Get architecture assessment
The Security Architect's assessment of an audit, or of the latest assessed audit.
GET
The Security Architect's assessment of an audit, or of the latest assessed audit.
workspaceTokenheader
AuthorizationBearer <vat_<opaque-token>>Expiring, hashed workspace token with explicit scopes.
workspace_id*Workspace IdFormat
uuidaudit_id?|nullSuccessful Response
application/json- response
assessed_at*Assessed AtFormat
date-timeaudit_id*Audit IdFormat
uuidchecks*array<>Every Layer 1 check and its outcome.
checks_version*Checks Versionclasses*array<>coverage*array<>What each architecture domain covered.
drift*array<>Open drift from ratified architecture decisions, in the same classification.
engine_version*Engine Versioninput_hash*Input HashReproduces this assessment from its snapshot.
items*array<>Violations and investigations from the checks and scenarios.
ledgers*array<string>Evidence sources the assessment had.
no_longer_observed_finding_ids?array<>Open findings of checks that now pass: the condition is no longer observed. They stay open until closed through remediation or review.
scenarios*array<>Every Layer 2 what-if scenario.
snapshot_id*Snapshot IdFormat
uuidstyle*curl -X GET 'https://api.veriom.ai/v1/workspaces/497f6eca-6276-4993-bfeb-53cbbbba6f08/architecture/assessment'Example Response
{ "assessed_at": "2019-08-24T14:15:22Z", "audit_id": "78c04fa6-cfb4-46a0-9aa5-3681ba4f3897", "checks": [ { "check_id": "string", "domain": "trust_boundaries", "evaluated": 0, "expected": "string", "finding_class": "scanner_vulnerability", "limitations": [ "string" ], "outcome": "violation", "rule": "string", "summary": "string", "title": "string", "unresolved": [ { "checks_to_resolve": [ "string" ], "concern": "string", "established": [ "string" ], "evidence_ids": [ "string" ], "missing_evidence": [ "string" ], "subject_keys": [ "string" ] } ], "version": "string", "violations": [ { "confidence": 0, "consequence": "string", "evidence_ids": [ "string" ], "observed": "string", "proposed_action": "string", "relationship_keys": [ "string" ], "remediation_outcome": "automatable", "severity": "critical", "severity_basis": "string", "subject_keys": [ "string" ] } ] } ], "checks_version": "string", "classes": [ { "assessment_items": 0, "finding_class": "scanner_vulnerability", "findings": 0, "label": "string" } ], "coverage": [ { "check_ids": [ "string" ], "domain": "trust_boundaries", "label": "string", "note": "string", "outcomes": { "property1": 0, "property2": 0 }, "status": "evaluated" } ], "drift": [ { "domain": "string", "finding_class": "scanner_vulnerability", "finding_id": "string", "hypothesis": { "affected_objects": [ { "key": "string", "name": "string", "role": "string" } ], "checks_to_resolve": [ "string" ], "concern": "string", "conclusion": "string", "established": [ "string" ], "evidence": [ { "id": "string", "path": "string", "summary": "string" } ], "investigator": "string", "missing_evidence": [ "string" ], "status": "open" }, "id": "string", "impact": { "level": "critical", "reason": "string", "state": "established" }, "owner": "string", "related_item_ids": [ "string" ], "rule_id": "string", "source": "check", "structural": { "affected_objects": [ { "key": "string", "name": "string", "role": "string" } ], "affected_relationships": [ { "key": "string", "kind": "string", "source_key": "string", "target_key": "string" } ], "confidence": 0, "consequences": [ "string" ], "evidence": [ { "id": "string", "path": "string", "summary": "string" } ], "expected_condition": "string", "observed_condition": "string", "proposed_action": "string", "remediation_outcome": "automatable", "severity": { "basis": "string", "level": "critical" }, "violated_rule": "string" }, "summary": "string", "title": "string" } ], "engine_version": "string", "input_hash": "string", "items": [ { "domain": "string", "finding_class": "scanner_vulnerability", "finding_id": "string", "hypothesis": { "affected_objects": [ { "key": "string", "name": "string", "role": "string" } ], "checks_to_resolve": [ "string" ], "concern": "string", "conclusion": "string", "established": [ "string" ], "evidence": [ { "id": "string", "path": "string", "summary": "string" } ], "investigator": "string", "missing_evidence": [ "string" ], "status": "open" }, "id": "string", "impact": { "level": "critical", "reason": "string", "state": "established" }, "owner": "string", "related_item_ids": [ "string" ], "rule_id": "string", "source": "check", "structural": { "affected_objects": [ { "key": "string", "name": "string", "role": "string" } ], "affected_relationships": [ { "key": "string", "kind": "string", "source_key": "string", "target_key": "string" } ], "confidence": 0, "consequences": [ "string" ], "evidence": [ { "id": "string", "path": "string", "summary": "string" } ], "expected_condition": "string", "observed_condition": "string", "proposed_action": "string", "remediation_outcome": "automatable", "severity": { "basis": "string", "level": "critical" }, "violated_rule": "string" }, "summary": "string", "title": "string" } ], "ledgers": [ "string" ], "no_longer_observed_finding_ids": [ "798d5137-0d43-4781-8da0-4eed86addd75" ], "scenarios": [ { "affected_keys": [ "string" ], "checks_to_resolve": [ "string" ], "conclusion": "validated", "conclusion_reason": "string", "consequences": [ "string" ], "established": [ { "evidence_ids": [ "string" ], "statement": "string" } ], "hypothesis": "string", "id": "string", "kind": "public_service_compromise", "missing_evidence": [ "string" ], "related_check_ids": [ "string" ], "severity": "critical", "title": "string", "trigger_keys": [ "string" ] } ], "snapshot_id": "163831af-8c1b-4992-a9cf-88c6306604c0", "style": { "deployable_units": 0, "explanation": "string", "explanation_source": "deterministic", "primary": "microservices", "primary_label": "string", "styles": [ { "confidence": 0, "counter_signals": [ { "evidence_ids": [ "string" ], "statement": "string" } ], "label": "string", "signals": [ { "evidence_ids": [ "string" ], "statement": "string" } ], "style": "microservices" } ], "summary": "string" }}