{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/connic-co/json-schema/connic-co-compliance-incident-response-schema.json",
  "title": "ComplianceIncidentResponse",
  "description": "An AI incident and its corrective-action and notification record.",
  "x-generated": "2026-11-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/_original/connic-co-public-openapi.json#/components/schemas/ComplianceIncidentResponse",
  "properties": {
    "id": {
      "type": "string",
      "format": "uuid",
      "title": "Id"
    },
    "project_id": {
      "type": "string",
      "format": "uuid",
      "title": "Project Id",
      "description": "Project the incident belongs to."
    },
    "system_id": {
      "type": "string",
      "format": "uuid",
      "title": "System Id",
      "description": "AI system the incident concerns."
    },
    "environment_id": {
      "anyOf": [
        {
          "type": "string",
          "format": "uuid"
        },
        {
          "type": "null"
        }
      ],
      "title": "Environment Id",
      "description": "Environment involved."
    },
    "deployment_id": {
      "anyOf": [
        {
          "type": "string",
          "format": "uuid"
        },
        {
          "type": "null"
        }
      ],
      "title": "Deployment Id",
      "description": "Deployment involved."
    },
    "run_id": {
      "anyOf": [
        {
          "type": "string",
          "format": "uuid"
        },
        {
          "type": "null"
        }
      ],
      "title": "Run Id",
      "description": "Run involved."
    },
    "title": {
      "type": "string",
      "title": "Title",
      "description": "Short summary of the incident."
    },
    "description": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Description",
      "description": "What happened."
    },
    "severity": {
      "type": "string",
      "enum": [
        "low",
        "medium",
        "high",
        "critical"
      ],
      "title": "Severity",
      "description": "Internal severity rating."
    },
    "status": {
      "type": "string",
      "enum": [
        "open",
        "investigating",
        "contained",
        "resolved",
        "closed"
      ],
      "title": "Status",
      "description": "Case status."
    },
    "awareness_at": {
      "type": "string",
      "format": "date-time",
      "title": "Awareness At",
      "description": "When your organization first became aware of the incident."
    },
    "causal_link_status": {
      "type": "string",
      "enum": [
        "unknown",
        "suspected",
        "confirmed",
        "ruled_out"
      ],
      "title": "Causal Link Status",
      "description": "Whether the AI system is linked to the cause of the incident."
    },
    "affected_rights": {
      "items": {
        "type": "string"
      },
      "type": "array",
      "title": "Affected Rights",
      "description": "Rights or interests affected."
    },
    "member_states": {
      "items": {
        "type": "string"
      },
      "type": "array",
      "title": "Member States",
      "description": "EU Member States affected."
    },
    "reportability_status": {
      "type": "string",
      "enum": [
        "not_assessed",
        "not_reportable",
        "reportable",
        "reported"
      ],
      "title": "Reportability Status",
      "description": "Whether the incident must be reported to an authority."
    },
    "reporting_deadline": {
      "anyOf": [
        {
          "type": "string",
          "format": "date-time"
        },
        {
          "type": "null"
        }
      ],
      "title": "Reporting Deadline",
      "description": "Reporting deadline your organization determined."
    },
    "deadline_basis": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Deadline Basis",
      "description": "Rule, decision or counsel instruction behind `reporting_deadline`."
    },
    "deadline_confirmed_at": {
      "anyOf": [
        {
          "type": "string",
          "format": "date-time"
        },
        {
          "type": "null"
        }
      ],
      "title": "Deadline Confirmed At",
      "description": "When `reporting_deadline` was confirmed. Cleared when the deadline, awareness time or basis changes."
    },
    "deadline_confirmed_by": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Deadline Confirmed By",
      "description": "ID of the user who confirmed the deadline."
    },
    "containment": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Containment",
      "description": "Containment measures taken."
    },
    "investigation": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Investigation",
      "description": "Investigation findings."
    },
    "corrective_actions": {
      "items": {
        "$ref": "#/$defs/ComplianceCorrectiveAction"
      },
      "type": "array",
      "title": "Corrective Actions",
      "description": "Corrective actions being tracked."
    },
    "notification_history": {
      "items": {
        "$ref": "#/$defs/ComplianceIncidentNotification"
      },
      "type": "array",
      "title": "Notification History",
      "description": "Notifications sent about the incident, such as reports to authorities."
    },
    "created_by": {
      "type": "string",
      "title": "Created By",
      "description": "ID of the user who recorded the incident."
    },
    "updated_by": {
      "type": "string",
      "title": "Updated By",
      "description": "ID of the user who last changed the incident."
    },
    "created_at": {
      "type": "string",
      "format": "date-time",
      "title": "Created At"
    },
    "updated_at": {
      "type": "string",
      "format": "date-time",
      "title": "Updated At"
    },
    "closed_at": {
      "anyOf": [
        {
          "type": "string",
          "format": "date-time"
        },
        {
          "type": "null"
        }
      ],
      "title": "Closed At",
      "description": "When the incident was resolved or closed. null while open."
    }
  },
  "type": "object",
  "required": [
    "id",
    "project_id",
    "system_id",
    "environment_id",
    "deployment_id",
    "run_id",
    "title",
    "description",
    "severity",
    "status",
    "awareness_at",
    "causal_link_status",
    "affected_rights",
    "member_states",
    "reportability_status",
    "reporting_deadline",
    "deadline_basis",
    "deadline_confirmed_at",
    "deadline_confirmed_by",
    "containment",
    "investigation",
    "corrective_actions",
    "notification_history",
    "created_by",
    "updated_by",
    "created_at",
    "updated_at",
    "closed_at"
  ],
  "$defs": {
    "ComplianceCorrectiveAction": {
      "properties": {
        "action": {
          "type": "string",
          "maxLength": 2000,
          "minLength": 1,
          "title": "Action",
          "description": "What will be done."
        },
        "owner": {
          "anyOf": [
            {
              "type": "string",
              "maxLength": 200,
              "minLength": 1
            },
            {
              "type": "null"
            }
          ],
          "title": "Owner",
          "description": "Person or team responsible."
        },
        "status": {
          "type": "string",
          "maxLength": 200,
          "minLength": 1,
          "title": "Status",
          "description": "Free-text status, such as `open` or `done`.",
          "default": "open"
        },
        "due_at": {
          "anyOf": [
            {
              "type": "string",
              "format": "date-time"
            },
            {
              "type": "null"
            }
          ],
          "title": "Due At",
          "description": "When the action is due."
        }
      },
      "additionalProperties": false,
      "type": "object",
      "required": [
        "action"
      ],
      "title": "ComplianceCorrectiveAction",
      "description": "A corrective action tracked on an incident."
    },
    "ComplianceIncidentNotification": {
      "properties": {
        "recipient": {
          "type": "string",
          "maxLength": 300,
          "minLength": 1,
          "title": "Recipient",
          "description": "Recipient or authority notified."
        },
        "channel": {
          "type": "string",
          "maxLength": 200,
          "minLength": 1,
          "title": "Channel",
          "description": "How the notification was sent, such as email or a portal."
        },
        "at": {
          "type": "string",
          "format": "date-time",
          "title": "At",
          "description": "When the notification was sent."
        },
        "external_reference": {
          "type": "string",
          "maxLength": 500,
          "minLength": 1,
          "title": "External Reference",
          "description": "Case or submission ID from the recipient."
        },
        "note": {
          "anyOf": [
            {
              "type": "string",
              "maxLength": 2000,
              "minLength": 1
            },
            {
              "type": "null"
            }
          ],
          "title": "Note",
          "description": "Additional context."
        }
      },
      "additionalProperties": false,
      "type": "object",
      "required": [
        "recipient",
        "channel",
        "at",
        "external_reference"
      ],
      "title": "ComplianceIncidentNotification",
      "description": "A notification sent about an incident, such as a report to an authority."
    }
  }
}