Appearance
audit.software-delivery-slo.scan ​
Evaluate active software deliveries and reconcile deduplicated, auto-clearing findings without accepting caller-forged scan evidence.
Evaluate active software deliveries against the versioned Tickets SLO contract.
The workflow invokes the published evaluator directly against the organization-scoped app session, then upserts deduplicated Audit findings. Partial scans may create/update findings but cannot auto-resolve unseen ones.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Atomic |
| Library | App-audit |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
organization_uuid | uuid | Yes | — | Organization whose active software deliveries are evaluated |
limit | integer | No | — | Bounded active-delivery scan size (default/max 100) |
trigger | string | No | — | manual |
workflow_run_id | string | No | — | Engine-stamped parent DAG run id when invoked as a Step target |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
audit_run_uuid | uuid | No | — | — |
status | string | No | — | — |
contract_version | string | No | — | — |
evaluated_at | string | No | — | — |
new_findings | integer | No | — | — |
updated_findings | integer | No | — | — |
resolved_findings | integer | No | — | — |
total_findings | integer | No | — | — |
scanned_deliveries | integer | No | — | — |
returned_deliveries | integer | No | — | — |
alert_signals | integer | No | — | — |
eligible_signals | integer | No | — | — |
good_signals | integer | No | — | — |
breached_signals | integer | No | — | — |
unavailable_signals | integer | No | — | — |
terminal_successes | integer | No | — | — |
terminal_failures | integer | No | — | — |
sli | float | No | — | — |
burn | float | No | — | — |
scan_limit | integer | No | — | — |
matched_at_least | integer | No | — | — |
last_evaluated_at | string | No | — | — |
budget_contract_version | string | No | — | — |
auto_clear_performed | boolean | No | — | — |
scan_complete | boolean | No | — | — |
truncated | boolean | No | — | — |
by_severity | json | No | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_at_state | string | No | — | — |
failed_step | json | No | — | — |
failed_layer | json | No | — | — |
error | string | No | — | — |
error_type | string | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
pending | Yes | No | — | scan | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
pending | scan | completed | — |
* (any state) | fail | failed | — |
Outcomes ​
| Outcome | Type | Description | State Data Keys |
|---|---|---|---|
scanned | SUCCESS | Software-delivery SLO scan completed | audit_run_uuid, total_findings |
failed | FAILURE | Audit workflow failed | failure_reason |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "audit.software-delivery-slo.scan",
"initial_data": {
"organization_uuid": "value"
}
}