Vocabularies

These sets are closed: a value outside one is a validation fault, not a new category the server learns. They are generated from the same contract the SDKs check themselves against, so an SDK that accepts a value missing here is a bug in that SDK.

ActionType

access.grant
access.impersonate
access.revoke
case.close
case.escalate
case.merge
case.triage
code.apply_patch
code.delete_file
code.modify_dependency
code.modify_migration
code.touch_fragile_file
comms.publish
comms.send_external
comms.send_internal
data.bulk_mutation
data.run_migration
deploy.modify_infra
deploy.release
deploy.rollback
finance.adjust_ledger
finance.issue_payment
finance.issue_refund
finance.modify_pricing
pipeline.disable
pipeline.modify
pipeline.run
record.bulk_mutate
record.create
record.delete
record.update
secret.access
tool.exec_shell
tool.network_call
vcs.force_push
vcs.merge_pr
vcs.modify_ci_config

ActorType

agent
human
system

Decision

allow and warn proceed; block and require_approval stop. A decision this client does not recognise must be treated as a stop.

allow
block
require_approval
warn

EdgeType

applies_to
caused_by
contradicts
inherits_from
supersedes
supports

FaultCode

conflict
dependency_unavailable
forbidden
gone
internal
not_found
payload_too_large
rate_limited
unauthenticated
validation

Kind

decision
evidence
fact
guide
lesson
policy
skill

MagnitudeUnit

amount
recipients
records
resources

Provenance

interactive_principal
machine_credential
server_authored
unauthenticated
verified_connector

Purpose

access_management
code_review
communication
customer_support
data_migration
dependency_upgrade
deploy
feature
financial_operation
incident_response
record_keeping
refactor
triage

RankingMode

dense
exact
hybrid
lexical

ReasonCode

approval_granted
contradicts_decision
disputed_memory
fragile_resource
guide_prohibition
low_confidence_advisory
missing_required_control
regression_recurrence
requires_approval
sensitivity_block
stale_memory_conflict
violates_policy

ReasonSeverity

block
info
warn

ResponseFormat

concise
detailed

RiskClass

critical
high
low
medium

SegmentLabel

An unreported label is stored absent, never zero — “not reported” and “reported zero” stay distinguishable.

personality
resolved_guides
retrieved_memory
system_prompt
tool_defs
working_state

Sensitivity

internal
public
restricted
secret

SourceType

The set a hydrated record may carry. It is wider than SourceTypePublic — a record can report a source the ingest verb refuses to accept directly.

agent_conversation
alert
ci
correction
deploy
doc
incident
message
pr
review
run
ticket
transaction

SourceTypePublic

The set evidence.ingest accepts. Use this one when writing.

alert
ci
correction
deploy
doc
incident
message
pr
review
run
ticket
transaction

Status

active
deprecated
disputed
stale