createSecurityIntervention
POST/security/interventions
Requires security:halt on a scoped service identity. Strict JSON, maximum 16 KiB. Deduplicates by service identity and external_event_id for the Organization lifetime. Acceptance does not prove execution stopped.
Request
Responses
- 200
- 202
- 400
- 401
- 403
- 404
- 409
- 413
- 500
Identical identity/event retry; original intervention's current state, including released state.
Response Headers
Successful security responses must not be cached.
Relative URL equal to the response body's status_url.
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
Intervention, barrier, and evidence committed. Acceptance is not termination proof.
Response Headers
Successful security responses must not be cached.
Relative URL equal to the response body's status_url.
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
invalid_request, unsupported_target_type, or unsupported_action: invalid JSON/fields/limits or unsupported target/action.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
Authentication failures use detail and a Bearer challenge. If credentials become unavailable before the locked acceptance check, invalid_security_service_credential uses error/message without a challenge.
Response Headers
Present on authentication failures; a POST rejected by the locked credential recheck has no challenge.
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
security_permission_denied: missing required security permission.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
target_not_found: Unknown, wrong-Organization, or out-of-scope target; indistinguishable to the caller.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
external_event_id_conflict for changed event semantics; agent_emergency_unavailable if the isolated runtime is disabled; agent_emergency_owner_changed for an ownership conflict.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
request_too_large: request body exceeds 16 KiB.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.
Unexpected server failure. Retain error_id for support; do not assume a timed-out or failed create was never accepted.
Response Headers
Server-generated synchronous HTTP correlation; distinct from protocol/resource identities.