{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/axiorank-com/json-schema/axiorank-com-inbound-verify-response-schema.json",
  "title": "InboundVerifyResponse",
  "x-generated": "2026-11-02",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/axiorank-com-openapi.json#/components/schemas/InboundVerifyResponse",
  "type": "object",
  "properties": {
    "decision": {
      "type": "string",
      "enum": [
        "allow",
        "challenge",
        "block"
      ]
    },
    "reason": {
      "type": "string"
    },
    "risk": {
      "type": "integer",
      "minimum": 0,
      "maximum": 100
    },
    "verification": {
      "type": "object",
      "properties": {
        "status": {
          "type": "string",
          "enum": [
            "verified",
            "unverified",
            "spoofed",
            "unknown"
          ]
        },
        "method": {
          "type": [
            "string",
            "null"
          ]
        },
        "agentSlug": {
          "type": [
            "string",
            "null"
          ]
        },
        "agentLabel": {
          "type": [
            "string",
            "null"
          ]
        },
        "confidence": {
          "type": "integer",
          "minimum": 0,
          "maximum": 100,
          "description": "0..100: cryptographic proof = 100, heuristic UA match = 40, etc."
        }
      },
      "required": [
        "status",
        "method",
        "agentSlug",
        "agentLabel",
        "confidence"
      ]
    },
    "enforced": {
      "type": "boolean",
      "description": "false under `monitor` posture: the verdict was computed + logged, not acted on."
    },
    "signals": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/RiskSignal"
      }
    },
    "requestId": {
      "type": "string"
    }
  },
  "required": [
    "decision",
    "reason",
    "risk",
    "verification",
    "enforced",
    "signals",
    "requestId"
  ],
  "$defs": {
    "RiskSignal": {
      "type": "object",
      "description": "A redacted content-inspection finding that contributed to the risk score.",
      "properties": {
        "detector": {
          "type": "string"
        },
        "category": {
          "type": "string",
          "enum": [
            "secret",
            "pii",
            "destructive",
            "injection",
            "egress",
            "bot_spoof",
            "rate_abuse",
            "supply_chain"
          ]
        },
        "severity": {
          "type": "string",
          "enum": [
            "low",
            "medium",
            "high",
            "critical"
          ]
        },
        "label": {
          "type": "string"
        },
        "points": {
          "type": "integer",
          "description": "Pre-diminishing-returns contribution, from severity."
        },
        "location": {
          "type": "string"
        },
        "evidence": {
          "type": "string",
          "description": "Redacted evidence, safe to persist and display."
        },
        "critical": {
          "type": "boolean",
          "description": "A live secret / key / card was detected."
        }
      },
      "required": [
        "detector",
        "category",
        "severity",
        "label",
        "points",
        "location",
        "evidence"
      ]
    }
  }
}