supply intended context (operation, environment, fingerprint, target_id set to decision_result.artifact_digest, audience, repository/branch/pull_request, and/or base/head) AND the body_hash-bound decision_result envelope so currently_authorized / authz_status / authz_reason can be evaluated. Token alone is always accepted; omitting the envelope when context fields are present yields a signature verdict plus fail-closed authorization (currently_authorized false), not a schema reject."
}