Coordination API reference¶
GENERATED by
scripts/gen_api_docs.pyfromcontract/methods.jsonandcontract/schemas/method.request.json/contract/schemas/result.coordination.json-- do not hand-edit. Regenerate withpython3 scripts/gen_api_docs.py --write. 54 methods in this namespace. See also the machine-checked policy ledger atcapabilities.generated.mdand the OpenAPI document / Swagger UI.
AcquireCapacity¶
atomic multi-dimensional capacity admission with epoch/fence ownership
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:lease |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityAcquireRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityAcquireResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/AcquireCapacity, contract/schemas/result.coordination.json#/methods/AcquireCapacity.
AnalyticsJob¶
runtime-conditional: Status is a read; Submit/Cancel/Resume commit through the native jobs.redb MutationBatch gateway
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | jobs:write |
| Mutates | true |
| Durability domain | JobsRedb |
| Idempotent | false |
| Audited | false |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, ANALYTICS_JOB_SCOPE_INCARNATION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
op |
JobOp |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
Cancel |
AnalyticsJobRecord |
Json | |
Resume |
AnalyticsJobRecord |
Json | |
Status |
AnalyticsJobRecord |
Json | |
Submit |
AnalyticsJobRecord |
Json | |
WorkerCancel |
AnalyticsJobRecord |
Json | |
WorkerCheckpoint |
AnalyticsJobRecord |
Json | |
WorkerClaim |
one of: WorkerJobClaim | null |
Json | |
WorkerFail |
AnalyticsJobRecord |
Json | |
WorkerPublish |
AnalyticsJobRecord |
Json | |
WorkerRenew |
JobWorkerLease |
Json | |
WorkerStage |
AnalyticsJobRecord |
Json |
Multi-body result: the
oprequest field selects which body above is returned.
Full machine-checked schema: contract/schemas/method.request.json#/methods/AnalyticsJob, contract/schemas/result.coordination.json#/methods/AnalyticsJob.
CancelWorkItem¶
pending cancellation never steals an active lease
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
idempotency_key |
string | yes | |
now_ms |
integer (uint64) | yes | |
reason_ref |
string | null | no | Opaque reference to a redacted cancellation reason. The engine never persists a caller-supplied reason body in the control-plane node. |
tenant |
string | yes | |
work_item_id |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemTransition_WorkItemCancelStatus |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/CancelWorkItem, contract/schemas/result.coordination.json#/methods/CancelWorkItem.
CapacityStatus¶
exact tenant-scoped native capacity status
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityStatusRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityStatusResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/CapacityStatus, contract/schemas/result.coordination.json#/methods/CapacityStatus.
CasWorkItemMetadata¶
BUG-111: atomic single-field CAS on non-authority scheduling metadata (checkpoint_id/metadata/prio_bucket). Status/lease/tenant are fenced but never written
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CasWorkItemMetadataRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CasWorkItemMetadataResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/CasWorkItemMetadata, contract/schemas/result.coordination.json#/methods/CasWorkItemMetadata.
ClaimNext¶
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | node:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | false |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
label |
string | yes | |
updates_msgpack |
array of integer (uint8) | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
array | null | Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ClaimNext, contract/schemas/result.coordination.json#/methods/ClaimNext.
ClaimWorkItem¶
engine-native tenant/fair WorkItem lease claim
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:claim |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | false |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, REPLAY_NONCE_CONSUMED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ClaimWorkItemRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ClaimWorkItemResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ClaimWorkItem, contract/schemas/result.coordination.json#/methods/ClaimWorkItem.
CleanupDevelopmentLane¶
distinct cleanup WorkItem fence releases retained disk and exclusivity; now_ms is authority-normalized
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:cleanup |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneCleanupCompleteRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneCleanupCompleteResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/CleanupDevelopmentLane, contract/schemas/result.coordination.json#/methods/CleanupDevelopmentLane.
CommitWorkItemResult¶
terminal result references and outbox commit atomically
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
error_ref |
string | null | no | |
fencing_token |
integer (uint64) | yes | |
idempotency_key |
string | yes | |
lease_epoch |
integer (uint64) | yes | |
now_ms |
integer (uint64) | yes | |
outcome |
string | yes | |
outcome_extension |
one of: TerminalOutcomeExtension | null |
no | Optional RF-020/GOC-20 terminal receipts. When present, the mutation compiler lowers the bound receipt nodes to AddNode operations and one run-event outbox intent in this same batch. Boxed because it dominates the size of this variant and, through it, of EVERY Method. Option<Box<T>> and Option<T> serialize identically, so the wire form -- and the frozen contract -- are unchanged; only the in-memory layout moves. |
result_ref |
string | null | no | |
retryable |
boolean | no | |
tenant |
string | yes | |
work_item_id |
string | yes | |
worker_id |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemTransition_WorkItemCommitStatus |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/CommitWorkItemResult, contract/schemas/result.coordination.json#/methods/CommitWorkItemResult.
DecisionEval¶
RF-ADR-010 DL-6, runtime-conditional: status is an authenticated tenant-bound read. Submit evaluates a draft or published head on admitted labels and commits the job row and its receipt in one agent_library.redb control-owner transaction. A DecisionHead publish requires a passed receipt. Local-only authority, refused in clustered mode
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | admin:decision-eval |
| Mutates | true |
| Durability domain | ControlRedb |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, ASSEMBLY_INPUTS_INVALID, ASSEMBLY_MODEL_INVALID, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CANDIDATE_FACTS_CHANGED, CANDIDATE_PLAN_REFUSED, CANDIDATE_SCOPE_TOO_LARGE, CANDIDATE_SET_TOO_LARGE, CAPACITY_DENIED, CERTIFICATE_REJECTED, COMPONENT_BODY_UNAVAILABLE, COMPONENT_PIN_MISMATCH, COMPONENT_WITHDRAWN, CONFLICT, CORRUPT_DECISION_ARTIFACT, CORRUPT_DECISION_RECORD, CORRUPT_MUTATION_LEDGER, DATASET_INVALID, DECISION_LOG_TOO_LARGE, DECISION_RECORD_VERSION_UNSUPPORTED, DECISION_REPLAY_MISMATCH, DERIVATION_REJECTED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, EVALUATION_RECEIPT_MISMATCH, EVALUATION_RECEIPT_REQUIRED, EVAL_CANDIDATE_NOT_FOUND, EXPLORATION_FORBIDDEN, FEATURE_SCHEMA_INVALID, HEAD_INVALID, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, JOB_NOT_FOUND, LOOK_AHEAD, METHOD_NOT_YET_SERVED, NODE_MISMATCH, NO_ADMISSIBLE_LABELS, NUMERIC_REFUSED, OPERATION_REDIRECTED, PARAMETER_INVALID, POLICY_BODY_UNAVAILABLE, POLICY_LOOSENING, READ_ONLY, RECORD_TOO_LARGE, REDIRECTED, REPLAY_POLICY_DEPENDENT, REPLAY_SPEC_INVALID, STALE_CATALOG, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT, TRIALS_UNDERSTATED |
| Format identities | RBAC_SCOPE_INCARNATION, CONSENSUS_TRANSACTION_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
op |
DecisionEvalOp |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
receipt |
one of: DecisionEvalReceipt | null |
Raw | |
receipts |
DecisionReceiptPage |
Raw | |
status |
one of: DecisionJobRecord | null |
Raw | |
submit |
DecisionJobRecord |
Raw | |
timeline |
DecisionReceiptTimelinePage |
Raw |
Multi-body result: the
oprequest field selects which body above is returned.
Full machine-checked schema: contract/schemas/method.request.json#/methods/DecisionEval, contract/schemas/result.coordination.json#/methods/DecisionEval.
DecisionFit¶
RF-ADR-010 DL-6, runtime-conditional: status is an authenticated tenant-bound read. Submit runs one bounded deterministic fit to its terminal state and commits the job row and the draft head body in one agent_library.redb control-owner transaction. Local-only authority, refused in clustered mode
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | admin:decision-fit |
| Mutates | true |
| Durability domain | ControlRedb |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, ASSEMBLY_INPUTS_INVALID, ASSEMBLY_MODEL_INVALID, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CANDIDATE_FACTS_CHANGED, CANDIDATE_PLAN_REFUSED, CANDIDATE_SCOPE_TOO_LARGE, CANDIDATE_SET_TOO_LARGE, CAPACITY_DENIED, CERTIFICATE_REJECTED, COMPONENT_BODY_UNAVAILABLE, COMPONENT_PIN_MISMATCH, COMPONENT_WITHDRAWN, CONFLICT, CORRUPT_DECISION_ARTIFACT, CORRUPT_DECISION_RECORD, CORRUPT_MUTATION_LEDGER, DATASET_INVALID, DECISION_LOG_TOO_LARGE, DECISION_RECORD_VERSION_UNSUPPORTED, DECISION_REPLAY_MISMATCH, DERIVATION_REJECTED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, EVALUATION_RECEIPT_MISMATCH, EVALUATION_RECEIPT_REQUIRED, EVAL_CANDIDATE_NOT_FOUND, EXPLORATION_FORBIDDEN, FEATURE_SCHEMA_INVALID, HEAD_INVALID, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, JOB_NOT_FOUND, LOOK_AHEAD, METHOD_NOT_YET_SERVED, NODE_MISMATCH, NO_ADMISSIBLE_LABELS, NUMERIC_REFUSED, OPERATION_REDIRECTED, PARAMETER_INVALID, POLICY_BODY_UNAVAILABLE, POLICY_LOOSENING, READ_ONLY, RECORD_TOO_LARGE, REDIRECTED, REPLAY_POLICY_DEPENDENT, REPLAY_SPEC_INVALID, STALE_CATALOG, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT, TRIALS_UNDERSTATED |
| Format identities | RBAC_SCOPE_INCARNATION, CONSENSUS_TRANSACTION_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
op |
DecisionFitOp |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
status |
one of: DecisionJobRecord | null |
Raw | |
submit |
DecisionJobRecord |
Raw |
Multi-body result: the
oprequest field selects which body above is returned.
Full machine-checked schema: contract/schemas/method.request.json#/methods/DecisionFit, contract/schemas/result.coordination.json#/methods/DecisionFit.
DecisionLog¶
RF-ADR-010 DL-5/DL-5b, runtime-conditional: commit re-derives an acted-on statistical record from its stored inputs, reveals its exploration seed and stores it. Evaluate joins one independent outcome evaluation. Get/aggregate are authenticated reads filtered by record visibility (graph-sourced records are visible to their committing principal only). All in the agent_library.redb control owner; local-only authority, refused in clustered mode
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | agent:decision-write |
| Mutates | true |
| Durability domain | ControlRedb |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, ASSEMBLY_INPUTS_INVALID, ASSEMBLY_MODEL_INVALID, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CANDIDATE_FACTS_CHANGED, CANDIDATE_PLAN_REFUSED, CANDIDATE_SCOPE_TOO_LARGE, CANDIDATE_SET_TOO_LARGE, CAPACITY_DENIED, CERTIFICATE_REJECTED, COMPONENT_BODY_UNAVAILABLE, COMPONENT_PIN_MISMATCH, COMPONENT_WITHDRAWN, CONFLICT, CORRUPT_DECISION_ARTIFACT, CORRUPT_DECISION_RECORD, CORRUPT_MUTATION_LEDGER, DATASET_INVALID, DECISION_LOG_TOO_LARGE, DECISION_RECORD_VERSION_UNSUPPORTED, DECISION_REPLAY_MISMATCH, DERIVATION_REJECTED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, EVALUATION_RECEIPT_MISMATCH, EVALUATION_RECEIPT_REQUIRED, EVAL_CANDIDATE_NOT_FOUND, EXPLORATION_FORBIDDEN, FEATURE_SCHEMA_INVALID, HEAD_INVALID, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, JOB_NOT_FOUND, LOOK_AHEAD, METHOD_NOT_YET_SERVED, NODE_MISMATCH, NO_ADMISSIBLE_LABELS, NUMERIC_REFUSED, OPERATION_REDIRECTED, PARAMETER_INVALID, POLICY_BODY_UNAVAILABLE, POLICY_LOOSENING, READ_ONLY, RECORD_TOO_LARGE, REDIRECTED, REPLAY_POLICY_DEPENDENT, REPLAY_SPEC_INVALID, STALE_CATALOG, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT, TRIALS_UNDERSTATED |
| Format identities | RBAC_SCOPE_INCARNATION, CONSENSUS_TRANSACTION_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
op |
DecisionLogOp |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
aggregate |
OutcomeAggregate |
Raw | |
commit |
DecisionLogCommitted |
Raw | |
compact |
DecisionLogCompacted |
Raw | |
evaluate |
StoredEvaluation |
Raw | |
get |
one of: DecisionLogEntry | null |
Raw | |
learn |
LearningRecorded |
Raw | |
resolve |
StoredResolution |
Raw | |
verify |
DecisionLogVerification |
Raw |
Multi-body result: the
oprequest field selects which body above is returned.
Full machine-checked schema: contract/schemas/method.request.json#/methods/DecisionLog, contract/schemas/result.coordination.json#/methods/DecisionLog.
DeferWorkItem¶
fenced lease release schedules retry without consuming an attempt
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
fencing_token |
integer (uint64) | yes | |
idempotency_key |
string | yes | |
lease_epoch |
integer (uint64) | yes | |
next_retry_at_ms |
integer (uint64) | yes | |
now_ms |
integer (uint64) | yes | |
reason_ref |
string | null | no | Opaque reference only; no free-form reason body is retained. |
tenant |
string | yes | |
work_item_id |
string | yes | |
worker_id |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemDeferral |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/DeferWorkItem, contract/schemas/result.coordination.json#/methods/DeferWorkItem.
DevelopmentLaneStatus¶
bounded tenant-scoped status with maintained counters
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneStatusRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneStatusResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/DevelopmentLaneStatus, contract/schemas/result.coordination.json#/methods/DevelopmentLaneStatus.
FinishDevelopmentLane¶
terminal lifecycle releases active count but retains cleanup charges and identity; now_ms is authority-normalized
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneFinishRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneFinishResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/FinishDevelopmentLane, contract/schemas/result.coordination.json#/methods/FinishDevelopmentLane.
GapGet¶
tenant-bound canonical Gap view
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | gap:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
gap_id |
string | yes | |
tenant |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
one of: GapView | null |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GapGet, contract/schemas/result.coordination.json#/methods/GapGet.
GapList¶
bounded tenant-bound Gap page in row-key order; a listing, never a ranking
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | gap:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
GapListRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
GapPage |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GapList, contract/schemas/result.coordination.json#/methods/GapList.
GapSettle¶
engine-read terminal WorkItem outcome recorded as Gap evidence in the same transaction
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | gap:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
GapSettleRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
GapSettled |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GapSettle, contract/schemas/result.coordination.json#/methods/GapSettle.
GapTransition¶
legal-edge Gap lifecycle move, CAS on the read revision
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | gap:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
GapTransitionRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
GapTransitioned |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GapTransition, contract/schemas/result.coordination.json#/methods/GapTransition.
GapUpsert¶
one tenant-bound canonical Gap and its native WorkItem commit together or not at all. Only unseen evidence changes or reopens it
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | gap:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
GapUpsertRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
GapUpserted |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GapUpsert, contract/schemas/result.coordination.json#/methods/GapUpsert.
GetControlLease¶
tenant-bound native control-lease view
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lease:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
lease_id |
string | yes | |
tenant |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
one of: ControlLeaseView | null |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GetControlLease, contract/schemas/result.coordination.json#/methods/GetControlLease.
GetWorkItem¶
tenant-bound native WorkItem row view; lease owner/epoch/fencing token never projected
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
tenant |
string | yes | |
work_item_id |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
one of: WorkItemView | null |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GetWorkItem, contract/schemas/result.coordination.json#/methods/GetWorkItem.
GetWorkItemOutcome¶
tenant-bound terminal WorkItem plus the provenance its native commit bound; the OutcomeEvaluation receipt is digest-checked
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
tenant |
string | yes | |
work_item_id |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
one of: WorkItemOutcomeView | null |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/GetWorkItemOutcome, contract/schemas/result.coordination.json#/methods/GetWorkItemOutcome.
IssueControlLease¶
tenant-bound immutable grant record in the WorkItem MutationBatch; an existing id is a collision, never an overwrite
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lease:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
IssueControlLeaseRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ControlLeaseIssued |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/IssueControlLease, contract/schemas/result.coordination.json#/methods/IssueControlLease.
KgDelegate¶
authenticated Agent Library pinned delegation lowered to native WorkItem admission
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:delegate |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CLUSTER_CONFIGURATION_INVALID, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, REPLAY_NONCE_CONSUMED, STALE_AGENT_LIBRARY_REVISION, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
KgDelegateRequest |
yes | Boxed: a pinned delegation request carries the whole Agent Library entry reference and will otherwise set the size of EVERY Method. Box is transparent to serde, so the wire form is unchanged. |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
KgDelegateResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/KgDelegate, contract/schemas/result.coordination.json#/methods/KgDelegate.
ListControlLeases¶
bounded tenant-bound control-lease page filtered by kind/status/grant pairs
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lease:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ListControlLeasesRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ControlLeasePage |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ListControlLeases, contract/schemas/result.coordination.json#/methods/ListControlLeases.
ListWorkItems¶
bounded tenant-bound WorkItem page; limit/scan/byte bounds each resume through an opaque tenant-bound cursor
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
cursor |
string | null | no | |
kind |
string | null | no | |
limit |
integer (uint32) | yes | |
metadata_match |
object | null | no | Keep only items whose top-level metadata holds every one of these key/value pairs exactly (at most 8 keys) -- e.g. a correlation id or an event subject (graph-os EG-5). Filters within the same bounded scan, so it never widens a page's cost. |
tenant |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemPage |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ListWorkItems, contract/schemas/result.coordination.json#/methods/ListWorkItems.
MintWorkItemClaimCapability¶
opaque native capability is retained in a private ledger and never projected
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:claim-capability |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
WorkItemClaimCapabilityMintRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemClaimCapabilityResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/MintWorkItemClaimCapability, contract/schemas/result.coordination.json#/methods/MintWorkItemClaimCapability.
ObserveDevelopmentLane¶
monotonic retained-footprint observation replaces the prior native charge; now_ms is authority-normalized
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneObserveRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneObserveResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ObserveDevelopmentLane, contract/schemas/result.coordination.json#/methods/ObserveDevelopmentLane.
QueryDevelopmentLane¶
linearizable exact lane hold/tombstone read
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneQueryRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneQueryResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/QueryDevelopmentLane, contract/schemas/result.coordination.json#/methods/QueryDevelopmentLane.
QueryWorkItemReservation¶
linearizable exact native authority read
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | resource:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ResourceReservationStatusRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceReservationResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/QueryWorkItemReservation, contract/schemas/result.coordination.json#/methods/QueryWorkItemReservation.
ReclaimExpiredCapacity¶
bounded expiry reclaim with native aggregate accounting
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:lease |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityReclaimRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityReclaimResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReclaimExpiredCapacity, contract/schemas/result.coordination.json#/methods/ReclaimExpiredCapacity.
ReclaimWorkItemResources¶
controller-only expiry/supersession reclaim with retained tombstone
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | resource:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ResourceReservationRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceReservationResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReclaimWorkItemResources, contract/schemas/result.coordination.json#/methods/ReclaimWorkItemResources.
ReconcileCapacity¶
bounded native cells/leases reconciliation page
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityStatusRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityStatusResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReconcileCapacity, contract/schemas/result.coordination.json#/methods/ReconcileCapacity.
ReleaseCapacity¶
bounded all-or-nothing lease release
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:lease |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityLeaseMutationRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityMutationResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReleaseCapacity, contract/schemas/result.coordination.json#/methods/ReleaseCapacity.
ReleaseWorkItemResources¶
controller-only lifecycle release with retained tombstone
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | resource:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ResourceReservationRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceReservationResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReleaseWorkItemResources, contract/schemas/result.coordination.json#/methods/ReleaseWorkItemResources.
RenewCapacity¶
bounded all-or-nothing lease renewal
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:lease |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityLeaseMutationRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityMutationResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/RenewCapacity, contract/schemas/result.coordination.json#/methods/RenewCapacity.
RenewDevelopmentLane¶
in-place O(1) hold renewal bound to the current WorkItem lease; now_ms is authority-normalized
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneRenewRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneRenewResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/RenewDevelopmentLane, contract/schemas/result.coordination.json#/methods/RenewDevelopmentLane.
RenewWorkItemLease¶
lease epoch and fencing token are validated atomically
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
fencing_token |
integer (uint64) | yes | |
lease_epoch |
integer (uint64) | yes | |
lease_ms |
integer (uint64) | yes | |
now_ms |
integer (uint64) | yes | |
tenant |
string | yes | |
work_item_id |
string | yes | |
worker_id |
string | yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemLeaseRenewal |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/RenewWorkItemLease, contract/schemas/result.coordination.json#/methods/RenewWorkItemLease.
ReserveDevelopmentLane¶
controller-only atomic branch/worktree uniqueness and multi-scope quota hold; now_ms is authority-normalized
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneReserveRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReserveDevelopmentLane, contract/schemas/result.coordination.json#/methods/ReserveDevelopmentLane.
ReserveWorkItemResources¶
controller-only atomic host admission and WorkItem fence validation
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | resource:reserve |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ResourceReservationRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceReservationResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ReserveWorkItemResources, contract/schemas/result.coordination.json#/methods/ReserveWorkItemResources.
ResourceReservationStatus¶
bounded linearizable reconciliation read
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | resource:read |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ResourceReservationStatusRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceReservationStatusResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ResourceReservationStatus, contract/schemas/result.coordination.json#/methods/ResourceReservationStatus.
ResourceStatsPage¶
bounded ACL-filtered keyset page; summary suppresses detail arrays
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | service:control |
| Mutates | false |
| Durability domain | None |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | None |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
cursor |
string | null | no | |
limit |
integer (uint) | no | |
summary |
boolean | no |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceSnapshot |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ResourceStatsPage, contract/schemas/result.coordination.json#/methods/ResourceStatsPage.
RetireSealedRecord¶
digest-checked replacement of a sealed record by its audited tombstone in the WorkItem MutationBatch. Generic writes may not change or remove a sealed row
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | record:retire |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
RetireSealedRecordRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
SealedRecordRetirement |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/RetireSealedRecord, contract/schemas/result.coordination.json#/methods/RetireSealedRecord.
Statechart¶
runtime-conditional: GetState/List are reads; Define/Instantiate/SendEvent commit to the native statecharts.redb store (CONCEPT:INT-P2-2)
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | statechart:write |
| Mutates | true |
| Durability domain | StatechartRedb |
| Idempotent | false |
| Audited | false |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, INSTANCE_MUTATION_INCARNATION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
op |
StatechartOp |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
Define |
StatechartDefinitionId |
Json | |
GetState |
StatechartInstance |
Json | |
Instantiate |
StatechartInstance |
Json | |
List |
StatechartInstanceList |
Json | |
SendEvent |
StatechartEventOutcome |
Json |
Multi-body result: the
oprequest field selects which body above is returned.
Full machine-checked schema: contract/schemas/method.request.json#/methods/Statechart, contract/schemas/result.coordination.json#/methods/Statechart.
SubmitWorkItem¶
native tenant-scoped WorkItem command-log admission and outbox commit
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:submit |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, REPLAY_NONCE_CONSUMED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
SubmitWorkItemRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
SubmitWorkItemResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/SubmitWorkItem, contract/schemas/result.coordination.json#/methods/SubmitWorkItem.
SubmitWorkItems¶
bounded all-or-nothing WorkItem admission batch
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:submit |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
SubmitWorkItemsRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
SubmitWorkItemsResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/SubmitWorkItems, contract/schemas/result.coordination.json#/methods/SubmitWorkItems.
ThrottleCapacityCell¶
EH-406 error-budget AIMD step on one cell: narrows the throttle ceiling on an error burst, gives it back only on recovery evidence and never above the declared capacity. Each window counts once. The policy and capacity stay capacity:admin (UpdateCapacityCell)
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:throttle |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | false |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityThrottleRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityThrottleResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/ThrottleCapacityCell, contract/schemas/result.coordination.json#/methods/ThrottleCapacityCell.
TransitionControlLease¶
one-way active to revoked/expired, CAS on the read revision
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lease:write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
TransitionControlLeaseRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ControlLeaseTransition |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/TransitionControlLease, contract/schemas/result.coordination.json#/methods/TransitionControlLease.
UpdateCapacityCell¶
controller epoch CAS for resource dimension/capacity policy
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | capacity:admin |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
CapacityCellUpdateRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
CapacityCellUpdateResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/UpdateCapacityCell, contract/schemas/result.coordination.json#/methods/UpdateCapacityCell.
UpdateDevelopmentLaneQuota¶
controller/admin-only monotonic server-owned quota policy with numeric expected_policy_revision CAS; now_ms is authority-normalized
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | lane:quota |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
DevelopmentLaneQuotaUpdateRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
DevelopmentLaneQuotaUpdateResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/UpdateDevelopmentLaneQuota, contract/schemas/result.coordination.json#/methods/UpdateDevelopmentLaneQuota.
UpdateResourceHost¶
controller-only monotonic host telemetry update
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | resource:host |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
ResourceHostUpdateRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
ResourceHostUpdateResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/UpdateResourceHost, contract/schemas/result.coordination.json#/methods/UpdateResourceHost.
VerifyWorkItemClaimCapability¶
linearizable live-lease check precedes private capability lookup
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:claim-capability |
| Mutates | false |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | false |
| Emits CDC | false |
| Txn participation | Snapshot |
| Replay class | NotReplayable |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
WorkItemClaimCapabilityVerifyRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkItemClaimCapabilityResult |
Raw |
Full machine-checked schema: contract/schemas/method.request.json#/methods/VerifyWorkItemClaimCapability, contract/schemas/result.coordination.json#/methods/VerifyWorkItemClaimCapability.
WorkOfferPut¶
versioned derived offer on a live Gap's WorkItem citing only held evidence; engine-computed fixed-point utility rate
| Property | Value |
|---|---|
| Stability | stable |
| Authz action | work:offer-write |
| Mutates | true |
| Durability domain | GraphRedb |
| Idempotent | true |
| Audited | true |
| Emits CDC | false |
| Txn participation | Atomic |
| Replay class | OperationIdentity |
| Consumer profiles | python |
| Error set | ACCESS_DENIED, AUTHENTICATION_REQUIRED, AUTH_AUDIENCE_MISMATCH, AUTH_POLICY_VERSION_MISMATCH, AUTH_TENANT_MISMATCH, BUSY, CANCELLED, CAPACITY_DENIED, CONFLICT, CORRUPT_MUTATION_LEDGER, ENGINE_DEADLINE_EXCEEDED, ENGINE_INTERNAL_METHOD, ENGINE_RESOURCE_EXHAUSTED, ENGINE_UNAVAILABLE, IDEMPOTENCY_CONFLICT, INTERNAL, INVALID_ARGUMENT, METHOD_NOT_YET_SERVED, NODE_MISMATCH, OPERATION_REDIRECTED, READ_ONLY, REDIRECTED, STALE_OUTBOX_LEASE, STALE_ROUTE, TIMEOUT |
| Format identities | STORAGE_KERNEL_SCHEMA_VERSION, GRAPH_SNAPSHOT_SCHEMA_VERSION, GRAPH_META_SCHEMA_VERSION |
Request parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
request |
WorkOfferPutRequest |
yes |
Result
| Body | Type | Encoding | Dynamic |
|---|---|---|---|
result |
WorkOfferRecorded |
Json |
Full machine-checked schema: contract/schemas/method.request.json#/methods/WorkOfferPut, contract/schemas/result.coordination.json#/methods/WorkOfferPut.