Skip to main content
GET
Get decision

Authorizations

Authorization
string
header
required

MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).

X-MeshQu-Tenant-Id
string
header
required

Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.

Path Parameters

id
string<uuid>
required

Decision ID

Response

Default Response

A recorded decision with full context

id
string<uuid>
required
tenant_id
string<uuid>
required
idempotency_key
string
required
decision_type
string
required
decision
required

Decision outcome

Available options:
ALLOW
context
object
required

Canonical DecisionContext for policy evaluation

result
object
required

Result of a policy evaluation

policy_snapshot_id
string<uuid>
required
correlation_id
string | null
required
chain_id
string<uuid> | null
required

Chain ID if this decision is part of a decision chain

chain_step
integer | null
required

Step number within the chain (1-based)

parent_decision_id
string<uuid> | null
required

Parent decision within the same chain

chain_integrity_hash
string | null
required

SHA-256 chain integrity hash (Phase 2 cryptographic chain proof)

chain_signature
string | null
required

Chain proof signature. Post-DAH-205 records carry "chain-proof/v1:" + base64url(Ed25519 over the domain-separated chain-proof/v1 envelope); legacy records carry base64url(Ed25519 over the bare chain_integrity_hash).

chain_signature_kid
string | null
required

Key ID that produced the chain signature

chain_signature_algorithm
string | null
required

Signature algorithm (ed25519)

recorded_at
string<date-time>
required
created_at
string<date-time>
required
governance_source
object
required

Attribution of which tenant policies governed this decision

policy_group_id
string<uuid> | null
required

Policy group ID for filtering and audit

policy_group_code
string | null
required

Policy group code for filtering and audit

outcome
object | null
required

Decision outcome, if one has been recorded

policy
object

Policy metadata from the snapshot used for evaluation

evaluated_policies
object[]

Policies evaluated in this decision (populated for group evaluations)

actor
object

Actor attribution — who or what made this decision