Decide an end user's approval

function_plan: the writes a hosted function's plan run recorded, bound to the plan's digest in payload.planDigest.

Secret-safe review payload.

The recorded reviewer who finalized the decision, not all voters. Null for pending, expired, automated or unattributed decisions. Available to approval readers; not copied into invocation responses.

Recorded votes in chronological order on detail reads, including long-poll results. Omitted on list, create and decide responses; fetch the detail to audit all reviewers.

Distinct approvers needed (N-of-M), as resolved from the governing policy when the approval was created.

Approvals recorded so far.

The policy that governed this approval, as recorded when it was created. Null when no policy matched (the default gate applied) and on approvals recorded before policies existed.

The version of that policy at the time. Null exactly when matchedPolicyId is null.

A human-readable account of how the policy was applied. Null on approvals recorded before it was kept. It is the approval's own record; an invocation carries its own decision and does not need this.

Who decided. Persisted, not inferred from status. Null while pending. unknown marks a decision made before origin was recorded whose evidence does not settle it; it is never guessed. assistant is an approval by opt-in Anlyon Vigil inside the limits an admin set; it never denies.

The end user the gated call was made for (Anlyon-End-User), or null for a call with the workspace's own accounts. erased~<hash> once that end user is erased.

Who decides it. end_user: the end user it was made for, in your app, through /api/v2/end-users/{endUserId}/approvals (a policy with decidedBy: end_user). Such an approval is not in the team's inbox or Slack, and the team's decide routes answer 404 for it. Not decidedBy, which is the reviewer.

Anlyon Vigil's suggestion, on dashboard (session) responses only and only for workspaces that opted in. API-key callers never receive it.

The governed effect this invocation created, for a governed action (an adapter or a declaration). Its outcome, evidence and recovery are at GET /api/v2/actions/effects/{id}. Null for template actions.

The end user the call acted for (Anlyon-End-User), whose own accounts it used. Null for a call with the workspace's own accounts. erased~<hash> once that end user is erased.

On invoke responses and single reads: the receipt grade of the effect this invocation created. See Effect.grade. Absent when the invocation has no effect, and on list reads.

The failed invocation this one deliberately retried.

On single reads: the invocation that retried this one.

On single reads: the operator's confirmed outcome for an invocation that was unknown.

The immutable action version this invocation ran. Lets an audit answer which definition executed a given call rather than inferring it. Null only for invocations recorded before versioning existed.

unknown means the request may have reached the destination and Anlyon cannot confirm what happened a timeout, or a socket that died after the request was written. It is deliberately distinct from failed, which means the call did not happen: an error before anything left, such as a blocked URL or an invalid template. Do not retry an unknown invocation automatically. Reconcile it with the destination first; retrying is how one refund becomes two. This value is additive clients that do not know it should treat an unrecognised status as not-successful rather than as failed.

Redacted and truncated upstream response body.

Why the request was allowed or refused, when a policy, a person or expiry decided it. Persisted on the invocation, so it reads the same after the policy is edited or deleted. Null while undecided, for an invocation that ran with no gate, and on rows recorded before this field existed. For a request that was never sent, responseStatus and body stay null: no response is fabricated.

One sentence that says what to do.

An exact anlyon CLI command that fixes it. Absent when no command does.

An absolute console link where a person fixes it.

A docs page that explains it.

One sentence that says what to do.

An exact anlyon CLI command that fixes it. Absent when no command does.

An absolute console link where a person fixes it.

A docs page that explains it.

One sentence that says what to do.

An exact anlyon CLI command that fixes it. Absent when no command does.

An absolute console link where a person fixes it.

A docs page that explains it.

One sentence that says what to do.

An exact anlyon CLI command that fixes it. Absent when no command does.

An absolute console link where a person fixes it.

A docs page that explains it.

One sentence that says what to do.

An exact anlyon CLI command that fixes it. Absent when no command does.

An absolute console link where a person fixes it.

A docs page that explains it.

One sentence that says what to do.

An exact anlyon CLI command that fixes it. Absent when no command does.

An absolute console link where a person fixes it.

A docs page that explains it.