Get Run Defensibility Packet
The portable sourcing chain for a completed run (identity, output, provenance, enrichment calls, timeline). Model-call prompt bodies are withheld; calls are attested by stage.
runs:defensibility:read, must be bound to the run’s
engine, and must belong to the run’s canonical named environment. The default
runtime capability set does not include packet access.
Contents
The version 1 packet can contain:- run identity, submitter reference, engine/config lineage, timestamps, status, warnings, structured errors, and cost rollup
- the customer-visible output and per-element provenance map
- redacted external-call request and response evidence
- the run event timeline and its lineage fields
- aggregate model call, token, cache, and cost summaries
- a redaction count and explicit provenance coverage marker
Errors
Retention
The packet is assembled from run-bound evidence. Non-flagged runs and their packet evidence use the platform’s 90-day default retention window and purge together. Authorized internal preservation flags can retain a run longer.Authorizations
Send the credential as Authorization: Bearer <key>.
Scoped partner credentials use the exclusive nxsk_v1_... namespace.
Each scoped key is bound at issuance to one organization, one canonical
named environment, an explicit engine set, and a least-privilege
capability set. A malformed, unknown, rotated, or revoked nxsk_ key
fails closed and is never retried as a legacy key.
Capabilities used by this API are runs:write, runs:read,
engines:read, catalog:read, webhooks:manage,
runs:defensibility:read, runs:test, conversations:use, and
conversations:export. Operation descriptions name the required
capability.
Grandfathered nx_live_... and nx_test_... keys retain their existing
broad access during the compatibility window.
Path Parameters
Response
The customer-facing defensibility packet.
"1"
Run identity and lineage (id, engine, version, status, timestamps).
none for runs predating provenance capture; an absent map must not read as sourced-clean.
present, none Stage attestation that a model call ran, without the prompt or completion body.
Enrichment calls that fed the run, with their payloads.
The run event timeline.
The customer-visible output of the run.
Per-element provenance map, present when the run recorded one.
Aggregate model cost and token usage for the run.