Get decision
Returns a specific recorded decision with its evaluation result.
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.
Path Parameters
Decision ID
Response
Default Response
A recorded decision with full context
Decision outcome
ALLOW Canonical DecisionContext for policy evaluation
Result of a policy evaluation
Chain ID if this decision is part of a decision chain
Step number within the chain (1-based)
Parent decision within the same chain
SHA-256 chain integrity hash (Phase 2 cryptographic chain proof)
Chain proof signature. Post-DAH-205 records carry "chain-proof/v1:" + base64url(Ed25519 over the domain-separated chain-proof/v1 envelope); legacy records carry base64url(Ed25519 over the bare chain_integrity_hash).
Key ID that produced the chain signature
Signature algorithm (ed25519)
Attribution of which tenant policies governed this decision
Policy group ID for filtering and audit
Policy group code for filtering and audit
Decision outcome, if one has been recorded
Policy metadata from the snapshot used for evaluation
Policies evaluated in this decision (populated for group evaluations)
Actor attribution — who or what made this decision