ticket.ingest.audit-finding

Mirror an audit Finding into a tracker task ticket.

Overview

Property	Value
Workflow type	Linear
Library	App-tickets
Version	1.0

Input Schema

Field	Type	Required	Default	Description
organization_uuid	string	Yes	—	—
finding_uuid	string	Yes	—	—
finding_type	string	Yes	—	—
rule_key	string	Yes	—	—
severity	string	Yes	—	—
status	string	Yes	—	—
title	string	Yes	—	—
content_hash	string	Yes	—	—
resource_type	string	No	—	—
resource_ref	string	No	—	—
occurrence_count	integer	No	—	—
first_seen_at	datetime	No	—	—
last_seen_at	datetime	No	—	—
remediation	string	No	—	—

Output Schema

Field	Type	Required	Default	Description
ticket_uuid	string	No	—	—
created	boolean	No	—	—
occurrence_count	integer	No	—	—
organization_uuid	string	No	—	Input field preserved in workflow state.
finding_uuid	string	No	—	Input field preserved in workflow state.
finding_type	string	No	—	Input field preserved in workflow state.
rule_key	string	No	—	Input field preserved in workflow state.
severity	string	No	—	Input field preserved in workflow state.
status	string	No	—	Input field preserved in workflow state.
title	string	No	—	Input field preserved in workflow state.
content_hash	string	No	—	Input field preserved in workflow state.
resource_type	string	No	—	Input field preserved in workflow state.
resource_ref	string	No	—	Input field preserved in workflow state.
first_seen_at	datetime	No	—	Input field preserved in workflow state.
last_seen_at	datetime	No	—	Input field preserved in workflow state.
remediation	string	No	—	Input field preserved in workflow state.
failed_at	string	No	—	ISO-8601 timestamp when action_fail recorded the failure
failure_reason	string	No	—	Human-readable failure reason from action_fail
failure_type	string	No	—	Engine-stamped failure category
failed_action	string	No	—	Engine-stamped action that raised
failed_at_state	string	No	—	Engine-stamped state when the workflow failed
failed_step	string	No	—	Engine-stamped step name (DAG path)
failed_layer	string	No	—	Engine-stamped layer index (DAG path)
error	string	No	—	Engine-stamped exception message
error_type	string	No	—	Engine-stamped exception class name

States

State	Initial	Terminal	Success	Auto-advance	Description
initiated	Yes	No	—	execute	Accepted
executing	No	No	—	complete	Applying the mutation
completed	No	Yes	Yes	—	Done
failed	No	Yes	No	—	Failed

State Diagram

Transitions

From	Action	To	Description
initiated	execute	executing	Run the mutation
executing	complete	completed	Finalize
* (any state)	fail	failed	Catch-all failure

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "ticket.ingest.audit-finding",
  "initial_data": {
    "organization_uuid": "value",
    "finding_uuid": "value",
    "finding_type": "value",
    "rule_key": "value"
  }
}