Skip to content
deedglassdocs

Retrieve a replay

GET
/v1/replays/{id}
curl --request GET \
  --url http://127.0.0.1:8080/v1/replays/example \
  --header 'Authorization: Bearer <token>' \
  --header 'Deedglass-Version: 2026-10-01'

One replay (S27): its status, its progress and, once it succeeded, its result: the summary (actions = evaluated + unknown, evaluated = unchanged + changed + rule_changed), every decision transition from the baseline to the candidate with its rules, tools, the first 20 action ids and, for a transition out of require_approval, what people did with those actions (human_outcome), the same decisions reached by a different rule (rule_changes), the actions that couldn’t be evaluated and why (unknown), the sqlguard versions recorded next to the current one, and result_digest. A failed replay carries error. An id that isn’t one of this org’s replays is 404 not_found. A Console session (viewer and up) or an org admin key (admin scope); agent keys get 403 insufficient_scope.

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
id
required
string

The replay id (rpl_…).

Header Parameters

Section titled “Header Parameters”
Deedglass-Version
string
/^[0-9]{4}-[0-9]{2}-[0-9]{2}$/

The API version (YYYY-MM-DD). Leave it out to use your org’s pinned version (public routes use the latest). An unknown version is 400 api_version_invalid.

Responses

Section titled “Responses”

200

Section titled “200”

The replay.

Media typeapplication/json

A replay job (S27): what it replays, its progress and, once status is succeeded, its result (summary through elapsed_ms; transitions and rule_changes are absent when there are none). elapsed_ms is not part of result_digest.

object
object
required
string
Allowed value: replay
id
required
string
/^rpl_[0-7][0-9a-hjkmnp-tv-z]{25}$/
status
required
string
Allowed values: queued running succeeded failed cancelled
purpose
required
string
Allowed values: manual suggestion
candidate
required

The version replayed.

object
policy

The policy id (pol_…).

string
name
required
string
version
required

The version number (0 for a draft).

integer
version_id

The version id (pv_…). Absent for a draft.

string
version_hash
required

“sha256:” + lowercase hex of SHA-256.

string
/^sha256:[0-9a-f]{64}$/
source_hash

A draft’s source hash. Absent for a stored version.

string
/^sha256:[0-9a-f]{64}$/
baseline
required

What the candidate is compared with: the decisions recorded at the time (recorded), or another version of the same policy evaluated over the same inputs (version).

object
type
required
string
Allowed values: recorded version
version
required

The baseline version number; 0 for recorded.

integer
version_id

version only (pv_…).

string
version_hash

version only.

string
/^sha256:[0-9a-f]{64}$/
window
required
object
from
required
string format: date-time
to
required
string format: date-time
progress
required
object
processed
required
integer
total
required

The actions in the window

integer | null
percent
required

Processed / total

integer
<= 100
requested_by
required

Who asked for it.

object
type
required
string
Allowed values: user api_key system
id
required

usr_…, key_…, or deedglass for the system.

string
attempts
required

Runs started. A runner that lost its lease starts again from zero.

integer
created_at
required
string format: date-time
started_at
required
string | null format: date-time
finished_at
required
string | null format: date-time
error
required

A failed replay’s cause.

object
code
required
string
Allowed values: candidate_invalid replay_too_large replay_window_invalid internal_error
message
required
string
summary

actions = evaluated + unknown and evaluated = unchanged + changed + rule_changed.

object
actions
required
integer
evaluated
required
integer
unchanged
required
integer
changed
required

The decision would differ.

integer
rule_changed
required

The same decision

integer
unknown
required

Counted but not evaluated (see unknown); never guessed.

integer
transitions
Array<object>

Every action whose decision would change from from (the baseline) to to (the candidate). The full Transition schema is in openapi.yaml.

object
rule_changes
Array<object>

The same decision, reached by a different rule. The full RuleChange schema is in openapi.yaml.

object
unknown

Actions a replay counted but couldn’t evaluate, by reason.

object
input_pruned
required

Retention removed the stored decision input.

integer
input_missing
required

Recorded before decision inputs were stored.

integer
input_version_unsupported
required

A stored input in a newer format.

integer
input_unreadable
required

A stored input that doesn’t decode.

integer
evaluation_time_limit
required

The evaluation hit its time limit.

integer
sqlguard

The sqlguard versions recorded with the decisions, next to the current one. SQL facts are computed again at replay, so a difference is shown, never hidden.

object
recorded
required
Array<string>
current
required
string
result_digest

The same inputs, candidate, baseline and sqlguard version give the same digest.

string
/^sha256:[0-9a-f]{64}$/
elapsed_ms
integer
Examples
Examplesucceeded

acme-sim v3 over 8 days: 453 decisions would change

{
  "object": "replay",
  "id": "rpl_01m42vjp4z65td5hkdkcefczms",
  "status": "succeeded",
  "purpose": "manual",
  "candidate": {
    "policy": "pol_01m42v9q4bjwfqmk8bd58vzkdh",
    "name": "acme-sim",
    "version": 3,
    "version_id": "pv_01m42vcmkk193cy009pdzt4c6s",
    "version_hash": "sha256:3d09f641a6d5f6962ef719d05a59c6cea0362d950ea6f920418b01125b6bbb7b"
  },
  "baseline": {
    "type": "recorded",
    "version": 0
  },
  "window": {
    "from": "2026-09-26T07:03:15Z",
    "to": "2026-10-04T07:03:15Z"
  },
  "progress": {
    "processed": 5890,
    "total": 5890,
    "percent": 100
  },
  "requested_by": {
    "type": "api_key",
    "id": "key_01m42vbv2s105agpkrzjpnhzpa"
  },
  "attempts": 1,
  "created_at": "2026-10-04T07:03:15.359342Z",
  "started_at": "2026-10-04T07:03:15.363544Z",
  "finished_at": "2026-10-04T07:03:15.475336Z",
  "error": null,
  "summary": {
    "actions": 5890,
    "evaluated": 5890,
    "unchanged": 5422,
    "changed": 453,
    "rule_changed": 15,
    "unknown": 0
  },
  "transitions": [
    {
      "from": "require_approval",
      "to": "allow",
      "count": 411,
      "human_outcome": {
        "approved": 397,
        "denied": 1,
        "expired": 5,
        "cancelled": 0,
        "pending": 8,
        "not_requested": 0
      },
      "by_rule": [
        {
          "rule_id": "allow-order-status-updates",
          "count": 411
        }
      ],
      "by_tool": [
        {
          "tool": "postgres.execute",
          "count": 411
        }
      ],
      "samples": [
        "act_01m42v9q4yxpvvk84fgd7t8shf",
        "act_01m42v9q5mppyn3mxr17xdk5nj",
        "act_01m42v9q6p44tzz1jw9pb0vy34"
      ]
    },
    {
      "from": "allow",
      "to": "deny",
      "count": 42,
      "by_rule": [
        {
          "rule_id": "refund-limit-strict",
          "count": 42
        }
      ],
      "by_tool": [
        {
          "tool": "stripe.create_refund",
          "count": 42
        }
      ],
      "samples": [
        "act_01m42v9q8qcyh3wvjsc8b2hq80",
        "act_01m42v9qdh2cc0fxhn9b1w3ad5",
        "act_01m42v9qhhw604y6x7aqdvrccm"
      ]
    }
  ],
  "rule_changes": [
    {
      "decision": "deny",
      "from_rule": "refund-limit",
      "to_rule": "refund-limit-strict",
      "count": 15,
      "samples": [
        "act_01m42v9qthv2k3qsyq2a7z2vk6",
        "act_01m42v9wgcnx5jpv5ffs4smtdv",
        "act_01m42v9xhg704254e8e3e6672c"
      ]
    }
  ],
  "unknown": {
    "input_pruned": 0,
    "input_missing": 0,
    "input_version_unsupported": 0,
    "input_unreadable": 0,
    "evaluation_time_limit": 0
  },
  "sqlguard": {
    "recorded": [
      "1"
    ],
    "current": "1"
  },
  "result_digest": "sha256:98488d32f41913dadd2a55ac845be76fc76dab5b66cc3c80bb1638001ad15b9f",
  "elapsed_ms": 103
}

Headers

Section titled “Headers”
Deedglass-Request-Id
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

Deedglass-Version
string

The API version this response follows.

404

Section titled “404”

No such replay in this org.

Media typeapplication/json
object
error
required
object
type
required
string
Allowed values: invalid_request_error authentication_error permission_error policy_error rate_limit_error api_error
code
required
string
Allowed values: invalid_api_key api_key_revoked api_key_expired agent_suspended agent_stopped org_stopped insufficient_scope policy_denied approval_required approval_expired budget_exceeded intent_required intent_invalid intent_replay tool_unknown connector_unavailable upstream_error timeout rate_limited idempotency_conflict validation_failed not_found conflict internal_error authentication_required method_not_allowed request_too_large unsupported_media_type invalid_json api_version_invalid idempotency_key_invalid idempotency_key_in_use service_unavailable session_expired csrf_failed insufficient_role login_link_invalid login_code_invalid last_owner policy_unavailable policy_invalid credentials_missing destination_blocked vault_unavailable upstream_auth_failed upstream_not_found upstream_rate_limited response_too_large statement_refused row_limit_exceeded database_role_unsafe database_not_ready witness_not_configured approval_decided already_countersigned approver_not_eligible self_approval approval_needs_person context_changed approval_unsatisfiable approval_link_invalid approval_link_review_only approver_unmapped stripe_live_key_refused stripe_livemode_detected upstream_approval_pending schedule_needs_approval action_executing from_denied undo_unavailable undo_plan_stale already_undone undo_conflict replay_too_large replay_window_invalid suggestion_stale shadow_slot_taken suggestion_decided observe_not_enabled pro_required
message
required

One or more calm sentences with the next step.

string
param
required

The request field, query parameter or header the error is about.

string | null
request_id
required
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/
doc_url
required
string format: uri
diagnostics

On policy_invalid only. Each problem with its line, code and hint.

Array<object>

One finding about a policy file, with its position and the next step. Codes are stable and listed in docs/POLICY_ERRORS.md. In the policy_invalid error envelope each diagnostic also carries object: policy_diagnostic. The full PolicyDiagnostic schema is in openapi.yaml.

object
action

One agent action. Its sections mirror the deed’s. status is the one field an agent needs; state is the exact lifecycle state (docs/GATE.md). The Gate’s own responses (POST /v1/actions and its result report) add execution.result and witness.reasons; lists leave both out. The full Action schema is in openapi.yaml.

object
checks

On undo_unavailable only. Every check of the undo, each with its fix. Additive (S23).

Array<object>

One of the twelve safety checks (S23 §3.3). Available means no check failed. The full UndoCheck schema is in openapi.yaml.

object
Example
{
  "error": {
    "type": "invalid_request_error",
    "code": "not_found",
    "message": "No replay rpl_01m42vjp4z65td5hkdkcefczmx in this org. List recent replays: GET /v1/replays.",
    "param": null,
    "request_id": "req_01m42vkfg0s05h3mvvxbvbvfr8",
    "doc_url": "https://docs.deedglass.com/errors/not_found"
  }
}

Headers

Section titled “Headers”
Deedglass-Request-Id
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

default

Section titled “default”

An error. Every error has this envelope; doc_url explains the code.

Media typeapplication/json
object
error
required
object
type
required
string
Allowed values: invalid_request_error authentication_error permission_error policy_error rate_limit_error api_error
code
required
string
Allowed values: invalid_api_key api_key_revoked api_key_expired agent_suspended agent_stopped org_stopped insufficient_scope policy_denied approval_required approval_expired budget_exceeded intent_required intent_invalid intent_replay tool_unknown connector_unavailable upstream_error timeout rate_limited idempotency_conflict validation_failed not_found conflict internal_error authentication_required method_not_allowed request_too_large unsupported_media_type invalid_json api_version_invalid idempotency_key_invalid idempotency_key_in_use service_unavailable session_expired csrf_failed insufficient_role login_link_invalid login_code_invalid last_owner policy_unavailable policy_invalid credentials_missing destination_blocked vault_unavailable upstream_auth_failed upstream_not_found upstream_rate_limited response_too_large statement_refused row_limit_exceeded database_role_unsafe database_not_ready witness_not_configured approval_decided already_countersigned approver_not_eligible self_approval approval_needs_person context_changed approval_unsatisfiable approval_link_invalid approval_link_review_only approver_unmapped stripe_live_key_refused stripe_livemode_detected upstream_approval_pending schedule_needs_approval action_executing from_denied undo_unavailable undo_plan_stale already_undone undo_conflict replay_too_large replay_window_invalid suggestion_stale shadow_slot_taken suggestion_decided observe_not_enabled pro_required
message
required

One or more calm sentences with the next step.

string
param
required

The request field, query parameter or header the error is about.

string | null
request_id
required
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/
doc_url
required
string format: uri
diagnostics

On policy_invalid only. Each problem with its line, code and hint.

Array<object>

One finding about a policy file, with its position and the next step. Codes are stable and listed in docs/POLICY_ERRORS.md. In the policy_invalid error envelope each diagnostic also carries object: policy_diagnostic. The full PolicyDiagnostic schema is in openapi.yaml.

object
action

One agent action. Its sections mirror the deed’s. status is the one field an agent needs; state is the exact lifecycle state (docs/GATE.md). The Gate’s own responses (POST /v1/actions and its result report) add execution.result and witness.reasons; lists leave both out. The full Action schema is in openapi.yaml.

object
checks

On undo_unavailable only. Every check of the undo, each with its fix. Additive (S23).

Array<object>

One of the twelve safety checks (S23 §3.3). Available means no check failed. The full UndoCheck schema is in openapi.yaml.

object
Example
{
  "error": {
    "type": "invalid_request_error",
    "code": "not_found",
    "message": "There's no endpoint at GET /v1/helth. Did you mean /v1/health?",
    "param": null,
    "request_id": "req_01j9zr3m5k8q2w7x4t6v0b1c9d",
    "doc_url": "https://docs.deedglass.com/errors/not_found"
  }
}

Headers

Section titled “Headers”
Deedglass-Request-Id
string
/^req_[0-7][0-9a-hjkmnp-tv-z]{25}$/

This request’s id. Quote it to support; it matches error.request_id.

Deedglass-Version
string

The API version this response follows.