Skip to main content
FetchSandboxFailing
Outcome

Workflow verification incomplete

This receipt shows the requests we made, what the app reported back, and which checks passed or failed. It covers what ran in this sandbox session against the rules we set.

8 / 12

Failing

8Passed4Failed0Not measured
What we did

Each check was set up before the run. This shows what we tried, what came back, and which rule it was checked against.

Scope

This receipt covers the checks in this run only. Passing all checks does not certify the whole app as production-ready.

Test scenarios

01

A campaign reads the organization's memberships and opens: one decision per entitlement, posted to GRC

baseline
Passed

What we probed

A campaign reads the organization's memberships and opens: one decision per entitlement, posted to GRC

How we probed it

Frozen intended probe steps. Recorded requests show what actually ran.

  1. POST /invocations

Expected vs actual

Expected
A campaign reads the organization's memberships and opens: one decision per entitlement, posted to GRC
Actual
expected exactly 1, found 1; stable under 2 repeats (1)

Requests and responses

01GET /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs200
We sent

GET /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs

This request had no body.

Server returned

HTTP 200

{
  "runs": []
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}
{
  "content-type": "application/json",
  "content-length": "11"
}
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

02POST /invocations200
We sent

POST /invocations

{
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}
Server returned

HTTP 200

{
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 623
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 20
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 1
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "admin",
        "holder": "56592aae77",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "member",
        "holder": "01ada99ca9",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17YTEWUFZ6.A3CLOX",
      "appliedAt": "2026-10-22T19:03:27.856Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-baseline"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:27.037Z",
  "audit": {
    "seq": 5,
    "head": "60012393ccd6b86f37b85e9c4e7c3b652ccd18e1f69daa1759693c83effaa876"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:27.037Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:27.663Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:27.667Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:27.857Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:27.860Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:27.863Z",
      "msg": "waiting until 2026-10-29T19:03:27.037Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:27.037Z",
  "updatedAt": "2026-10-22T19:03:27.863Z",
  "duplicate": false
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "516",
  "content-type": "application/json"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

03GET /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs200
We sent

GET /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs

This request had no body.

Server returned

HTTP 200

{
  "runs": [
    {
      "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "baseline"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 623
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 20
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 1
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "admin",
            "holder": "56592aae77",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "member",
            "holder": "01ada99ca9",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17YTEWUFZ6.A3CLOX",
          "appliedAt": "2026-10-22T19:03:27.856Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-baseline"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:27.037Z",
      "audit": {
        "seq": 5,
        "head": "60012393ccd6b86f37b85e9c4e7c3b652ccd18e1f69daa1759693c83effaa876"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:27.037Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:27.663Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:27.667Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:27.857Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:27.860Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:27.863Z",
          "msg": "waiting until 2026-10-29T19:03:27.037Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:27.037Z",
      "updatedAt": "2026-10-22T19:03:27.863Z"
    }
  ]
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

04POST /invocations200
We sent

POST /invocations

{
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}
Server returned

HTTP 200

{
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 623
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 20
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 1
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "admin",
        "holder": "56592aae77",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "member",
        "holder": "01ada99ca9",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17YTEWUFZ6.A3CLOX",
      "appliedAt": "2026-10-22T19:03:27.856Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-baseline"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:27.037Z",
  "audit": {
    "seq": 6,
    "head": "b5aa5bbec82ebe7667c890cef847936cd8a720f01e4a13dfe33e65a78e146ee2"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:27.037Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:27.663Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:27.667Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:27.857Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:27.860Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:27.863Z",
      "msg": "waiting until 2026-10-29T19:03:27.037Z"
    },
    {
      "at": "2026-10-22T19:03:28.542Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:27.037Z",
  "updatedAt": "2026-10-22T19:03:28.542Z",
  "duplicate": true
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "516",
  "content-type": "application/json"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

05GET /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs200
We sent

GET /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs

This request had no body.

Server returned

HTTP 200

{
  "runs": [
    {
      "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "baseline"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 623
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 20
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 1
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "admin",
            "holder": "56592aae77",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "member",
            "holder": "01ada99ca9",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17YTEWUFZ6.A3CLOX",
          "appliedAt": "2026-10-22T19:03:27.856Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-baseline"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:27.037Z",
      "audit": {
        "seq": 6,
        "head": "b5aa5bbec82ebe7667c890cef847936cd8a720f01e4a13dfe33e65a78e146ee2"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:27.037Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:27.663Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:27.667Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:27.857Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:27.860Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:27.863Z",
          "msg": "waiting until 2026-10-29T19:03:27.037Z"
        },
        {
          "at": "2026-10-22T19:03:28.542Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:27.037Z",
      "updatedAt": "2026-10-22T19:03:28.542Z"
    }
  ]
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

Evidence
Run
vr_c14cb6f1efe04a0fbf095e93e9089086
App version (declared)
acme-ops-user-access-review-…
Source receipt
Source receipt ↗
Technical referencebaseline

App version (declared): acme-ops-user-access-review-1.0.0-4ac41d8

A campaign reads the organization's memberships and opens: one decision per entitlement, posted to GRC

expected exactly 1, found 1; stable under 2 repeats (1)

  • Verification covers the declared HTTP actions and state reads in this run.
  • The app version shown was supplied by the app itself, not independently checked.
  • Passing all checks in this run does not certify the whole app as production-ready.
  • The verifier session does not survive a restart. This says nothing about the durability of the app under test.
  • App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (4)

These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.

workos · GET /user_management/organization_memberships · HTTP 200
We sent

GET /user_management/organization_memberships

No body shown for this read.

Server returned

HTTP 200

{
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "8f73b4ec-0965-4603-8f70-f76c44441b25",
      "organization_id": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_F92WG52HZWERVLUK2FYDALLPBX"
    },
    {
      "object": "organization_membership",
      "user_id": "804d6d43-45b8-4b5e-a271-a0bb261835fe",
      "organization_id": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_1SNDO1C6A2VU4XCBEFA5MZOSTW"
    }
  ],
  "list_metadata": {
    "before": "om_F92WG52HZWERVLUK2FYDALLPBX",
    "after": null
  }
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships

{
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

Response headers were not saved in this run.

Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

workos · GET /user_management/users/8f73b4ec-0965-4603-8f70-f76c44441b25 · HTTP 200
We sent

GET /user_management/users/8f73b4ec-0965-4603-8f70-f76c44441b25

No body shown for this read.

Server returned

HTTP 200

{
  "object": "user",
  "id": "8f73b4ec-0965-4603-8f70-f76c44441b25",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/0b680319",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_9d434c0ac304484fa309be3ba3",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/sandbox/192682caf9/user_management/users/8f73b4ec-0965-4603-8f70-f76c44441b25

{
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

Response headers were not saved in this run.

Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/8f73b4ec-0965-4603-8f70-f76c44441b25' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

workos · GET /user_management/users/804d6d43-45b8-4b5e-a271-a0bb261835fe · HTTP 200
We sent

GET /user_management/users/804d6d43-45b8-4b5e-a271-a0bb261835fe

No body shown for this read.

Server returned

HTTP 200

{
  "object": "user",
  "id": "804d6d43-45b8-4b5e-a271-a0bb261835fe",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/92548edd",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_1afbd568e7b44bb781ad4be7ad",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/sandbox/192682caf9/user_management/users/804d6d43-45b8-4b5e-a271-a0bb261835fe

{
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

Response headers were not saved in this run.

Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/804d6d43-45b8-4b5e-a271-a0bb261835fe' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

slack · POST /api/chat.postMessage · HTTP 200
We sent

POST /api/chat.postMessage

{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-baseline: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}
Server returned

HTTP 200

{
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_2f440e6259314960a70c7a42d2",
    "client_msg_id": "cli_82334ca4f9234f77a9d2af1f9a",
    "name": "item-a6904f",
    "old_name": "Sample Old",
    "parent_user_id": "par_46a2f168029c4fecb253123fe3",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17YTEWUFZ6.A3CLOX"
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage

{
  "host": "fetchsandbox.com",
  "content-length": "226",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

Response headers were not saved in this run.

Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-baseline: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

Run details

Run vr_c14cb6f1efe04a0fbf095e93e9089086

12 required checks for the declared application workflow. Results apply to the recorded observation windows.

8 passed · 4 failed · 0 not checked

Coverage beyond the declared checks

Passing these checks does not establish every production behavior.

  • Normal successful behavior · Linked checks passed · baseline
  • The right user gets the right access · Linked checks passed · no_self_review, outsider_cannot_decide
  • Valid data and boundary values · Linked checks passed · invalid_input_rejected
  • Correct amount, currency and quantity · Proposed as not applicable
  • Duplicate requests and events · Proposed as not applicable
  • Requests arriving together · Proposed as not applicable
  • Out-of-order and stale events · Proposed as not applicable
  • Delayed or missing events · Linked check failed · deadline_revokes_unreviewed_admin, reminder_only_for_open_items
  • Provider authentication and permissions · Linked checks passed · workos_unreadable_blocks
  • Rate limits, server failures and timeouts · Linked checks passed · slack_rate_limited
  • Completed action with a lost response · Proposed as not applicable
  • Partial completion and recovery · Linked checks passed · workos_unreadable_blocks
  • Restart without losing or duplicating work · Proposed as not applicable
  • Finding and repairing inconsistent state · Proposed as not applicable
  • Cancellation, refunds and access · Linked check failed · owner_revokes_access, owner_keeps_access, github_member_revoked
  • Data ownership and privacy · Proposed as not applicable
  • Test isolation and cleanup · Linked check failed · baseline, campaign_covers_every_system

Applicability comes from the proposed plan. Test results come from the recorded execution.

App version: acme-ops-user-access-review-1.0.0-4ac41d8 (declared)

Measured run: 2026-10-22T19:03:26.613288+00:00 – 2026-10-22T19:04:06.564547+00:00

Recorded execution

Recorded application requests and state reads for the declared HTTP contract.

The timeline below merges all requests from this run, sorted by recorded timestamp.

Recorded requests and deliveries: 110/129 successful · checkpoints: 12/12 recorded

Sanitized request and event timeline (126 events)
  1. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:26.889477+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  2. · POST app request /invocations · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:28.026202+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "516",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 623
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 20
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 1
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "admin",
        "holder": "56592aae77",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "member",
        "holder": "01ada99ca9",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17YTEWUFZ6.A3CLOX",
      "appliedAt": "2026-10-22T19:03:27.856Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-baseline"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:27.037Z",
  "audit": {
    "seq": 5,
    "head": "60012393ccd6b86f37b85e9c4e7c3b652ccd18e1f69daa1759693c83effaa876"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:27.037Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:27.663Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:27.667Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:27.857Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:27.860Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:27.863Z",
      "msg": "waiting until 2026-10-29T19:03:27.037Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:27.037Z",
  "updatedAt": "2026-10-22T19:03:27.863Z",
  "duplicate": false
}
  3. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 13c787cc05e0 · processing 0.62ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.62ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "8f73b4ec-0965-4603-8f70-f76c44441b25",
      "organization_id": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_F92WG52HZWERVLUK2FYDALLPBX"
    },
    {
      "object": "organization_membership",
      "user_id": "804d6d43-45b8-4b5e-a271-a0bb261835fe",
      "organization_id": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_1SNDO1C6A2VU4XCBEFA5MZOSTW"
    }
  ],
  "list_metadata": {
    "before": "om_F92WG52HZWERVLUK2FYDALLPBX",
    "after": null
  }
}
  4. · GET workos request · provider traffic · /user_management/users/8f73b4ec-0965-4603-8f70-f76c44441b25 · HTTP 200 · request 237a1abc3bf3 · processing 2.06ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/8f73b4ec-0965-4603-8f70-f76c44441b25' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.06ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "8f73b4ec-0965-4603-8f70-f76c44441b25",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/0b680319",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_9d434c0ac304484fa309be3ba3",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  5. · GET workos request · provider traffic · /user_management/users/804d6d43-45b8-4b5e-a271-a0bb261835fe · HTTP 200 · request 0a4c6d74ffee · processing 2.04ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/804d6d43-45b8-4b5e-a271-a0bb261835fe' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.04ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "804d6d43-45b8-4b5e-a271-a0bb261835fe",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/92548edd",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_1afbd568e7b44bb781ad4be7ad",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  6. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request d6cb4c63b5f8 · processing 11.92ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-baseline: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 11.92ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "226",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-baseline: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_2f440e6259314960a70c7a42d2",
    "client_msg_id": "cli_82334ca4f9234f77a9d2af1f9a",
    "name": "item-a6904f",
    "old_name": "Sample Old",
    "parent_user_id": "par_46a2f168029c4fecb253123fe3",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17YTEWUFZ6.A3CLOX"
}
  7. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:28.414566+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "baseline"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 623
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 20
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 1
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "admin",
            "holder": "56592aae77",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "member",
            "holder": "01ada99ca9",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17YTEWUFZ6.A3CLOX",
          "appliedAt": "2026-10-22T19:03:27.856Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-baseline"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:27.037Z",
      "audit": {
        "seq": 5,
        "head": "60012393ccd6b86f37b85e9c4e7c3b652ccd18e1f69daa1759693c83effaa876"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:27.037Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:27.663Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:27.667Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:27.857Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:27.860Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:27.863Z",
          "msg": "waiting until 2026-10-29T19:03:27.037Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:27.037Z",
      "updatedAt": "2026-10-22T19:03:27.863Z"
    }
  ]
}
  8. · POST app request /invocations · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:28.681180+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "516",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-baseline",
    "scope": {
      "workosOrganizations": [
        "1d11e640-36ba-4d0c-bc15-c7d15933392c"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "baseline"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 623
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 20
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 1
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "admin",
        "holder": "56592aae77",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
        "role": "member",
        "holder": "01ada99ca9",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:27.037Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17YTEWUFZ6.A3CLOX",
      "appliedAt": "2026-10-22T19:03:27.856Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-baseline"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:27.037Z",
  "audit": {
    "seq": 6,
    "head": "b5aa5bbec82ebe7667c890cef847936cd8a720f01e4a13dfe33e65a78e146ee2"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:27.037Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:27.663Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:27.667Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:27.857Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:27.860Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:27.863Z",
      "msg": "waiting until 2026-10-29T19:03:27.037Z"
    },
    {
      "at": "2026-10-22T19:03:28.542Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:27.037Z",
  "updatedAt": "2026-10-22T19:03:28.542Z",
  "duplicate": true
}
  9. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:29.086751+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "baseline-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "baseline"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 623
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 20
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 1
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_F92WG52HZWERVLUK2FYDALLPBX",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "admin",
            "holder": "56592aae77",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_1SNDO1C6A2VU4XCBEFA5MZOSTW",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "1d11e640-36ba-4d0c-bc15-c7d15933392c",
            "role": "member",
            "holder": "01ada99ca9",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:27.037Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17YTEWUFZ6.A3CLOX",
          "appliedAt": "2026-10-22T19:03:27.856Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-baseline"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:27.037Z",
      "audit": {
        "seq": 6,
        "head": "b5aa5bbec82ebe7667c890cef847936cd8a720f01e4a13dfe33e65a78e146ee2"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:27.037Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:27.663Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:27.667Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:27.857Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:27.860Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:27.863Z",
          "msg": "waiting until 2026-10-29T19:03:27.037Z"
        },
        {
          "at": "2026-10-22T19:03:28.542Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:27.037Z",
      "updatedAt": "2026-10-22T19:03:28.542Z"
    }
  ]
}
  10. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/campaign_covers_every_system/runs · campaign covers every system · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/campaign_covers_every_system/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:29.370259+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  11. · POST app request /invocations · campaign covers every system · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-campaign-covers-every-system",
    "scope": {
      "workosOrganizations": [
        "a5b9d701-1afb-4786-8d33-c8cc1186dea7"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "campaign_covers_every_system"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:30.383574+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "595",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-campaign-covers-every-system",
    "scope": {
      "workosOrganizations": [
        "a5b9d701-1afb-4786-8d33-c8cc1186dea7"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "campaign_covers_every_system"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "campaign_covers_every_system"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 539
    },
    {
      "name": "github-entitlements",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 170
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "blocked"
      },
      "attempts": 1,
      "ref": "175YM6ABOF.VZ96PB",
      "appliedAt": "2026-10-22T19:03:30.238Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "653d97fee34d80700de811bc72ff3ab857cdff587f237fa1d29592f1a5f2d45b"
  },
  "output": {
    "mode": "blocked",
    "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
    "entitlements": 0,
    "privileged": 0,
    "dormant": 0,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:29.511Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:30.051Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
    },
    {
      "at": "2026-10-22T19:03:30.056Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:30.238Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:30.241Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:03:29.511Z",
  "updatedAt": "2026-10-22T19:03:30.241Z",
  "duplicate": false
}
  12. · GET github request · provider traffic · /orgs/acme/members · HTTP 404 · request 3170a76a546d · processing 0.16ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/8cbde14737/orgs/acme/members' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.16ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /orgs/acme/members"
    }
  ]
}
  13. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request e00d0b0117ba · processing 0.57ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.57ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "066e4d64-93d8-4c87-9ed5-04d44a754382",
      "organization_id": "a5b9d701-1afb-4786-8d33-c8cc1186dea7",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_JMAAOS1CV859WQ68BW3PAWOUVX"
    },
    {
      "object": "organization_membership",
      "user_id": "28a31392-e8a2-45dc-8097-da283e0e58ec",
      "organization_id": "a5b9d701-1afb-4786-8d33-c8cc1186dea7",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_4FN3TZWI701PK0C23PWZ287UGR"
    }
  ],
  "list_metadata": {
    "before": "om_JMAAOS1CV859WQ68BW3PAWOUVX",
    "after": null
  }
}
  14. · GET workos request · provider traffic · /user_management/users/066e4d64-93d8-4c87-9ed5-04d44a754382 · HTTP 200 · request a991854e9c2b · processing 2.06ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/066e4d64-93d8-4c87-9ed5-04d44a754382' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.06ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "066e4d64-93d8-4c87-9ed5-04d44a754382",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/75b5aa42",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_597f37e0d28d4a73b90ba7828a",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  15. · GET workos request · provider traffic · /user_management/users/28a31392-e8a2-45dc-8097-da283e0e58ec · HTTP 200 · request 45785fdd73c6 · processing 2.28ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/28a31392-e8a2-45dc-8097-da283e0e58ec' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.28ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "28a31392-e8a2-45dc-8097-da283e0e58ec",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/4928e1bf",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_23612065e8574e1a869414a615",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  16. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 7333e664325d · processing 18.29ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: UAR-campaign-covers-every-system: blocked (entitlements could not be read from github-entitlements; the campaign needs every in-scope system); 0 privileged, 0 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 18.29ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "333",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: UAR-campaign-covers-every-system: blocked (entitlements could not be read from github-entitlements; the campaign needs every in-scope system); 0 privileged, 0 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_140f2dc0c6444e6ca9abfad740",
    "client_msg_id": "cli_7c346f788e014c28bf3b86950a",
    "name": "item-f8f51e",
    "old_name": "Sample Old",
    "parent_user_id": "par_d5081b792cb94310b3af6fc599",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "175YM6ABOF.VZ96PB"
}
  17. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/campaign_covers_every_system/runs · campaign covers every system · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/campaign_covers_every_system/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:30.752726+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "campaign_covers_every_system"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 539
        },
        {
          "name": "github-entitlements",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 170
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "blocked"
          },
          "attempts": 1,
          "ref": "175YM6ABOF.VZ96PB",
          "appliedAt": "2026-10-22T19:03:30.238Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "653d97fee34d80700de811bc72ff3ab857cdff587f237fa1d29592f1a5f2d45b"
      },
      "output": {
        "mode": "blocked",
        "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
        "entitlements": 0,
        "privileged": 0,
        "dormant": 0,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:29.511Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:30.051Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
        },
        {
          "at": "2026-10-22T19:03:30.056Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:30.238Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:30.241Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:03:29.511Z",
      "updatedAt": "2026-10-22T19:03:30.241Z"
    }
  ]
}
  18. · POST app request /invocations · campaign covers every system · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-campaign-covers-every-system",
    "scope": {
      "workosOrganizations": [
        "a5b9d701-1afb-4786-8d33-c8cc1186dea7"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "campaign_covers_every_system"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:31.065564+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "595",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-campaign-covers-every-system",
    "scope": {
      "workosOrganizations": [
        "a5b9d701-1afb-4786-8d33-c8cc1186dea7"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "campaign_covers_every_system"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "campaign_covers_every_system"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 539
    },
    {
      "name": "github-entitlements",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 170
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "blocked"
      },
      "attempts": 1,
      "ref": "175YM6ABOF.VZ96PB",
      "appliedAt": "2026-10-22T19:03:30.238Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "fc2e8d0f0aa8415c152d0c6ff275e537bb77841c093286edff908e2e5516063e"
  },
  "output": {
    "mode": "blocked",
    "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
    "entitlements": 0,
    "privileged": 0,
    "dormant": 0,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:29.511Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:30.051Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
    },
    {
      "at": "2026-10-22T19:03:30.056Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:30.238Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:30.241Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:03:30.890Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:29.511Z",
  "updatedAt": "2026-10-22T19:03:30.890Z",
  "duplicate": true
}
  19. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/campaign_covers_every_system/runs · campaign covers every system · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/campaign_covers_every_system/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:31.437939+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "campaign-covers-every-system-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "campaign_covers_every_system"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 539
        },
        {
          "name": "github-entitlements",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 170
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "blocked"
          },
          "attempts": 1,
          "ref": "175YM6ABOF.VZ96PB",
          "appliedAt": "2026-10-22T19:03:30.238Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "fc2e8d0f0aa8415c152d0c6ff275e537bb77841c093286edff908e2e5516063e"
      },
      "output": {
        "mode": "blocked",
        "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
        "entitlements": 0,
        "privileged": 0,
        "dormant": 0,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:29.511Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:30.051Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
        },
        {
          "at": "2026-10-22T19:03:30.056Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:30.238Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:30.241Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:03:30.890Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:29.511Z",
      "updatedAt": "2026-10-22T19:03:30.890Z"
    }
  ]
}
  20. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_revokes_access/runs · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_revokes_access/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:31.716054+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  21. · POST app request /invocations · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-revokes-access",
    "scope": {
      "workosOrganizations": [
        "12f5c6fe-2402-477b-94ef-bde8a81b52a2"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:32.611132+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "552",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-revokes-access",
    "scope": {
      "workosOrganizations": [
        "12f5c6fe-2402-477b-94ef-bde8a81b52a2"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 450
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "member",
        "holder": "e7d61a7247",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_A8M3BQAB69NCM0QOKOX41N86YJ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "admin",
        "holder": "16a4c787df",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17F1R7PG6K.FN7B6J",
      "appliedAt": "2026-10-22T19:03:32.471Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-revokes-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:31.851Z",
  "audit": {
    "seq": 5,
    "head": "4f78c41f0c547702432dabce233bc0f9113ee5cc0e38410a8db01023e2f22c8d"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:31.851Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:32.302Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:32.306Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:32.472Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:32.474Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:32.476Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:31.851Z",
  "updatedAt": "2026-10-22T19:03:32.476Z",
  "duplicate": false
}
  22. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 9f963da8ee7b · processing 0.62ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.62ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "449605f5-9c4d-4513-afd8-ebf5278872f6",
      "organization_id": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_DT93V99QD2BJQ8UUC86KFBNH82"
    },
    {
      "object": "organization_membership",
      "user_id": "e303bd0f-cd33-4622-aa1a-86960e56a876",
      "organization_id": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_A8M3BQAB69NCM0QOKOX41N86YJ"
    }
  ],
  "list_metadata": {
    "before": "om_DT93V99QD2BJQ8UUC86KFBNH82",
    "after": null
  }
}
  23. · GET workos request · provider traffic · /user_management/users/449605f5-9c4d-4513-afd8-ebf5278872f6 · HTTP 200 · request d895056cf1a7 · processing 2ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/449605f5-9c4d-4513-afd8-ebf5278872f6' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "449605f5-9c4d-4513-afd8-ebf5278872f6",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/b18f4349",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_d6061340c1f0471693f4146ee7",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  24. · GET workos request · provider traffic · /user_management/users/e303bd0f-cd33-4622-aa1a-86960e56a876 · HTTP 200 · request b24f64c442b0 · processing 2.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/e303bd0f-cd33-4622-aa1a-86960e56a876' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "e303bd0f-cd33-4622-aa1a-86960e56a876",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/e805cf52",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_6a1d80f45fb843f9b6a2241484",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  25. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request b977b7f9daad · processing 14.89ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-owner-revokes-access: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 14.89ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "238",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-owner-revokes-access: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_1ae8d01390b64cb3b793fb334f",
    "client_msg_id": "cli_e3d3fb4cc5cd4b7ea03dc76728",
    "name": "item-472e73",
    "old_name": "Sample Old",
    "parent_user_id": "par_32df5a3a5dfe480ba71b54661c",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17F1R7PG6K.FN7B6J"
}
  26. · POST app request /invocations · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
  "value": "approve",
  "userId": "U_IT_OWNER"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:33.188549+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "183",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
  "value": "approve",
  "userId": "U_IT_OWNER"
}

    Recorded response · HTTP 200

    {
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 450
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "member",
        "holder": "e7d61a7247",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 1,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "signal": {
        "value": "approve",
        "by": "U_IT_OWNER",
        "at": "2026-10-22T19:03:32.745Z"
      },
      "ref": "om_DT93V99QD2BJQ8UUC86KFBNH82",
      "detail": {
        "decidedBy": "U_IT_OWNER",
        "defaulted": false
      },
      "appliedAt": "2026-10-22T19:03:33.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_A8M3BQAB69NCM0QOKOX41N86YJ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "admin",
        "holder": "16a4c787df",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17F1R7PG6K.FN7B6J",
      "appliedAt": "2026-10-22T19:03:32.471Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-revokes-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 2,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:31.851Z",
  "audit": {
    "seq": 8,
    "head": "c6c1cccf9fe4dddbb5a3ad2bef67b3db5f6ab65b7b85d17b534aafb9e3d310e3"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:31.851Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:32.302Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:32.306Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:32.472Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:32.474Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:32.476Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    },
    {
      "at": "2026-10-22T19:03:32.745Z",
      "msg": "signal approve for revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82 by U_IT_OWNER"
    },
    {
      "at": "2026-10-22T19:03:33.047Z",
      "msg": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82: applied"
    },
    {
      "at": "2026-10-22T19:03:33.050Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:31.851Z",
  "updatedAt": "2026-10-22T19:03:33.050Z",
  "result": "recorded"
}
  27. · GET workos request · provider traffic · /user_management/organization_memberships/om_DT93V99QD2BJQ8UUC86KFBNH82 · HTTP 200 · request bcd5be1d1337 · processing 1.13ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships/om_DT93V99QD2BJQ8UUC86KFBNH82' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 1.13ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "organization_membership",
  "user_id": "449605f5-9c4d-4513-afd8-ebf5278872f6",
  "organization_id": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
  "status": "active",
  "role": {
    "slug": "member"
  },
  "roles": [
    {
      "slug": "member"
    }
  ],
  "id": "om_DT93V99QD2BJQ8UUC86KFBNH82"
}
  28. · DELETE workos request · provider traffic · /user_management/organization_memberships/om_DT93V99QD2BJQ8UUC86KFBNH82 · HTTP 204 · request 8623ce6ae7df · processing 0.9ms
  29. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_revokes_access/runs · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_revokes_access/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:33.561425+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "owner_revokes_access"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 450
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "system": "workos",
            "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
            "role": "member",
            "holder": "e7d61a7247",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 1,
          "signalDeadline": "2026-11-05T19:03:31.851Z",
          "signal": {
            "value": "approve",
            "by": "U_IT_OWNER",
            "at": "2026-10-22T19:03:32.745Z"
          },
          "ref": "om_DT93V99QD2BJQ8UUC86KFBNH82",
          "detail": {
            "decidedBy": "U_IT_OWNER",
            "defaulted": false
          },
          "appliedAt": "2026-10-22T19:03:33.047Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_A8M3BQAB69NCM0QOKOX41N86YJ",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
            "role": "admin",
            "holder": "16a4c787df",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:31.851Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:31.851Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:31.851Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17F1R7PG6K.FN7B6J",
          "appliedAt": "2026-10-22T19:03:32.471Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-owner-revokes-access"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 2,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 1,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:31.851Z",
      "audit": {
        "seq": 8,
        "head": "c6c1cccf9fe4dddbb5a3ad2bef67b3db5f6ab65b7b85d17b534aafb9e3d310e3"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:31.851Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:32.302Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:32.306Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:32.472Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:32.474Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:32.476Z",
          "msg": "waiting until 2026-10-29T19:03:31.851Z"
        },
        {
          "at": "2026-10-22T19:03:32.745Z",
          "msg": "signal approve for revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82 by U_IT_OWNER"
        },
        {
          "at": "2026-10-22T19:03:33.047Z",
          "msg": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82: applied"
        },
        {
          "at": "2026-10-22T19:03:33.050Z",
          "msg": "waiting until 2026-10-29T19:03:31.851Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:31.851Z",
      "updatedAt": "2026-10-22T19:03:33.050Z"
    }
  ]
}
  30. · POST app request /invocations · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-revokes-access",
    "scope": {
      "workosOrganizations": [
        "12f5c6fe-2402-477b-94ef-bde8a81b52a2"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:33.837175+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "552",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-revokes-access",
    "scope": {
      "workosOrganizations": [
        "12f5c6fe-2402-477b-94ef-bde8a81b52a2"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 450
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "member",
        "holder": "e7d61a7247",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 1,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "signal": {
        "value": "approve",
        "by": "U_IT_OWNER",
        "at": "2026-10-22T19:03:32.745Z"
      },
      "ref": "om_DT93V99QD2BJQ8UUC86KFBNH82",
      "detail": {
        "decidedBy": "U_IT_OWNER",
        "defaulted": false
      },
      "appliedAt": "2026-10-22T19:03:33.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_A8M3BQAB69NCM0QOKOX41N86YJ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "admin",
        "holder": "16a4c787df",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17F1R7PG6K.FN7B6J",
      "appliedAt": "2026-10-22T19:03:32.471Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-revokes-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 2,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:31.851Z",
  "audit": {
    "seq": 9,
    "head": "0d5cbf5de701482a6dc6a701c0cf77e13f5cb7e0d99675c8b7272ad9e6efcac8"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:31.851Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:32.302Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:32.306Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:32.472Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:32.474Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:32.476Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    },
    {
      "at": "2026-10-22T19:03:32.745Z",
      "msg": "signal approve for revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82 by U_IT_OWNER"
    },
    {
      "at": "2026-10-22T19:03:33.047Z",
      "msg": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82: applied"
    },
    {
      "at": "2026-10-22T19:03:33.050Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    },
    {
      "at": "2026-10-22T19:03:33.696Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:31.851Z",
  "updatedAt": "2026-10-22T19:03:33.697Z",
  "duplicate": true
}
  31. · POST app request /invocations · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
  "value": "approve",
  "userId": "U_IT_OWNER"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:34.119128+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "183",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
  "value": "approve",
  "userId": "U_IT_OWNER"
}

    Recorded response · HTTP 200

    {
  "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_revokes_access"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 450
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "member",
        "holder": "e7d61a7247",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 1,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "signal": {
        "value": "approve",
        "by": "U_IT_OWNER",
        "at": "2026-10-22T19:03:32.745Z"
      },
      "ref": "om_DT93V99QD2BJQ8UUC86KFBNH82",
      "detail": {
        "decidedBy": "U_IT_OWNER",
        "defaulted": false
      },
      "appliedAt": "2026-10-22T19:03:33.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_A8M3BQAB69NCM0QOKOX41N86YJ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
        "role": "admin",
        "holder": "16a4c787df",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:31.851Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17F1R7PG6K.FN7B6J",
      "appliedAt": "2026-10-22T19:03:32.471Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-revokes-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 2,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:31.851Z",
  "audit": {
    "seq": 9,
    "head": "0d5cbf5de701482a6dc6a701c0cf77e13f5cb7e0d99675c8b7272ad9e6efcac8"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:31.851Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:32.302Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:32.306Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:32.472Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:32.474Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:32.476Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    },
    {
      "at": "2026-10-22T19:03:32.745Z",
      "msg": "signal approve for revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82 by U_IT_OWNER"
    },
    {
      "at": "2026-10-22T19:03:33.047Z",
      "msg": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82: applied"
    },
    {
      "at": "2026-10-22T19:03:33.050Z",
      "msg": "waiting until 2026-10-29T19:03:31.851Z"
    },
    {
      "at": "2026-10-22T19:03:33.696Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:31.851Z",
  "updatedAt": "2026-10-22T19:03:33.978Z",
  "result": "already_signalled"
}
  32. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_revokes_access/runs · owner revokes access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_revokes_access/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:34.586431+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "owner-revokes-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "owner_revokes_access"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 450
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "system": "workos",
            "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
            "role": "member",
            "holder": "e7d61a7247",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 1,
          "signalDeadline": "2026-11-05T19:03:31.851Z",
          "signal": {
            "value": "approve",
            "by": "U_IT_OWNER",
            "at": "2026-10-22T19:03:32.745Z"
          },
          "ref": "om_DT93V99QD2BJQ8UUC86KFBNH82",
          "detail": {
            "decidedBy": "U_IT_OWNER",
            "defaulted": false
          },
          "appliedAt": "2026-10-22T19:03:33.047Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_A8M3BQAB69NCM0QOKOX41N86YJ",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "12f5c6fe-2402-477b-94ef-bde8a81b52a2",
            "role": "admin",
            "holder": "16a4c787df",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:31.851Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:31.851Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:31.851Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17F1R7PG6K.FN7B6J",
          "appliedAt": "2026-10-22T19:03:32.471Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-owner-revokes-access"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 2,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 1,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:31.851Z",
      "audit": {
        "seq": 9,
        "head": "0d5cbf5de701482a6dc6a701c0cf77e13f5cb7e0d99675c8b7272ad9e6efcac8"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:31.851Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:32.302Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:32.306Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:32.472Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:32.474Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:32.476Z",
          "msg": "waiting until 2026-10-29T19:03:31.851Z"
        },
        {
          "at": "2026-10-22T19:03:32.745Z",
          "msg": "signal approve for revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82 by U_IT_OWNER"
        },
        {
          "at": "2026-10-22T19:03:33.047Z",
          "msg": "revoke:workos:om_DT93V99QD2BJQ8UUC86KFBNH82: applied"
        },
        {
          "at": "2026-10-22T19:03:33.050Z",
          "msg": "waiting until 2026-10-29T19:03:31.851Z"
        },
        {
          "at": "2026-10-22T19:03:33.696Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:31.851Z",
      "updatedAt": "2026-10-22T19:03:33.978Z"
    }
  ]
}
  33. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_keeps_access/runs · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_keeps_access/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:34.842258+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  34. · POST app request /invocations · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-keeps-access",
    "scope": {
      "workosOrganizations": [
        "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:35.769454+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "546",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-keeps-access",
    "scope": {
      "workosOrganizations": [
        "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 482
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 0
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_W10F3CYK2E6VOZP209M17A0RRM",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "member",
        "holder": "92ebd6f548",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "admin",
        "holder": "a4143e969a",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17VN42R7Q6.C7OZYV",
      "appliedAt": "2026-10-22T19:03:35.628Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-keeps-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:34.973Z",
  "audit": {
    "seq": 5,
    "head": "97d40d00c23bbaa57e4d62aabc7ac4ff207776c482b73c363a8ad0dd0da0761c"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:34.973Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:35.456Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:35.460Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:35.629Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:35.632Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:35.634Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:34.973Z",
  "updatedAt": "2026-10-22T19:03:35.634Z",
  "duplicate": false
}
  35. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 03b4ed3e6ec4 · processing 0.56ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.56ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "79f4586f-5a5e-4d6b-8434-7e26c016e7de",
      "organization_id": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_W10F3CYK2E6VOZP209M17A0RRM"
    },
    {
      "object": "organization_membership",
      "user_id": "cc8d1116-6d81-4d6b-bf74-f4e8d677278f",
      "organization_id": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_7MHNXS2KUJT9OO2ILSJC1DBAFD"
    }
  ],
  "list_metadata": {
    "before": "om_W10F3CYK2E6VOZP209M17A0RRM",
    "after": null
  }
}
  36. · GET workos request · provider traffic · /user_management/users/79f4586f-5a5e-4d6b-8434-7e26c016e7de · HTTP 200 · request aa0b3684957c · processing 2.41ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/79f4586f-5a5e-4d6b-8434-7e26c016e7de' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.41ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "79f4586f-5a5e-4d6b-8434-7e26c016e7de",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/536cfc44",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_815f0a6daa704b618adeb8dd0e",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  37. · GET workos request · provider traffic · /user_management/users/cc8d1116-6d81-4d6b-bf74-f4e8d677278f · HTTP 200 · request add1befd2a6b · processing 2.23ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/cc8d1116-6d81-4d6b-bf74-f4e8d677278f' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.23ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "cc8d1116-6d81-4d6b-bf74-f4e8d677278f",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/7287f710",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_ef0459199c91440ebe6233148b",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  38. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 4783936ecd1b · processing 13.34ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-owner-keeps-access: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.34ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-owner-keeps-access: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_842dc126a3a94232abd81a9858",
    "client_msg_id": "cli_806492dcd2bc4063a069296267",
    "name": "item-fcad26",
    "old_name": "Sample Old",
    "parent_user_id": "par_147b1283b0f34aa2a0f5988034",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17VN42R7Q6.C7OZYV"
}
  39. · POST app request /invocations · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
  "value": "reject",
  "userId": "U_IT_OWNER"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:36.052498+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "180",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
  "value": "reject",
  "userId": "U_IT_OWNER"
}

    Recorded response · HTTP 200

    {
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 482
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 0
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_W10F3CYK2E6VOZP209M17A0RRM",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "member",
        "holder": "92ebd6f548",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "admin",
        "holder": "a4143e969a",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "signal": {
        "value": "reject",
        "by": "U_IT_OWNER",
        "at": "2026-10-22T19:03:35.887Z"
      },
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17VN42R7Q6.C7OZYV",
      "appliedAt": "2026-10-22T19:03:35.628Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-keeps-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:34.973Z",
  "audit": {
    "seq": 7,
    "head": "55aed507ce48b0d0a4752517e1264ba3ff24d8b9dce88e9313b2bb6275dddc29"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:34.973Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:35.456Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:35.460Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:35.629Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:35.632Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:35.634Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    },
    {
      "at": "2026-10-22T19:03:35.887Z",
      "msg": "signal reject for revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD by U_IT_OWNER"
    },
    {
      "at": "2026-10-22T19:03:35.891Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:34.973Z",
  "updatedAt": "2026-10-22T19:03:35.891Z",
  "result": "recorded"
}
  40. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_keeps_access/runs · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_keeps_access/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:36.427114+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "owner_keeps_access"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 482
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 0
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_W10F3CYK2E6VOZP209M17A0RRM",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
            "role": "member",
            "holder": "92ebd6f548",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:34.973Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "rejected",
          "summary": {
            "system": "workos",
            "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
            "role": "admin",
            "holder": "a4143e969a",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:34.973Z",
          "signal": {
            "value": "reject",
            "by": "U_IT_OWNER",
            "at": "2026-10-22T19:03:35.887Z"
          },
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:34.973Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:34.973Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17VN42R7Q6.C7OZYV",
          "appliedAt": "2026-10-22T19:03:35.628Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-owner-keeps-access"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 1,
        "scheduled": 3,
        "awaitingSignal": 1,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:34.973Z",
      "audit": {
        "seq": 7,
        "head": "55aed507ce48b0d0a4752517e1264ba3ff24d8b9dce88e9313b2bb6275dddc29"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:34.973Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:35.456Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:35.460Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:35.629Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:35.632Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:35.634Z",
          "msg": "waiting until 2026-10-29T19:03:34.973Z"
        },
        {
          "at": "2026-10-22T19:03:35.887Z",
          "msg": "signal reject for revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD by U_IT_OWNER"
        },
        {
          "at": "2026-10-22T19:03:35.891Z",
          "msg": "waiting until 2026-10-29T19:03:34.973Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:34.973Z",
      "updatedAt": "2026-10-22T19:03:35.891Z"
    }
  ]
}
  41. · POST app request /invocations · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-keeps-access",
    "scope": {
      "workosOrganizations": [
        "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:36.696001+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "546",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-owner-keeps-access",
    "scope": {
      "workosOrganizations": [
        "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 482
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 0
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_W10F3CYK2E6VOZP209M17A0RRM",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "member",
        "holder": "92ebd6f548",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "admin",
        "holder": "a4143e969a",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "signal": {
        "value": "reject",
        "by": "U_IT_OWNER",
        "at": "2026-10-22T19:03:35.887Z"
      },
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17VN42R7Q6.C7OZYV",
      "appliedAt": "2026-10-22T19:03:35.628Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-keeps-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:34.973Z",
  "audit": {
    "seq": 8,
    "head": "4396666f043ffef4a3cae07ea1ddb3dd543904210e091e8e0023d0599f7b20f2"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:34.973Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:35.456Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:35.460Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:35.629Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:35.632Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:35.634Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    },
    {
      "at": "2026-10-22T19:03:35.887Z",
      "msg": "signal reject for revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD by U_IT_OWNER"
    },
    {
      "at": "2026-10-22T19:03:35.891Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    },
    {
      "at": "2026-10-22T19:03:36.560Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:34.973Z",
  "updatedAt": "2026-10-22T19:03:36.560Z",
  "duplicate": true
}
  42. · POST app request /invocations · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
  "value": "reject",
  "userId": "U_IT_OWNER"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:36.976125+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "180",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
  "value": "reject",
  "userId": "U_IT_OWNER"
}

    Recorded response · HTTP 200

    {
  "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "owner_keeps_access"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 482
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 0
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_W10F3CYK2E6VOZP209M17A0RRM",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "member",
        "holder": "92ebd6f548",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
        "role": "admin",
        "holder": "a4143e969a",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:34.973Z",
      "signal": {
        "value": "reject",
        "by": "U_IT_OWNER",
        "at": "2026-10-22T19:03:35.887Z"
      },
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:34.973Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17VN42R7Q6.C7OZYV",
      "appliedAt": "2026-10-22T19:03:35.628Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-owner-keeps-access"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:34.973Z",
  "audit": {
    "seq": 8,
    "head": "4396666f043ffef4a3cae07ea1ddb3dd543904210e091e8e0023d0599f7b20f2"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:34.973Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:35.456Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:35.460Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:35.629Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:35.632Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:35.634Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    },
    {
      "at": "2026-10-22T19:03:35.887Z",
      "msg": "signal reject for revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD by U_IT_OWNER"
    },
    {
      "at": "2026-10-22T19:03:35.891Z",
      "msg": "waiting until 2026-10-29T19:03:34.973Z"
    },
    {
      "at": "2026-10-22T19:03:36.560Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:34.973Z",
  "updatedAt": "2026-10-22T19:03:36.833Z",
  "result": "already_signalled"
}
  43. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_keeps_access/runs · owner keeps access · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/owner_keeps_access/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:37.335439+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "owner-keeps-access-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "owner_keeps_access"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 482
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 0
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_W10F3CYK2E6VOZP209M17A0RRM",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
            "role": "member",
            "holder": "92ebd6f548",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:34.973Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "rejected",
          "summary": {
            "system": "workos",
            "resource": "4a7e6872-f9f8-4e8d-8dc0-7e4f1fdd4d98",
            "role": "admin",
            "holder": "a4143e969a",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:34.973Z",
          "signal": {
            "value": "reject",
            "by": "U_IT_OWNER",
            "at": "2026-10-22T19:03:35.887Z"
          },
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:34.973Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:34.973Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17VN42R7Q6.C7OZYV",
          "appliedAt": "2026-10-22T19:03:35.628Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-owner-keeps-access"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 1,
        "scheduled": 3,
        "awaitingSignal": 1,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:34.973Z",
      "audit": {
        "seq": 8,
        "head": "4396666f043ffef4a3cae07ea1ddb3dd543904210e091e8e0023d0599f7b20f2"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:34.973Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:35.456Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:35.460Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:35.629Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:35.632Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:35.634Z",
          "msg": "waiting until 2026-10-29T19:03:34.973Z"
        },
        {
          "at": "2026-10-22T19:03:35.887Z",
          "msg": "signal reject for revoke:workos:om_7MHNXS2KUJT9OO2ILSJC1DBAFD by U_IT_OWNER"
        },
        {
          "at": "2026-10-22T19:03:35.891Z",
          "msg": "waiting until 2026-10-29T19:03:34.973Z"
        },
        {
          "at": "2026-10-22T19:03:36.560Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:34.973Z",
      "updatedAt": "2026-10-22T19:03:36.833Z"
    }
  ]
}
  44. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/no_self_review/runs · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/no_self_review/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:37.647906+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  45. · POST app request /invocations · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-no-self-review",
    "scope": {
      "workosOrganizations": [
        "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:38.536172+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "546",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-no-self-review",
    "scope": {
      "workosOrganizations": [
        "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 455
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "admin",
        "holder": "aee31df300",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "member",
        "holder": "ce911fae30",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17G0LKLPCE.E1129H",
      "appliedAt": "2026-10-22T19:03:38.403Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-no-self-review"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:37.782Z",
  "audit": {
    "seq": 5,
    "head": "bedac2b46bbb8b978d14c7752aed79e623979a3238718b0efb6540946e71c927"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 1
  },
  "events": [
    {
      "at": "2026-10-22T19:03:37.782Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:38.239Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:38.242Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:38.403Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:38.406Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:38.408Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:37.782Z",
  "updatedAt": "2026-10-22T19:03:38.408Z",
  "duplicate": false
}
  46. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 41dcb2a25854 · processing 0.59ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.59ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "8c619e51-031b-4c88-aadf-4a6c78ad05fb",
      "organization_id": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_OTSCP77SY0ROLHUFNYZV1WT2TA"
    },
    {
      "object": "organization_membership",
      "user_id": "59cb66bc-4a59-40f9-8492-49cc8a9d784f",
      "organization_id": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_6KFEJK338AF4Y4T51KR09LZYDL"
    }
  ],
  "list_metadata": {
    "before": "om_OTSCP77SY0ROLHUFNYZV1WT2TA",
    "after": null
  }
}
  47. · GET workos request · provider traffic · /user_management/users/8c619e51-031b-4c88-aadf-4a6c78ad05fb · HTTP 200 · request 6d6a26cd1a30 · processing 2.18ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/8c619e51-031b-4c88-aadf-4a6c78ad05fb' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.18ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "8c619e51-031b-4c88-aadf-4a6c78ad05fb",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/1e6ee4fe",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_ae7aec579b834d9690f93b66c3",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  48. · GET workos request · provider traffic · /user_management/users/59cb66bc-4a59-40f9-8492-49cc8a9d784f · HTTP 200 · request 8c1f441db5b8 · processing 2.1ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/59cb66bc-4a59-40f9-8492-49cc8a9d784f' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.1ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "59cb66bc-4a59-40f9-8492-49cc8a9d784f",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/31575f4e",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_43a34cc3c7e240259a7ec94ac8",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  49. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 5c4788361789 · processing 13.83ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-no-self-review: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 1 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.83ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "232",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-no-self-review: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 1 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_ab10ee150cc348c7a495779021",
    "client_msg_id": "cli_e9ac4ec6e6094802b1c0e890dc",
    "name": "item-de1740",
    "old_name": "Sample Old",
    "parent_user_id": "par_810ad234866649b4a09c4d669f",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17G0LKLPCE.E1129H"
}
  50. · POST app request /invocations · no self review · HTTP 403
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_IT_OWNER"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:38.804137+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "176",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_IT_OWNER"
}

    Recorded response · HTTP 403

    {
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 455
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "admin",
        "holder": "aee31df300",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "member",
        "holder": "ce911fae30",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17G0LKLPCE.E1129H",
      "appliedAt": "2026-10-22T19:03:38.403Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-no-self-review"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:37.782Z",
  "audit": {
    "seq": 6,
    "head": "f1c83947b0cc82cd19adaea312e97870095920060c8a9bedb6de4fa2c6eff7a7"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 1
  },
  "events": [
    {
      "at": "2026-10-22T19:03:37.782Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:38.239Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:38.242Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:38.403Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:38.406Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:38.408Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:38.671Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    }
  ],
  "createdAt": "2026-10-22T19:03:37.782Z",
  "updatedAt": "2026-10-22T19:03:38.671Z",
  "result": "forbidden"
}
  51. · POST app request /invocations · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_CISO"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:39.075628+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "172",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_CISO"
}

    Recorded response · HTTP 200

    {
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 455
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "admin",
        "holder": "aee31df300",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "signal": {
        "value": "reject",
        "by": "U_CISO",
        "at": "2026-10-22T19:03:38.938Z"
      },
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "member",
        "holder": "ce911fae30",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17G0LKLPCE.E1129H",
      "appliedAt": "2026-10-22T19:03:38.403Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-no-self-review"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:37.782Z",
  "audit": {
    "seq": 8,
    "head": "956c998c63a0414b29a54d114f5ed722d9b77d0ed2bbb0a6277c43f0960d22b6"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 1
  },
  "events": [
    {
      "at": "2026-10-22T19:03:37.782Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:38.239Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:38.242Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:38.403Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:38.406Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:38.408Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:38.671Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    },
    {
      "at": "2026-10-22T19:03:38.938Z",
      "msg": "signal reject for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_CISO"
    },
    {
      "at": "2026-10-22T19:03:38.941Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:37.782Z",
  "updatedAt": "2026-10-22T19:03:38.941Z",
  "result": "recorded"
}
  52. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/no_self_review/runs · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/no_self_review/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:39.440098+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "no_self_review"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 455
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "rejected",
          "summary": {
            "system": "workos",
            "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
            "role": "admin",
            "holder": "aee31df300",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:37.782Z",
          "signal": {
            "value": "reject",
            "by": "U_CISO",
            "at": "2026-10-22T19:03:38.938Z"
          },
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
            "role": "member",
            "holder": "ce911fae30",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:37.782Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:37.782Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:37.782Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17G0LKLPCE.E1129H",
          "appliedAt": "2026-10-22T19:03:38.403Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-no-self-review"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 1,
        "scheduled": 3,
        "awaitingSignal": 1,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:37.782Z",
      "audit": {
        "seq": 8,
        "head": "956c998c63a0414b29a54d114f5ed722d9b77d0ed2bbb0a6277c43f0960d22b6"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 1
      },
      "events": [
        {
          "at": "2026-10-22T19:03:37.782Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:38.239Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:38.242Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:38.403Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:38.406Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:38.408Z",
          "msg": "waiting until 2026-10-29T19:03:37.782Z"
        },
        {
          "at": "2026-10-22T19:03:38.671Z",
          "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
        },
        {
          "at": "2026-10-22T19:03:38.938Z",
          "msg": "signal reject for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_CISO"
        },
        {
          "at": "2026-10-22T19:03:38.941Z",
          "msg": "waiting until 2026-10-29T19:03:37.782Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:37.782Z",
      "updatedAt": "2026-10-22T19:03:38.941Z"
    }
  ]
}
  53. · POST app request /invocations · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-no-self-review",
    "scope": {
      "workosOrganizations": [
        "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:39.705029+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "546",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-no-self-review",
    "scope": {
      "workosOrganizations": [
        "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 455
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "admin",
        "holder": "aee31df300",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "signal": {
        "value": "reject",
        "by": "U_CISO",
        "at": "2026-10-22T19:03:38.938Z"
      },
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "member",
        "holder": "ce911fae30",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17G0LKLPCE.E1129H",
      "appliedAt": "2026-10-22T19:03:38.403Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-no-self-review"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:37.782Z",
  "audit": {
    "seq": 9,
    "head": "04dae74504260d0f12a8b2ef9b5114e1ecc6ac4fd13c4931581b1bd7f870600d"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 1
  },
  "events": [
    {
      "at": "2026-10-22T19:03:37.782Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:38.239Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:38.242Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:38.403Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:38.406Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:38.408Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:38.671Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    },
    {
      "at": "2026-10-22T19:03:38.938Z",
      "msg": "signal reject for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_CISO"
    },
    {
      "at": "2026-10-22T19:03:38.941Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:39.563Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:37.782Z",
  "updatedAt": "2026-10-22T19:03:39.563Z",
  "duplicate": true
}
  54. · POST app request /invocations · no self review · HTTP 403
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_IT_OWNER"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:39.976308+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "176",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_IT_OWNER"
}

    Recorded response · HTTP 403

    {
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 455
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "admin",
        "holder": "aee31df300",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "signal": {
        "value": "reject",
        "by": "U_CISO",
        "at": "2026-10-22T19:03:38.938Z"
      },
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "member",
        "holder": "ce911fae30",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17G0LKLPCE.E1129H",
      "appliedAt": "2026-10-22T19:03:38.403Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-no-self-review"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:37.782Z",
  "audit": {
    "seq": 10,
    "head": "b05647f6c4acfd367dec7cc197af49a623fe9938e3a115424dc15ee31aa15cac"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 1
  },
  "events": [
    {
      "at": "2026-10-22T19:03:37.782Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:38.239Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:38.242Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:38.403Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:38.406Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:38.408Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:38.671Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    },
    {
      "at": "2026-10-22T19:03:38.938Z",
      "msg": "signal reject for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_CISO"
    },
    {
      "at": "2026-10-22T19:03:38.941Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:39.563Z",
      "msg": "duplicate start ignored"
    },
    {
      "at": "2026-10-22T19:03:39.833Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    }
  ],
  "createdAt": "2026-10-22T19:03:37.782Z",
  "updatedAt": "2026-10-22T19:03:39.833Z",
  "result": "forbidden"
}
  55. · POST app request /invocations · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_CISO"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:40.242466+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "172",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
  "value": "reject",
  "userId": "U_CISO"
}

    Recorded response · HTTP 200

    {
  "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "no_self_review"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 455
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "rejected",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "admin",
        "holder": "aee31df300",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "signal": {
        "value": "reject",
        "by": "U_CISO",
        "at": "2026-10-22T19:03:38.938Z"
      },
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
        "role": "member",
        "holder": "ce911fae30",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:37.782Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17G0LKLPCE.E1129H",
      "appliedAt": "2026-10-22T19:03:38.403Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-no-self-review"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 1,
    "scheduled": 3,
    "awaitingSignal": 1,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:37.782Z",
  "audit": {
    "seq": 10,
    "head": "b05647f6c4acfd367dec7cc197af49a623fe9938e3a115424dc15ee31aa15cac"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 1
  },
  "events": [
    {
      "at": "2026-10-22T19:03:37.782Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:38.239Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:38.242Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:38.403Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:38.406Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:38.408Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:38.671Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    },
    {
      "at": "2026-10-22T19:03:38.938Z",
      "msg": "signal reject for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_CISO"
    },
    {
      "at": "2026-10-22T19:03:38.941Z",
      "msg": "waiting until 2026-10-29T19:03:37.782Z"
    },
    {
      "at": "2026-10-22T19:03:39.563Z",
      "msg": "duplicate start ignored"
    },
    {
      "at": "2026-10-22T19:03:39.833Z",
      "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
    }
  ],
  "createdAt": "2026-10-22T19:03:37.782Z",
  "updatedAt": "2026-10-22T19:03:40.099Z",
  "result": "already_signalled"
}
  56. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/no_self_review/runs · no self review · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/no_self_review/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:40.628325+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "no-self-review-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "no_self_review"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 455
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "rejected",
          "summary": {
            "system": "workos",
            "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
            "role": "admin",
            "holder": "aee31df300",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:37.782Z",
          "signal": {
            "value": "reject",
            "by": "U_CISO",
            "at": "2026-10-22T19:03:38.938Z"
          },
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_6KFEJK338AF4Y4T51KR09LZYDL",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "0b9e89e9-4bef-4a8a-9981-8cdd89b007c3",
            "role": "member",
            "holder": "ce911fae30",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:37.782Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:37.782Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:37.782Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17G0LKLPCE.E1129H",
          "appliedAt": "2026-10-22T19:03:38.403Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-no-self-review"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 1,
        "scheduled": 3,
        "awaitingSignal": 1,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:37.782Z",
      "audit": {
        "seq": 10,
        "head": "b05647f6c4acfd367dec7cc197af49a623fe9938e3a115424dc15ee31aa15cac"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 1
      },
      "events": [
        {
          "at": "2026-10-22T19:03:37.782Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:38.239Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:38.242Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:38.403Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:38.406Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:38.408Z",
          "msg": "waiting until 2026-10-29T19:03:37.782Z"
        },
        {
          "at": "2026-10-22T19:03:38.671Z",
          "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
        },
        {
          "at": "2026-10-22T19:03:38.938Z",
          "msg": "signal reject for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_CISO"
        },
        {
          "at": "2026-10-22T19:03:38.941Z",
          "msg": "waiting until 2026-10-29T19:03:37.782Z"
        },
        {
          "at": "2026-10-22T19:03:39.563Z",
          "msg": "duplicate start ignored"
        },
        {
          "at": "2026-10-22T19:03:39.833Z",
          "msg": "signal for revoke:workos:om_OTSCP77SY0ROLHUFNYZV1WT2TA by U_IT_OWNER refused"
        }
      ],
      "createdAt": "2026-10-22T19:03:37.782Z",
      "updatedAt": "2026-10-22T19:03:40.099Z"
    }
  ]
}
  57. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/outsider_cannot_decide/runs · outsider cannot decide · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/outsider_cannot_decide/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:40.928955+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  58. · POST app request /invocations · outsider cannot decide · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-outsider-cannot-decide",
    "scope": {
      "workosOrganizations": [
        "bb7c642a-f9ba-4488-af9a-f7a29b82f45e"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:41.856031+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "558",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-outsider-cannot-decide",
    "scope": {
      "workosOrganizations": [
        "bb7c642a-f9ba-4488-af9a-f7a29b82f45e"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 484
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_UBIX7R616SL00O7FSE0T43ZK07",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "admin",
        "holder": "923ae444a2",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "member",
        "holder": "680ab15038",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "174UF9WA6S.F4QBG6",
      "appliedAt": "2026-10-22T19:03:41.721Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-outsider-cannot-decide"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:41.047Z",
  "audit": {
    "seq": 5,
    "head": "b6765cf91e1972b93772679f31fdeff7d28527394aad172ad0cd0ec66057849b"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:41.047Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:41.532Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:41.535Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:41.722Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:41.724Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:41.727Z",
      "msg": "waiting until 2026-10-29T19:03:41.047Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:41.047Z",
  "updatedAt": "2026-10-22T19:03:41.727Z",
  "duplicate": false
}
  59. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 81f96d2d6dfe · processing 0.57ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.57ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "4ccede07-49f7-40ed-85aa-8f14f6468f19",
      "organization_id": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_UBIX7R616SL00O7FSE0T43ZK07"
    },
    {
      "object": "organization_membership",
      "user_id": "af628f41-f3ae-45a4-82c6-8063340f6a20",
      "organization_id": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_5LDHPZZRAYZX1GB1W5UMTFIX8J"
    }
  ],
  "list_metadata": {
    "before": "om_UBIX7R616SL00O7FSE0T43ZK07",
    "after": null
  }
}
  60. · GET workos request · provider traffic · /user_management/users/4ccede07-49f7-40ed-85aa-8f14f6468f19 · HTTP 200 · request 78eff3551c32 · processing 2.26ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/4ccede07-49f7-40ed-85aa-8f14f6468f19' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.26ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "4ccede07-49f7-40ed-85aa-8f14f6468f19",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/ae990d06",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_352e447d17ec4465ae77ee1e27",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  61. · GET workos request · provider traffic · /user_management/users/af628f41-f3ae-45a4-82c6-8063340f6a20 · HTTP 200 · request c16ea80e0290 · processing 2.12ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/af628f41-f3ae-45a4-82c6-8063340f6a20' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.12ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "af628f41-f3ae-45a4-82c6-8063340f6a20",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/46087956",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_f619df0ff9c04e3a8e58f52c8d",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  62. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 370f8365508c · processing 14.07ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-outsider-cannot-decide: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 14.07ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "240",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-outsider-cannot-decide: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_68bd28f54bd547e58816f85480",
    "client_msg_id": "cli_a20d32ae78094221a518e97d38",
    "name": "item-290fb9",
    "old_name": "Sample Old",
    "parent_user_id": "par_2cd6f39a81234388935e80cbaa",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "174UF9WA6S.F4QBG6"
}
  63. · POST app request /invocations · outsider cannot decide · HTTP 403
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
  "value": "approve",
  "userId": "U_INTERN"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:42.127018+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "183",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
  "value": "approve",
  "userId": "U_INTERN"
}

    Recorded response · HTTP 403

    {
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 484
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_UBIX7R616SL00O7FSE0T43ZK07",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "admin",
        "holder": "923ae444a2",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "member",
        "holder": "680ab15038",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "174UF9WA6S.F4QBG6",
      "appliedAt": "2026-10-22T19:03:41.721Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-outsider-cannot-decide"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:41.047Z",
  "audit": {
    "seq": 6,
    "head": "4a2108cebb6e8717cd03092d897797dff57765d89891ca8e42b53ab19f8d1785"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:41.047Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:41.532Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:41.535Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:41.722Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:41.724Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:41.727Z",
      "msg": "waiting until 2026-10-29T19:03:41.047Z"
    },
    {
      "at": "2026-10-22T19:03:41.987Z",
      "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
    }
  ],
  "createdAt": "2026-10-22T19:03:41.047Z",
  "updatedAt": "2026-10-22T19:03:41.987Z",
  "result": "forbidden"
}
  64. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/outsider_cannot_decide/runs · outsider cannot decide · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/outsider_cannot_decide/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:42.500516+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "outsider_cannot_decide"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 484
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_UBIX7R616SL00O7FSE0T43ZK07",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
            "role": "admin",
            "holder": "923ae444a2",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
            "role": "member",
            "holder": "680ab15038",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "174UF9WA6S.F4QBG6",
          "appliedAt": "2026-10-22T19:03:41.721Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-outsider-cannot-decide"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:41.047Z",
      "audit": {
        "seq": 6,
        "head": "4a2108cebb6e8717cd03092d897797dff57765d89891ca8e42b53ab19f8d1785"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:41.047Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:41.532Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:41.535Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:41.722Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:41.724Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:41.727Z",
          "msg": "waiting until 2026-10-29T19:03:41.047Z"
        },
        {
          "at": "2026-10-22T19:03:41.987Z",
          "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
        }
      ],
      "createdAt": "2026-10-22T19:03:41.047Z",
      "updatedAt": "2026-10-22T19:03:41.987Z"
    }
  ]
}
  65. · POST app request /invocations · outsider cannot decide · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-outsider-cannot-decide",
    "scope": {
      "workosOrganizations": [
        "bb7c642a-f9ba-4488-af9a-f7a29b82f45e"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:42.777711+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "558",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-outsider-cannot-decide",
    "scope": {
      "workosOrganizations": [
        "bb7c642a-f9ba-4488-af9a-f7a29b82f45e"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 484
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_UBIX7R616SL00O7FSE0T43ZK07",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "admin",
        "holder": "923ae444a2",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "member",
        "holder": "680ab15038",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "174UF9WA6S.F4QBG6",
      "appliedAt": "2026-10-22T19:03:41.721Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-outsider-cannot-decide"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:41.047Z",
  "audit": {
    "seq": 7,
    "head": "0f926d262b8bdeeff442edd16b6d87a41db6001556b9de216c5d2d0e8b3ecc86"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:41.047Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:41.532Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:41.535Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:41.722Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:41.724Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:41.727Z",
      "msg": "waiting until 2026-10-29T19:03:41.047Z"
    },
    {
      "at": "2026-10-22T19:03:41.987Z",
      "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
    },
    {
      "at": "2026-10-22T19:03:42.634Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:41.047Z",
  "updatedAt": "2026-10-22T19:03:42.634Z",
  "duplicate": true
}
  66. · POST app request /invocations · outsider cannot decide · HTTP 403
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
  "value": "approve",
  "userId": "U_INTERN"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:43.048808+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "183",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "actionId": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
  "value": "approve",
  "userId": "U_INTERN"
}

    Recorded response · HTTP 403

    {
  "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "outsider_cannot_decide"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 484
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_UBIX7R616SL00O7FSE0T43ZK07",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "admin",
        "holder": "923ae444a2",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
        "role": "member",
        "holder": "680ab15038",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:41.047Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "174UF9WA6S.F4QBG6",
      "appliedAt": "2026-10-22T19:03:41.721Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-outsider-cannot-decide"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:41.047Z",
  "audit": {
    "seq": 8,
    "head": "06df5a655a32d87a99a0f515158eee19eb6e351a18588f0561681256a67e8d62"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:41.047Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:41.532Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:41.535Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:41.722Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:41.724Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:41.727Z",
      "msg": "waiting until 2026-10-29T19:03:41.047Z"
    },
    {
      "at": "2026-10-22T19:03:41.987Z",
      "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
    },
    {
      "at": "2026-10-22T19:03:42.634Z",
      "msg": "duplicate start ignored"
    },
    {
      "at": "2026-10-22T19:03:42.911Z",
      "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
    }
  ],
  "createdAt": "2026-10-22T19:03:41.047Z",
  "updatedAt": "2026-10-22T19:03:42.911Z",
  "result": "forbidden"
}
  67. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/outsider_cannot_decide/runs · outsider cannot decide · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/outsider_cannot_decide/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:43.457012+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "outsider-cannot-decide-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "outsider_cannot_decide"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 484
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_UBIX7R616SL00O7FSE0T43ZK07",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
            "role": "admin",
            "holder": "923ae444a2",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "bb7c642a-f9ba-4488-af9a-f7a29b82f45e",
            "role": "member",
            "holder": "680ab15038",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:41.047Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "174UF9WA6S.F4QBG6",
          "appliedAt": "2026-10-22T19:03:41.721Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-outsider-cannot-decide"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:41.047Z",
      "audit": {
        "seq": 8,
        "head": "06df5a655a32d87a99a0f515158eee19eb6e351a18588f0561681256a67e8d62"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:41.047Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:41.532Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:41.535Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:41.722Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:41.724Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:41.727Z",
          "msg": "waiting until 2026-10-29T19:03:41.047Z"
        },
        {
          "at": "2026-10-22T19:03:41.987Z",
          "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
        },
        {
          "at": "2026-10-22T19:03:42.634Z",
          "msg": "duplicate start ignored"
        },
        {
          "at": "2026-10-22T19:03:42.911Z",
          "msg": "signal for revoke:workos:om_5LDHPZZRAYZX1GB1W5UMTFIX8J by U_INTERN refused"
        }
      ],
      "createdAt": "2026-10-22T19:03:41.047Z",
      "updatedAt": "2026-10-22T19:03:42.911Z"
    }
  ]
}
  68. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/deadline_revokes_unreviewed_admin/runs · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/deadline_revokes_unreviewed_admin/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:43.743066+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  69. · POST app request /invocations · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-deadline-revokes-unreviewed-admin",
    "scope": {
      "workosOrganizations": [
        "89d50c9a-71d3-4348-9962-37e8827944b5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "deadline_revokes_unreviewed_admin"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:44.709587+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "591",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-deadline-revokes-unreviewed-admin",
    "scope": {
      "workosOrganizations": [
        "89d50c9a-71d3-4348-9962-37e8827944b5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "deadline_revokes_unreviewed_admin"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "deadline_revokes_unreviewed_admin"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 470
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_KO959J96HIRB1CK7NC7EZXE8P2",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
        "role": "member",
        "holder": "59d9947ff9",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_IU5N2W7OBD0S2KEAVLOUPB6JAZ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
        "role": "admin",
        "holder": "e55948871e",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17FU76IIT3.1CFS7S",
      "appliedAt": "2026-10-22T19:03:44.531Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-deadline-revokes-unreviewed-admin"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:43.878Z",
  "audit": {
    "seq": 5,
    "head": "2a367bcf770237cb3510f73b60ad8ce4c32703ab323488e950a56d3e425dd955"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:43.878Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:44.350Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:44.354Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:44.531Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:44.534Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:44.537Z",
      "msg": "waiting until 2026-10-29T19:03:43.878Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:43.878Z",
  "updatedAt": "2026-10-22T19:03:44.537Z",
  "duplicate": false
}
  70. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 4e1fcb67fcf0 · processing 0.72ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.72ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "b18b0545-4a05-4edb-92b2-328d0676542c",
      "organization_id": "89d50c9a-71d3-4348-9962-37e8827944b5",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_KO959J96HIRB1CK7NC7EZXE8P2"
    },
    {
      "object": "organization_membership",
      "user_id": "63238715-6f50-4bc6-8d70-29113063e8f7",
      "organization_id": "89d50c9a-71d3-4348-9962-37e8827944b5",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_IU5N2W7OBD0S2KEAVLOUPB6JAZ"
    }
  ],
  "list_metadata": {
    "before": "om_KO959J96HIRB1CK7NC7EZXE8P2",
    "after": null
  }
}
  71. · GET workos request · provider traffic · /user_management/users/b18b0545-4a05-4edb-92b2-328d0676542c · HTTP 200 · request eaa58f46f9d9 · processing 2.11ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/b18b0545-4a05-4edb-92b2-328d0676542c' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.11ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "b18b0545-4a05-4edb-92b2-328d0676542c",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/748fdca3",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_149cd0b60e534fe8ae150b1db7",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  72. · GET workos request · provider traffic · /user_management/users/63238715-6f50-4bc6-8d70-29113063e8f7 · HTTP 200 · request 46fcdc8e60e3 · processing 2.04ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/63238715-6f50-4bc6-8d70-29113063e8f7' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.04ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "63238715-6f50-4bc6-8d70-29113063e8f7",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/3fccc917",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_ead2496f1ed94481a582a280c2",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  73. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request ee5c923c747f · processing 13.95ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-deadline-revokes-unreviewed-admin: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.95ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "251",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-deadline-revokes-unreviewed-admin: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_95408ee09e844ab396cb82a549",
    "client_msg_id": "cli_97f1d5f9b5c040b1a4dce52eb8",
    "name": "item-79e38e",
    "old_name": "Sample Old",
    "parent_user_id": "par_5290cb3d86ca48d7b84176b7dd",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17FU76IIT3.1CFS7S"
}
  74. · POST app request /invocations · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "tick"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:44.968692+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "17",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "12"
}

    Request body

    {
  "action": "tick"
}

    Recorded response · HTTP 200

    {
  "woken": []
}
  75. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/deadline_revokes_unreviewed_admin/runs · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/deadline_revokes_unreviewed_admin/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:45.360928+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "deadline_revokes_unreviewed_admin"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 470
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_KO959J96HIRB1CK7NC7EZXE8P2",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
            "role": "member",
            "holder": "59d9947ff9",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_IU5N2W7OBD0S2KEAVLOUPB6JAZ",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
            "role": "admin",
            "holder": "e55948871e",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17FU76IIT3.1CFS7S",
          "appliedAt": "2026-10-22T19:03:44.531Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-deadline-revokes-unreviewed-admin"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:43.878Z",
      "audit": {
        "seq": 5,
        "head": "2a367bcf770237cb3510f73b60ad8ce4c32703ab323488e950a56d3e425dd955"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:43.878Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:44.350Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:44.354Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:44.531Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:44.534Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:44.537Z",
          "msg": "waiting until 2026-10-29T19:03:43.878Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:43.878Z",
      "updatedAt": "2026-10-22T19:03:44.537Z"
    }
  ]
}
  76. · POST app request /invocations · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-deadline-revokes-unreviewed-admin",
    "scope": {
      "workosOrganizations": [
        "89d50c9a-71d3-4348-9962-37e8827944b5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "deadline_revokes_unreviewed_admin"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:45.615383+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "591",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-deadline-revokes-unreviewed-admin",
    "scope": {
      "workosOrganizations": [
        "89d50c9a-71d3-4348-9962-37e8827944b5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "deadline_revokes_unreviewed_admin"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "deadline_revokes_unreviewed_admin"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 470
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_KO959J96HIRB1CK7NC7EZXE8P2",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
        "role": "member",
        "holder": "59d9947ff9",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_IU5N2W7OBD0S2KEAVLOUPB6JAZ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
        "role": "admin",
        "holder": "e55948871e",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:43.878Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17FU76IIT3.1CFS7S",
      "appliedAt": "2026-10-22T19:03:44.531Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-deadline-revokes-unreviewed-admin"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:43.878Z",
  "audit": {
    "seq": 6,
    "head": "a1e5071f95d313b294765a817fcd745ab6c580b4af67f1cfde2a643f9a30e6df"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:43.878Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:44.350Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:44.354Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:44.531Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:44.534Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:44.537Z",
      "msg": "waiting until 2026-10-29T19:03:43.878Z"
    },
    {
      "at": "2026-10-22T19:03:45.480Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:43.878Z",
  "updatedAt": "2026-10-22T19:03:45.480Z",
  "duplicate": true
}
  77. · POST app request /invocations · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "tick"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:45.884346+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "17",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "12"
}

    Request body

    {
  "action": "tick"
}

    Recorded response · HTTP 200

    {
  "woken": []
}
  78. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/deadline_revokes_unreviewed_admin/runs · deadline revokes unreviewed admin · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/deadline_revokes_unreviewed_admin/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:46.257208+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "deadline-revokes-unreviewed-admin-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "deadline_revokes_unreviewed_admin"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 470
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_KO959J96HIRB1CK7NC7EZXE8P2",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
            "role": "member",
            "holder": "59d9947ff9",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_IU5N2W7OBD0S2KEAVLOUPB6JAZ",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "89d50c9a-71d3-4348-9962-37e8827944b5",
            "role": "admin",
            "holder": "e55948871e",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:43.878Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17FU76IIT3.1CFS7S",
          "appliedAt": "2026-10-22T19:03:44.531Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-deadline-revokes-unreviewed-admin"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:43.878Z",
      "audit": {
        "seq": 6,
        "head": "a1e5071f95d313b294765a817fcd745ab6c580b4af67f1cfde2a643f9a30e6df"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:43.878Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:44.350Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:44.354Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:44.531Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:44.534Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:44.537Z",
          "msg": "waiting until 2026-10-29T19:03:43.878Z"
        },
        {
          "at": "2026-10-22T19:03:45.480Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:43.878Z",
      "updatedAt": "2026-10-22T19:03:45.480Z"
    }
  ]
}
  79. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/reminder_only_for_open_items/runs · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/reminder_only_for_open_items/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:46.536891+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  80. · POST app request /invocations · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-reminder-only-for-open-items",
    "scope": {
      "workosOrganizations": [
        "8efe9bd9-1611-41fa-b05b-53d0e8f845a5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "reminder_only_for_open_items"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:47.479265+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "576",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-reminder-only-for-open-items",
    "scope": {
      "workosOrganizations": [
        "8efe9bd9-1611-41fa-b05b-53d0e8f845a5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "reminder_only_for_open_items"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "reminder_only_for_open_items"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 481
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_UGF2O07BFMWLACN9CRSLOFGHNJ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
        "role": "admin",
        "holder": "bf5fbf03f8",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_GO87CGXU073CQH32THB2OLDS6V",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
        "role": "member",
        "holder": "13d295f4fd",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17BX7WGHEW.5X3M79",
      "appliedAt": "2026-10-22T19:03:47.339Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-reminder-only-for-open-items"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:46.688Z",
  "audit": {
    "seq": 5,
    "head": "762aa12d05494ca9ab94ea990453a51b43114dedfe578e7f048e4627da627c12"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:46.688Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:47.170Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:47.174Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:47.339Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:47.342Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:47.345Z",
      "msg": "waiting until 2026-10-29T19:03:46.688Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:46.688Z",
  "updatedAt": "2026-10-22T19:03:47.345Z",
  "duplicate": false
}
  81. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 21495d9a19a9 · processing 0.72ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.72ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "db66e6d1-c688-408a-bd2d-3d4db5ffffde",
      "organization_id": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_UGF2O07BFMWLACN9CRSLOFGHNJ"
    },
    {
      "object": "organization_membership",
      "user_id": "9016d8a1-e89a-4c27-ac52-e27a45e80b11",
      "organization_id": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_GO87CGXU073CQH32THB2OLDS6V"
    }
  ],
  "list_metadata": {
    "before": "om_UGF2O07BFMWLACN9CRSLOFGHNJ",
    "after": null
  }
}
  82. · GET workos request · provider traffic · /user_management/users/db66e6d1-c688-408a-bd2d-3d4db5ffffde · HTTP 200 · request d9dfbd35f6df · processing 2.06ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/db66e6d1-c688-408a-bd2d-3d4db5ffffde' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.06ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "db66e6d1-c688-408a-bd2d-3d4db5ffffde",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/aac4b4e9",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_3555c771bce04621b463aa1539",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  83. · GET workos request · provider traffic · /user_management/users/9016d8a1-e89a-4c27-ac52-e27a45e80b11 · HTTP 200 · request 601bab98c704 · processing 2.05ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/9016d8a1-e89a-4c27-ac52-e27a45e80b11' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.05ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "9016d8a1-e89a-4c27-ac52-e27a45e80b11",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/e6ff0086",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_10512624e42c409fa2d9474386",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  84. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request c7c9666b346c · processing 14.31ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-reminder-only-for-open-items: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 14.31ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "246",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-reminder-only-for-open-items: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_6d15c5fb18024beba1ca752976",
    "client_msg_id": "cli_c4bb7983a4f6453ca634ec1b2e",
    "name": "item-9749f4",
    "old_name": "Sample Old",
    "parent_user_id": "par_a8045cb7920d4f0ea9b56d4bb5",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17BX7WGHEW.5X3M79"
}
  85. · POST app request /invocations · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "tick"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:47.749280+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "17",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "12"
}

    Request body

    {
  "action": "tick"
}

    Recorded response · HTTP 200

    {
  "woken": []
}
  86. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/reminder_only_for_open_items/runs · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/reminder_only_for_open_items/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:48.119866+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "reminder_only_for_open_items"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 481
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_UGF2O07BFMWLACN9CRSLOFGHNJ",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
            "role": "admin",
            "holder": "bf5fbf03f8",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_GO87CGXU073CQH32THB2OLDS6V",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
            "role": "member",
            "holder": "13d295f4fd",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17BX7WGHEW.5X3M79",
          "appliedAt": "2026-10-22T19:03:47.339Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-reminder-only-for-open-items"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:46.688Z",
      "audit": {
        "seq": 5,
        "head": "762aa12d05494ca9ab94ea990453a51b43114dedfe578e7f048e4627da627c12"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:46.688Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:47.170Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:47.174Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:47.339Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:47.342Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:47.345Z",
          "msg": "waiting until 2026-10-29T19:03:46.688Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:46.688Z",
      "updatedAt": "2026-10-22T19:03:47.345Z"
    }
  ]
}
  87. · POST app request /invocations · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-reminder-only-for-open-items",
    "scope": {
      "workosOrganizations": [
        "8efe9bd9-1611-41fa-b05b-53d0e8f845a5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "reminder_only_for_open_items"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:48.392831+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "576",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-reminder-only-for-open-items",
    "scope": {
      "workosOrganizations": [
        "8efe9bd9-1611-41fa-b05b-53d0e8f845a5"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "reminder_only_for_open_items"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "ok",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "reminder_only_for_open_items"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 481
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_UGF2O07BFMWLACN9CRSLOFGHNJ",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
        "role": "admin",
        "holder": "bf5fbf03f8",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_GO87CGXU073CQH32THB2OLDS6V",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
        "role": "member",
        "holder": "13d295f4fd",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:46.688Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "ref": "17BX7WGHEW.5X3M79",
      "appliedAt": "2026-10-22T19:03:47.339Z",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-reminder-only-for-open-items"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:46.688Z",
  "audit": {
    "seq": 6,
    "head": "c221189b063b753d8156f271810ff5581e7fbe39360e4ecdb3361ccdd8ffd7eb"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:46.688Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:47.170Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:47.174Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:47.339Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:47.342Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:03:47.345Z",
      "msg": "waiting until 2026-10-29T19:03:46.688Z"
    },
    {
      "at": "2026-10-22T19:03:48.250Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:46.688Z",
  "updatedAt": "2026-10-22T19:03:48.250Z",
  "duplicate": true
}
  88. · POST app request /invocations · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "tick"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:48.640882+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "17",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "12"
}

    Request body

    {
  "action": "tick"
}

    Recorded response · HTTP 200

    {
  "woken": []
}
  89. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/reminder_only_for_open_items/runs · reminder only for open items · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/reminder_only_for_open_items/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:48.997898+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "reminder-only-for-open-items-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "ok",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "reminder_only_for_open_items"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 481
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_UGF2O07BFMWLACN9CRSLOFGHNJ",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
            "role": "admin",
            "holder": "bf5fbf03f8",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_GO87CGXU073CQH32THB2OLDS6V",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "8efe9bd9-1611-41fa-b05b-53d0e8f845a5",
            "role": "member",
            "holder": "13d295f4fd",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:46.688Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "ref": "17BX7WGHEW.5X3M79",
          "appliedAt": "2026-10-22T19:03:47.339Z",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-reminder-only-for-open-items"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:46.688Z",
      "audit": {
        "seq": 6,
        "head": "c221189b063b753d8156f271810ff5581e7fbe39360e4ecdb3361ccdd8ffd7eb"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:46.688Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:47.170Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:47.174Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:47.339Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:47.342Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:03:47.345Z",
          "msg": "waiting until 2026-10-29T19:03:46.688Z"
        },
        {
          "at": "2026-10-22T19:03:48.250Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:46.688Z",
      "updatedAt": "2026-10-22T19:03:48.250Z"
    }
  ]
}
  90. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/github_member_revoked/runs · github member revoked · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/github_member_revoked/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:49.312872+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  91. · POST app request /invocations · github member revoked · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-github-member-revoked",
    "scope": {
      "workosOrganizations": [
        "5cbeeb92-5165-4ba3-8552-58a06cfbe302"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "github_member_revoked"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:50.636411+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "574",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-github-member-revoked",
    "scope": {
      "workosOrganizations": [
        "5cbeeb92-5165-4ba3-8552-58a06cfbe302"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "github_member_revoked"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "github_member_revoked"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 862
    },
    {
      "name": "github-entitlements",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 157
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
      "durationMs": 1
    }
  ],
  "actions": [
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "blocked"
      },
      "attempts": 1,
      "ref": "17JTQ16B8R.QWJ23N",
      "appliedAt": "2026-10-22T19:03:50.499Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "4d7647685845e5a919543919fee37fa2897c8cb3bb9b1e8b58926e7722f38e58"
  },
  "output": {
    "mode": "blocked",
    "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
    "entitlements": 0,
    "privileged": 0,
    "dormant": 0,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:49.455Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:50.320Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
    },
    {
      "at": "2026-10-22T19:03:50.324Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:50.499Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:50.502Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:03:49.455Z",
  "updatedAt": "2026-10-22T19:03:50.502Z",
  "duplicate": false
}
  92. · GET github request · provider traffic · /orgs/acme/members · HTTP 404 · request 854f5aafa0c4 · processing 0.17ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/8cbde14737/orgs/acme/members' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.17ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /orgs/acme/members"
    }
  ]
}
  93. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request 2683167d7620 · processing 0.67ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.67ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "d8f076bc-caa1-4c71-9519-714f25da6dfe",
      "organization_id": "5cbeeb92-5165-4ba3-8552-58a06cfbe302",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_9STP45D38GOZAT6CG6BRL6JS4F"
    },
    {
      "object": "organization_membership",
      "user_id": "8b197ed3-03d6-4845-b355-a1bb22d4bd29",
      "organization_id": "5cbeeb92-5165-4ba3-8552-58a06cfbe302",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_8VOXKU48Z6HCFVU8PS9C6B4Z5S"
    }
  ],
  "list_metadata": {
    "before": "om_9STP45D38GOZAT6CG6BRL6JS4F",
    "after": null
  }
}
  94. · GET workos request · provider traffic · /user_management/users/d8f076bc-caa1-4c71-9519-714f25da6dfe · HTTP 200 · request 9699c773bf54 · processing 2.1ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/d8f076bc-caa1-4c71-9519-714f25da6dfe' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.1ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "d8f076bc-caa1-4c71-9519-714f25da6dfe",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/2af3601a",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_54c7a052bfb340638e46082259",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  95. · GET workos request · provider traffic · /user_management/users/8b197ed3-03d6-4845-b355-a1bb22d4bd29 · HTTP 200 · request 6ebc81ca34bb · processing 2.12ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/8b197ed3-03d6-4845-b355-a1bb22d4bd29' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.12ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "8b197ed3-03d6-4845-b355-a1bb22d4bd29",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/438bb060",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_254a0fdffe964d25a8546759d2",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  96. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request bac041889bda · processing 13.7ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: UAR-github-member-revoked: blocked (entitlements could not be read from github-entitlements; the campaign needs every in-scope system); 0 privileged, 0 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.7ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "326",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: UAR-github-member-revoked: blocked (entitlements could not be read from github-entitlements; the campaign needs every in-scope system); 0 privileged, 0 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_a44e6d5ccb834a809404e70c8d",
    "client_msg_id": "cli_e34b6342af114d4d91d0e60363",
    "name": "item-b9898d",
    "old_name": "Sample Old",
    "parent_user_id": "par_e61b33ed5536477c98c3592456",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17JTQ16B8R.QWJ23N"
}
  97. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/github_member_revoked/runs · github member revoked · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/github_member_revoked/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:51.041705+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "github_member_revoked"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 862
        },
        {
          "name": "github-entitlements",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 157
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
          "durationMs": 1
        }
      ],
      "actions": [
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "blocked"
          },
          "attempts": 1,
          "ref": "17JTQ16B8R.QWJ23N",
          "appliedAt": "2026-10-22T19:03:50.499Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "4d7647685845e5a919543919fee37fa2897c8cb3bb9b1e8b58926e7722f38e58"
      },
      "output": {
        "mode": "blocked",
        "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
        "entitlements": 0,
        "privileged": 0,
        "dormant": 0,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:49.455Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:50.320Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
        },
        {
          "at": "2026-10-22T19:03:50.324Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:50.499Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:50.502Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:03:49.455Z",
      "updatedAt": "2026-10-22T19:03:50.502Z"
    }
  ]
}
  98. · POST app request /invocations · github member revoked · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-github-member-revoked",
    "scope": {
      "workosOrganizations": [
        "5cbeeb92-5165-4ba3-8552-58a06cfbe302"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "github_member_revoked"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:51.305355+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "574",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-github-member-revoked",
    "scope": {
      "workosOrganizations": [
        "5cbeeb92-5165-4ba3-8552-58a06cfbe302"
      ],
      "githubOrg": "acme"
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "github_member_revoked"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "github_member_revoked"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 862
    },
    {
      "name": "github-entitlements",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 157
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
      "durationMs": 1
    }
  ],
  "actions": [
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "blocked"
      },
      "attempts": 1,
      "ref": "17JTQ16B8R.QWJ23N",
      "appliedAt": "2026-10-22T19:03:50.499Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "bc0b8ad6a1c2a0e07b48b362f7645d2f5832ca30fb96b9965903e17a05bc4ce2"
  },
  "output": {
    "mode": "blocked",
    "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
    "entitlements": 0,
    "privileged": 0,
    "dormant": 0,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:49.455Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:50.320Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
    },
    {
      "at": "2026-10-22T19:03:50.324Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:50.499Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:50.502Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:03:51.170Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:49.455Z",
  "updatedAt": "2026-10-22T19:03:51.170Z",
  "duplicate": true
}
  99. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/github_member_revoked/runs · github member revoked · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/github_member_revoked/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:51.660018+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "github-member-revoked-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "github_member_revoked"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 862
        },
        {
          "name": "github-entitlements",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /orgs/acme/members → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 157
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "blocked: entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
          "durationMs": 1
        }
      ],
      "actions": [
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "blocked"
          },
          "attempts": 1,
          "ref": "17JTQ16B8R.QWJ23N",
          "appliedAt": "2026-10-22T19:03:50.499Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "bc0b8ad6a1c2a0e07b48b362f7645d2f5832ca30fb96b9965903e17a05bc4ce2"
      },
      "output": {
        "mode": "blocked",
        "reason": "entitlements could not be read from github-entitlements; the campaign needs every in-scope system",
        "entitlements": 0,
        "privileged": 0,
        "dormant": 0,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:49.455Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:50.320Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=failed"
        },
        {
          "at": "2026-10-22T19:03:50.324Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:50.499Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:50.502Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:03:51.170Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:49.455Z",
      "updatedAt": "2026-10-22T19:03:51.170Z"
    }
  ]
}
  100. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/workos_unreadable_blocks/runs · workos unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/workos_unreadable_blocks/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:51.904361+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  101. · POST app request /invocations · workos unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-workos-unreadable-blocks",
    "scope": {
      "workosOrganizations": [
        "bf3aed1e-b19a-462c-9f7b-6030243ab753"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "workos_unreadable_blocks"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:52.567757+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "564",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-workos-unreadable-blocks",
    "scope": {
      "workosOrganizations": [
        "bf3aed1e-b19a-462c-9f7b-6030243ab753"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "workos_unreadable_blocks"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "workos_unreadable_blocks"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "failed",
      "error": "workos 401 unauthorized: GET /user_management/organization_memberships → 401 unauthorized",
      "errorCode": "workos:unauthorized",
      "durationMs": 157
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "blocked: entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "blocked"
      },
      "attempts": 1,
      "ref": "172O4XDJCR.JY2RQ2",
      "appliedAt": "2026-10-22T19:03:52.435Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "08794168973dfa3f2b2f804f82327c2e660423cdccccc7f890727ef098587f68"
  },
  "output": {
    "mode": "blocked",
    "reason": "entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
    "entitlements": 0,
    "privileged": 0,
    "dormant": 0,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:52.051Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:52.210Z",
      "msg": "agents: workos-entitlements=failed, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:52.228Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:52.435Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:52.440Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:03:52.051Z",
  "updatedAt": "2026-10-22T19:03:52.440Z",
  "duplicate": false
}
  102. · GET workos request · workos unreadable blocks · /user_management/organization_memberships · HTTP 401 · processing 0.14ms
    View sanitized request and response

    Curl-style request view

    curl --request GET '<WORKOS_TWIN_BASE_URL>/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL was not recorded. Provider processing: 0.14ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 401

    {
  "errors": [
    {
      "status": "401",
      "code": "unauthorized",
      "detail": "Invalid API key or expired credentials"
    }
  ]
}
  103. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 401 · request 86ab3704e258 · processing 0.14ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.14ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 401

    {
  "errors": [
    {
      "status": "401",
      "code": "unauthorized",
      "detail": "Invalid API key or expired credentials"
    }
  ]
}
  104. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 6c7fa299d4e3 · processing 14.44ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: UAR-workos-unreadable-blocks: blocked (entitlements could not be read from workos-entitlements; the campaign needs every in-scope system); 0 privileged, 0 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 14.44ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "329",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: UAR-workos-unreadable-blocks: blocked (entitlements could not be read from workos-entitlements; the campaign needs every in-scope system); 0 privileged, 0 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_269b894f556a445999727c8029",
    "client_msg_id": "cli_5e950f6d61204b63962c521389",
    "name": "item-3e2c50",
    "old_name": "Sample Old",
    "parent_user_id": "par_575de25c2650408b82deacd520",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "172O4XDJCR.JY2RQ2"
}
  105. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/workos_unreadable_blocks/runs · workos unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/workos_unreadable_blocks/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:52.928125+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "workos_unreadable_blocks"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "failed",
          "error": "workos 401 unauthorized: GET /user_management/organization_memberships → 401 unauthorized",
          "errorCode": "workos:unauthorized",
          "durationMs": 157
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "blocked: entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "blocked"
          },
          "attempts": 1,
          "ref": "172O4XDJCR.JY2RQ2",
          "appliedAt": "2026-10-22T19:03:52.435Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "08794168973dfa3f2b2f804f82327c2e660423cdccccc7f890727ef098587f68"
      },
      "output": {
        "mode": "blocked",
        "reason": "entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
        "entitlements": 0,
        "privileged": 0,
        "dormant": 0,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:52.051Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:52.210Z",
          "msg": "agents: workos-entitlements=failed, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:52.228Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:52.435Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:52.440Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:03:52.051Z",
      "updatedAt": "2026-10-22T19:03:52.440Z"
    }
  ]
}
  106. · POST app request /invocations · workos unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-workos-unreadable-blocks",
    "scope": {
      "workosOrganizations": [
        "bf3aed1e-b19a-462c-9f7b-6030243ab753"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "workos_unreadable_blocks"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:53.262921+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "564",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-workos-unreadable-blocks",
    "scope": {
      "workosOrganizations": [
        "bf3aed1e-b19a-462c-9f7b-6030243ab753"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "workos_unreadable_blocks"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "workos_unreadable_blocks"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "failed",
      "error": "workos 401 unauthorized: GET /user_management/organization_memberships → 401 unauthorized",
      "errorCode": "workos:unauthorized",
      "durationMs": 157
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "blocked: entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "blocked"
      },
      "attempts": 1,
      "ref": "172O4XDJCR.JY2RQ2",
      "appliedAt": "2026-10-22T19:03:52.435Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "8441f477146762b0bf9060777f38b7df651be0b7e58d612a1c24927031de7892"
  },
  "output": {
    "mode": "blocked",
    "reason": "entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
    "entitlements": 0,
    "privileged": 0,
    "dormant": 0,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:52.051Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:52.210Z",
      "msg": "agents: workos-entitlements=failed, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:52.228Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:03:52.435Z",
      "msg": "slack.campaign_opened: applied"
    },
    {
      "at": "2026-10-22T19:03:52.440Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:03:53.120Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:52.051Z",
  "updatedAt": "2026-10-22T19:03:53.120Z",
  "duplicate": true
}
  107. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/workos_unreadable_blocks/runs · workos unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/workos_unreadable_blocks/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:53.617403+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "workos-unreadable-blocks-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "workos_unreadable_blocks"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "failed",
          "error": "workos 401 unauthorized: GET /user_management/organization_memberships → 401 unauthorized",
          "errorCode": "workos:unauthorized",
          "durationMs": 157
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "blocked: entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "blocked"
          },
          "attempts": 1,
          "ref": "172O4XDJCR.JY2RQ2",
          "appliedAt": "2026-10-22T19:03:52.435Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "8441f477146762b0bf9060777f38b7df651be0b7e58d612a1c24927031de7892"
      },
      "output": {
        "mode": "blocked",
        "reason": "entitlements could not be read from workos-entitlements; the campaign needs every in-scope system",
        "entitlements": 0,
        "privileged": 0,
        "dormant": 0,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:52.051Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:52.210Z",
          "msg": "agents: workos-entitlements=failed, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:52.228Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:03:52.435Z",
          "msg": "slack.campaign_opened: applied"
        },
        {
          "at": "2026-10-22T19:03:52.440Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:03:53.120Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:52.051Z",
      "updatedAt": "2026-10-22T19:03:53.120Z"
    }
  ]
}
  108. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/slack_rate_limited/runs · slack rate limited · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/slack_rate_limited/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:03:53.911824+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  109. · POST app request /invocations · slack rate limited · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-slack-rate-limited",
    "scope": {
      "workosOrganizations": [
        "982b6d92-18fb-405a-adc1-303f23e6bde7"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "slack_rate_limited"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:03.464003+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "546",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-slack-rate-limited",
    "scope": {
      "workosOrganizations": [
        "982b6d92-18fb-405a-adc1-303f23e6bde7"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "slack_rate_limited"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "slack_rate_limited"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 530
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_GTBN0GWL9X6X04KYTVT2BKXRTW",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
        "role": "member",
        "holder": "87b55aae9c",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_77CUNN2M3INWTDIJFX5936CB4U",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
        "role": "admin",
        "holder": "e6f9e0258b",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "failed",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "error": "slack 429 ratelimited: POST /api/chat.postMessage → 429 ratelimited",
      "errorCode": "slack:ratelimited",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-slack-rate-limited"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 0,
    "failed": 1,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:54.090Z",
  "audit": {
    "seq": 5,
    "head": "6bed8af8d6cf7a2e2dd754ed1e94882ebe24e08de9c761f32388855f0fed4338"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:54.090Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:54.623Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:54.627Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:04:03.201Z",
      "msg": "slack.campaign_opened: failed (slack:ratelimited)"
    },
    {
      "at": "2026-10-22T19:04:03.205Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:04:03.209Z",
      "msg": "waiting until 2026-10-29T19:03:54.090Z"
    }
  ],
  "createdAt": "2026-10-22T19:03:54.090Z",
  "updatedAt": "2026-10-22T19:04:03.209Z",
  "duplicate": false
}
  110. · GET workos request · provider traffic · /user_management/organization_memberships · HTTP 200 · request b4df424cc29c · processing 0.65ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/organization_memberships' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.65ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "list",
  "data": [
    {
      "object": "organization_membership",
      "user_id": "126db351-8d3e-4de5-ba8c-7fa36aca7311",
      "organization_id": "982b6d92-18fb-405a-adc1-303f23e6bde7",
      "status": "active",
      "role": {
        "slug": "member"
      },
      "roles": [
        {
          "slug": "member"
        }
      ],
      "id": "om_GTBN0GWL9X6X04KYTVT2BKXRTW"
    },
    {
      "object": "organization_membership",
      "user_id": "2454fbb5-ddb8-464b-add1-3c9e39ed1f8d",
      "organization_id": "982b6d92-18fb-405a-adc1-303f23e6bde7",
      "status": "active",
      "role": {
        "slug": "admin"
      },
      "roles": [
        {
          "slug": "admin"
        }
      ],
      "id": "om_77CUNN2M3INWTDIJFX5936CB4U"
    }
  ],
  "list_metadata": {
    "before": "om_GTBN0GWL9X6X04KYTVT2BKXRTW",
    "after": null
  }
}
  111. · GET workos request · provider traffic · /user_management/users/126db351-8d3e-4de5-ba8c-7fa36aca7311 · HTTP 200 · request 9e98f038c953 · processing 2.07ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/126db351-8d3e-4de5-ba8c-7fa36aca7311' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.07ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "126db351-8d3e-4de5-ba8c-7fa36aca7311",
  "first_name": "Contractor",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/99ea7024",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_ba6a17a948974e3ca6361666e1",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  112. · GET workos request · provider traffic · /user_management/users/2454fbb5-ddb8-464b-add1-3c9e39ed1f8d · HTTP 200 · request 2ba3cfde5c36 · processing 2.2ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/192682caf9/user_management/users/2454fbb5-ddb8-464b-add1-3c9e39ed1f8d' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 2.2ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 200

    {
  "object": "user",
  "id": "2454fbb5-ddb8-464b-add1-3c9e39ed1f8d",
  "first_name": "Ops",
  "last_name": "Sample Last",
  "profile_picture_url": "https://example.com/f3b980cc",
  "email": "[email protected]",
  "email_verified": true,
  "external_id": "ext_d75b0dbc45574cfabe2c70df91",
  "last_sign_in_at": "2025-06-25T19:07:33.155Z",
  "locale": "en",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z"
}
  113. · POST slack request · slack rate limited · /api/chat.postMessage · HTTP 429 · processing 0.81ms
    View sanitized request and response

    Curl-style request view

    curl --request POST '<SLACK_TWIN_BASE_URL>/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL was not recorded. Provider processing: 0.81ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    {
  "retry-after": "30"
}

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 429

    {
  "ok": false,
  "error": "ratelimited"
}
  114. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 429 · request b05dd5bbac14 · processing 0.81ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.81ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    {
  "retry-after": "30"
}

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 429

    {
  "ok": false,
  "error": "ratelimited"
}
  115. · POST slack request · slack rate limited · /api/chat.postMessage · HTTP 429 · processing 0.87ms
    View sanitized request and response

    Curl-style request view

    curl --request POST '<SLACK_TWIN_BASE_URL>/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL was not recorded. Provider processing: 0.87ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    {
  "retry-after": "30"
}

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 429

    {
  "ok": false,
  "error": "ratelimited"
}
  116. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 429 · request 91f4f073fa52 · processing 0.87ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.87ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    {
  "retry-after": "30"
}

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 429

    {
  "ok": false,
  "error": "ratelimited"
}
  117. · POST slack request · slack rate limited · /api/chat.postMessage · HTTP 429 · processing 1.13ms
    View sanitized request and response

    Curl-style request view

    curl --request POST '<SLACK_TWIN_BASE_URL>/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL was not recorded. Provider processing: 1.13ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    {
  "retry-after": "30"
}

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 429

    {
  "ok": false,
  "error": "ratelimited"
}
  118. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 429 · request 058154db084e · processing 1.13ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/fb55e48a1a/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can'\''t self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 1.13ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "236",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    {
  "retry-after": "30"
}

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":clipboard: UAR-slack-rate-limited: review (2 entitlement(s)); 1 privileged, 2 dormant, 0 without an owner, 0 that the owner can't self-review. Due 2026-11-05.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 429

    {
  "ok": false,
  "error": "ratelimited"
}
  119. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/slack_rate_limited/runs · slack rate limited · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/slack_rate_limited/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:03.927142+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "slack_rate_limited"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 530
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_GTBN0GWL9X6X04KYTVT2BKXRTW",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
            "role": "member",
            "holder": "87b55aae9c",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_77CUNN2M3INWTDIJFX5936CB4U",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
            "role": "admin",
            "holder": "e6f9e0258b",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "failed",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "error": "slack 429 ratelimited: POST /api/chat.postMessage → 429 ratelimited",
          "errorCode": "slack:ratelimited",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-slack-rate-limited"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 0,
        "failed": 1,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:54.090Z",
      "audit": {
        "seq": 5,
        "head": "6bed8af8d6cf7a2e2dd754ed1e94882ebe24e08de9c761f32388855f0fed4338"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:54.090Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:54.623Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:54.627Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:04:03.201Z",
          "msg": "slack.campaign_opened: failed (slack:ratelimited)"
        },
        {
          "at": "2026-10-22T19:04:03.205Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:04:03.209Z",
          "msg": "waiting until 2026-10-29T19:03:54.090Z"
        }
      ],
      "createdAt": "2026-10-22T19:03:54.090Z",
      "updatedAt": "2026-10-22T19:04:03.209Z"
    }
  ]
}
  120. · POST app request /invocations · slack rate limited · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-slack-rate-limited",
    "scope": {
      "workosOrganizations": [
        "982b6d92-18fb-405a-adc1-303f23e6bde7"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "slack_rate_limited"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:04.256391+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "546",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "UAR-slack-rate-limited",
    "scope": {
      "workosOrganizations": [
        "982b6d92-18fb-405a-adc1-303f23e6bde7"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "slack_rate_limited"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "workflow": "user-access-review",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "grc",
  "phase": "WAITING",
  "closed": false,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "slack_rate_limited"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "workos-entitlements",
      "status": "ok",
      "summary": "2 WorkOS membership(s) in 1 organization(s)",
      "durationMs": 530
    },
    {
      "name": "github-entitlements",
      "status": "ok",
      "summary": "no GitHub org in scope",
      "durationMs": 1
    },
    {
      "name": "campaign",
      "status": "ok",
      "summary": "review: 2 entitlement(s)",
      "durationMs": 0
    }
  ],
  "actions": [
    {
      "id": "revoke:workos:om_GTBN0GWL9X6X04KYTVT2BKXRTW",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
        "role": "member",
        "holder": "87b55aae9c",
        "privileged": false,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "revoke:workos:om_77CUNN2M3INWTDIJFX5936CB4U",
      "kind": "access.decide_and_revoke",
      "provider": "workos",
      "agent": "campaign",
      "gate": "auto",
      "status": "awaiting_signal",
      "summary": {
        "system": "workos",
        "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
        "role": "admin",
        "holder": "e6f9e0258b",
        "privileged": true,
        "dormant": true,
        "reviewer": "U_IT_OWNER",
        "meaning": "approve = revoke, reject = keep"
      },
      "attempts": 0,
      "signalDeadline": "2026-11-05T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d7",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 7
      },
      "attempts": 0,
      "waitUntil": "2026-10-29T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "slack.remind:U_IT_OWNER:d12",
      "kind": "slack.remind",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "reviewer": "U_IT_OWNER",
        "day": 12
      },
      "attempts": 0,
      "waitUntil": "2026-11-03T19:03:54.090Z",
      "reconciled": null
    },
    {
      "id": "slack.campaign_opened",
      "kind": "slack.campaign_opened",
      "provider": "slack",
      "agent": "campaign",
      "gate": "auto",
      "status": "failed",
      "summary": {
        "channel": "C0SECURITY1",
        "mode": "review"
      },
      "attempts": 1,
      "error": "slack 429 ratelimited: POST /api/chat.postMessage → 429 ratelimited",
      "errorCode": "slack:ratelimited",
      "reconciled": null
    },
    {
      "id": "asana.evidence_record",
      "kind": "asana.evidence_record",
      "provider": "asana",
      "agent": "campaign",
      "gate": "auto",
      "status": "scheduled",
      "summary": {
        "campaign": "UAR-slack-rate-limited"
      },
      "attempts": 0,
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 0,
    "failed": 1,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 3,
    "awaitingSignal": 2,
    "compensated": 0
  },
  "wakeAt": "2026-10-29T19:03:54.090Z",
  "audit": {
    "seq": 6,
    "head": "1138bde1458ab9f45c64ad0c6fa5fe39002448a4477dd473122a68f0a4e308ed"
  },
  "output": {
    "mode": "review",
    "reason": "2 entitlement(s)",
    "entitlements": 2,
    "privileged": 1,
    "dormant": 2,
    "unowned": 0,
    "selfReview": 0
  },
  "events": [
    {
      "at": "2026-10-22T19:03:54.090Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:03:54.623Z",
      "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
    },
    {
      "at": "2026-10-22T19:03:54.627Z",
      "msg": "planned 6 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:04:03.201Z",
      "msg": "slack.campaign_opened: failed (slack:ratelimited)"
    },
    {
      "at": "2026-10-22T19:04:03.205Z",
      "msg": "asana.evidence_record: scheduled"
    },
    {
      "at": "2026-10-22T19:04:03.209Z",
      "msg": "waiting until 2026-10-29T19:03:54.090Z"
    },
    {
      "at": "2026-10-22T19:04:04.079Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:03:54.090Z",
  "updatedAt": "2026-10-22T19:04:04.079Z",
  "duplicate": true
}
  121. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/slack_rate_limited/runs · slack rate limited · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/slack_rate_limited/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:04.693312+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "slack-rate-limited-vr_c14cb6f1efe04a0fbf095e93e9089086",
      "workflow": "user-access-review",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "grc",
      "phase": "WAITING",
      "closed": false,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
        "fs_case": "slack_rate_limited"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "workos-entitlements",
          "status": "ok",
          "summary": "2 WorkOS membership(s) in 1 organization(s)",
          "durationMs": 530
        },
        {
          "name": "github-entitlements",
          "status": "ok",
          "summary": "no GitHub org in scope",
          "durationMs": 1
        },
        {
          "name": "campaign",
          "status": "ok",
          "summary": "review: 2 entitlement(s)",
          "durationMs": 0
        }
      ],
      "actions": [
        {
          "id": "revoke:workos:om_GTBN0GWL9X6X04KYTVT2BKXRTW",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
            "role": "member",
            "holder": "87b55aae9c",
            "privileged": false,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "revoke:workos:om_77CUNN2M3INWTDIJFX5936CB4U",
          "kind": "access.decide_and_revoke",
          "provider": "workos",
          "agent": "campaign",
          "gate": "auto",
          "status": "awaiting_signal",
          "summary": {
            "system": "workos",
            "resource": "982b6d92-18fb-405a-adc1-303f23e6bde7",
            "role": "admin",
            "holder": "e6f9e0258b",
            "privileged": true,
            "dormant": true,
            "reviewer": "U_IT_OWNER",
            "meaning": "approve = revoke, reject = keep"
          },
          "attempts": 0,
          "signalDeadline": "2026-11-05T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d7",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 7
          },
          "attempts": 0,
          "waitUntil": "2026-10-29T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "slack.remind:U_IT_OWNER:d12",
          "kind": "slack.remind",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "reviewer": "U_IT_OWNER",
            "day": 12
          },
          "attempts": 0,
          "waitUntil": "2026-11-03T19:03:54.090Z",
          "reconciled": null
        },
        {
          "id": "slack.campaign_opened",
          "kind": "slack.campaign_opened",
          "provider": "slack",
          "agent": "campaign",
          "gate": "auto",
          "status": "failed",
          "summary": {
            "channel": "C0SECURITY1",
            "mode": "review"
          },
          "attempts": 1,
          "error": "slack 429 ratelimited: POST /api/chat.postMessage → 429 ratelimited",
          "errorCode": "slack:ratelimited",
          "reconciled": null
        },
        {
          "id": "asana.evidence_record",
          "kind": "asana.evidence_record",
          "provider": "asana",
          "agent": "campaign",
          "gate": "auto",
          "status": "scheduled",
          "summary": {
            "campaign": "UAR-slack-rate-limited"
          },
          "attempts": 0,
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 0,
        "failed": 1,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 3,
        "awaitingSignal": 2,
        "compensated": 0
      },
      "wakeAt": "2026-10-29T19:03:54.090Z",
      "audit": {
        "seq": 6,
        "head": "1138bde1458ab9f45c64ad0c6fa5fe39002448a4477dd473122a68f0a4e308ed"
      },
      "output": {
        "mode": "review",
        "reason": "2 entitlement(s)",
        "entitlements": 2,
        "privileged": 1,
        "dormant": 2,
        "unowned": 0,
        "selfReview": 0
      },
      "events": [
        {
          "at": "2026-10-22T19:03:54.090Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:03:54.623Z",
          "msg": "agents: workos-entitlements=ok, github-entitlements=ok"
        },
        {
          "at": "2026-10-22T19:03:54.627Z",
          "msg": "planned 6 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:04:03.201Z",
          "msg": "slack.campaign_opened: failed (slack:ratelimited)"
        },
        {
          "at": "2026-10-22T19:04:03.205Z",
          "msg": "asana.evidence_record: scheduled"
        },
        {
          "at": "2026-10-22T19:04:03.209Z",
          "msg": "waiting until 2026-10-29T19:03:54.090Z"
        },
        {
          "at": "2026-10-22T19:04:04.079Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:03:54.090Z",
      "updatedAt": "2026-10-22T19:04:04.079Z"
    }
  ]
}
  122. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/invalid_input_rejected/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:05.217593+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  123. · POST app request /invocations · invalid input rejected · HTTP 400
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "invalid-input-rejected-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "Q4 review",
    "scope": {
      "workosOrganizations": [
        "ORG_baseline"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "invalid_input_rejected"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:05.579220+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "517",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "79"
}

    Request body

    {
  "action": "start",
  "runId": "invalid-input-rejected-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "Q4 review",
    "scope": {
      "workosOrganizations": [
        "ORG_baseline"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "invalid_input_rejected"
  }
}

    Recorded response · HTTP 400

    {
  "error": "invalid input",
  "issues": [
    "campaignId: campaign id like UAR-2026-Q4"
  ]
}
  124. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/invalid_input_rejected/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:05.926890+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  125. · POST app request /invocations · invalid input rejected · HTTP 400
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "invalid-input-rejected-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "Q4 review",
    "scope": {
      "workosOrganizations": [
        "ORG_baseline"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "invalid_input_rejected"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:06.188872+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "517",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "79"
}

    Request body

    {
  "action": "start",
  "runId": "invalid-input-rejected-vr_c14cb6f1efe04a0fbf095e93e9089086",
  "input": {
    "campaignId": "Q4 review",
    "scope": {
      "workosOrganizations": [
        "ORG_baseline"
      ]
    },
    "owners": {
      "workos": {
        "userId": "U_IT_OWNER",
        "email": "[email protected]"
      },
      "github": {
        "userId": "U_ENG_OWNER",
        "email": "[email protected]"
      }
    },
    "githubEmails": {},
    "grcChannel": "C0SECURITY1",
    "approvers": [
      "U_CISO"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_c14cb6f1efe04a0fbf095e93e9089086",
    "fs_case": "invalid_input_rejected"
  }
}

    Recorded response · HTTP 400

    {
  "error": "invalid input",
  "issues": [
    "campaignId: campaign id like UAR-2026-Q4"
  ]
}
  126. · GET app request /verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/1160b4c133b354927a76bed121b828cca7b481a4922ec602/verify/runs/vr_c14cb6f1efe04a0fbf095e93e9089086/cases/invalid_input_rejected/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_c14cb6f1efe04a0fbf095e93e9089086' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:04:06.544961+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_c14cb6f1efe04a0fbf095e93e9089086",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}

Expand a request to inspect its sanitized payload. Credentials and personal data stay hidden.

Timestamps reflect when the sandbox recorded each request, not the order your app triggered them.

  • Verification covers the declared HTTP actions and state reads in this run.
  • The app version shown was supplied by the app itself, not independently checked.
  • Passing all checks in this run does not certify the whole app as production-ready.
  • The verifier session does not survive a restart. This says nothing about the durability of the app under test.
  • App state shown here is what the app's own endpoint reported. It is not independently checked against the database.

Sanitized summary. Expand a timeline event to inspect the safe request and response fields; sensitive provider and application data stays hidden.