Integration surface
API reference
Versioned endpoints for discovery, assurance, decisions, governance, and operations.
Discovery and posture
GET/POST /api/v1/discovery and GET/POST /api/v1/posture manage inventory and posture reviews.
Telemetry and evaluations
POST /api/v1/telemetry accepts OpenTelemetry-compatible CloudEvents. POST /api/v1/evaluations records reproducible runs with frozen dataset, model, and evaluator versions.
Runtime and policy
POST /api/v1/runtime/decide evaluates guardrails and policy rules. GET /api/v1/guardrails lists native and connector-ready providers. GET/POST /api/v1/policies manages policy lifecycle.
Error contract
Errors use { code, message, fieldErrors?, requestId }. 401 means missing identity, 403 insufficient role or tenant access, 409 stale workflow, and 422 validation or approval-gate failure.
Aegis provides governance and security decision support, not legal certification. Confirm applicability and exceptions with accountable human reviewers.