Enforcement feed
GET/api/enforcement
The enforcement feed, newest first, one page at a time.
Paging is a keyset cursor on the immutable ev.id (before_id = the last id of the previous page,
echoed back as next_cursor), so a page never shifts or repeats while new decisions arrive. The
filters (decision / entity_id / tier / policy name / window) are applied HERE, before the page is cut,
so total is the real number of matching decisions and a filter reaches decisions beyond the first
page (the feed used to be a fixed newest-300 list that the screen filtered locally).
facets (first page only) lists every agent and policy that has a decision, independent of the
filters, to fill the filter dropdowns; stats.breakdown_24h is the unfiltered 24h decision count.
Request
Responses
- 200
- 401
- 403
- 422
Successful Response
The token is missing, invalid or expired. Refresh it, or sign in again.
Your role does not allow this. The detail names the missing permission or role.
Validation Error