Skip to main content
FetchSandboxFailing
Outcome

Workflow verification incomplete

This receipt shows the requests we made, what the app reported back, and which checks passed or failed. It covers what ran in this sandbox session against the rules we set.

3 / 9

Failing

3Passed3Failed3Not measured
What we did

Each check was set up before the run. This shows what we tried, what came back, and which rule it was checked against.

Scope

This receipt covers the checks in this run only. Passing all checks does not certify the whole app as production-ready.

Test scenarios

01

A request starts one recorded run (provider-independent, so every later check is measured)

baseline
Passed

What we probed

A request starts one recorded run (provider-independent, so every later check is measured)

How we probed it

Frozen intended probe steps. Recorded requests show what actually ran.

  1. POST /invocations

Expected vs actual

Expected
A request starts one recorded run (provider-independent, so every later check is measured)
Actual
expected exactly 1, found 1; stable under 2 repeats (1)

Requests and responses

01GET /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs200
We sent

GET /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs

This request had no body.

Server returned

HTTP 200

{
  "runs": []
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}
{
  "content-type": "application/json",
  "content-length": "11"
}
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

02POST /invocations200
We sent

POST /invocations

{
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}
Server returned

HTTP 200

{
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 367
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17YCMIE9H3.A7X92D",
      "appliedAt": "2026-10-22T19:53:49.266Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "e1161582b5f947b4d93f749074db4a016ee31371c7ba098436fa40efdda35e22"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:48.763Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:49.132Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:49.134Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:49.267Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:49.268Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:48.763Z",
  "updatedAt": "2026-10-22T19:53:49.268Z",
  "duplicate": false
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "380",
  "content-type": "application/json"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

03GET /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs200
We sent

GET /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs

This request had no body.

Server returned

HTTP 200

{
  "runs": [
    {
      "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "baseline"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 367
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17YCMIE9H3.A7X92D",
          "appliedAt": "2026-10-22T19:53:49.266Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "e1161582b5f947b4d93f749074db4a016ee31371c7ba098436fa40efdda35e22"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:48.763Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:49.132Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:49.134Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:49.267Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:49.268Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:48.763Z",
      "updatedAt": "2026-10-22T19:53:49.268Z"
    }
  ]
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

04POST /invocations200
We sent

POST /invocations

{
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}
Server returned

HTTP 200

{
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 367
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17YCMIE9H3.A7X92D",
      "appliedAt": "2026-10-22T19:53:49.266Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "50dd78ab3825597cde0d77404f5ae03aebc4d09eba6350aef75e9df56c50f3d9"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:48.763Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:49.132Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:49.134Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:49.267Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:49.268Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:53:49.798Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:53:48.763Z",
  "updatedAt": "2026-10-22T19:53:49.798Z",
  "duplicate": true
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "380",
  "content-type": "application/json"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

05GET /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs200
We sent

GET /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs

This request had no body.

Server returned

HTTP 200

{
  "runs": [
    {
      "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "baseline"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 367
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17YCMIE9H3.A7X92D",
          "appliedAt": "2026-10-22T19:53:49.266Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "50dd78ab3825597cde0d77404f5ae03aebc4d09eba6350aef75e9df56c50f3d9"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:48.763Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:49.132Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:49.134Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:49.267Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:49.268Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:53:49.798Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:53:48.763Z",
      "updatedAt": "2026-10-22T19:53:49.798Z"
    }
  ]
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs

{
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}
{
  "content-type": "application/json"
}
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

Evidence
Run
vr_14858015802a4bd8bc7aff4532274dff
App version (declared)
acme-ops-vulnerability-remed…
Source receipt
Source receipt ↗
Technical referencebaseline

App version (declared): acme-ops-vulnerability-remediation-1.0.0-befeb35

A request starts one recorded run (provider-independent, so every later check is measured)

expected exactly 1, found 1; stable under 2 repeats (1)

  • Verification covers the declared HTTP actions and state reads in this run.
  • The app version shown was supplied by the app itself, not independently checked.
  • Passing all checks in this run does not certify the whole app as production-ready.
  • The verifier session does not survive a restart. This says nothing about the durability of the app under test.
  • App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (2)

These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.

github · GET /repos/acme/api/dependabot/alerts · HTTP 404
We sent

GET /repos/acme/api/dependabot/alerts

No body shown for this read.

Server returned

HTTP 404

{
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts

{
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

Response headers were not saved in this run.

Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

slack · POST /api/chat.postMessage · HTTP 200
We sent

POST /api/chat.postMessage

{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-baseline: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}
Server returned

HTTP 200

{
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_7296147bd0774e439c42388b30",
    "client_msg_id": "cli_f0a86e188e14470f9cd7898f62",
    "name": "item-b5acc4",
    "old_name": "Sample Old",
    "parent_user_id": "par_5bd0f45ad93c4d5c861528aa4b",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17YCMIE9H3.A7X92D"
}

HTTP status is a response, not the scenario verdict. State shown here is reported by the app.

Technical details
Headers and timing

https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage

{
  "host": "fetchsandbox.com",
  "content-length": "159",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

Response headers were not saved in this run.

Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-baseline: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

Run details

Run vr_14858015802a4bd8bc7aff4532274dff

9 required checks for the declared application workflow. Results apply to the recorded observation windows.

3 passed · 3 failed · 3 not checked

Coverage beyond the declared checks

Passing these checks does not establish every production behavior.

  • Normal successful behavior · Linked check failed · baseline, baseline_effects
  • The right user gets the right access · Not checked · owner_cannot_accept_own_risk
  • Valid data and boundary values · Linked checks passed · invalid_input_rejected
  • Correct amount, currency and quantity · Proposed as not applicable
  • Duplicate requests and events · Not checked · second_sweep_creates_nothing
  • Requests arriving together · Proposed as not applicable
  • Out-of-order and stale events · Proposed as not applicable
  • Delayed or missing events · Linked check failed · overdue_escalated
  • Provider authentication and permissions · Linked checks passed · github_unreadable_blocks
  • Rate limits, server failures and timeouts · Linked checks passed · github_unreadable_blocks
  • Completed action with a lost response · Proposed as not applicable
  • Partial completion and recovery · Proposed as not applicable
  • Restart without losing or duplicating work · Proposed as not applicable
  • Finding and repairing inconsistent state · Proposed as not applicable
  • Cancellation, refunds and access · Not checked · accepted_risk_dismisses_alert
  • Data ownership and privacy · Proposed as not applicable
  • Test isolation and cleanup · Linked checks passed · baseline

Applicability comes from the proposed plan. Test results come from the recorded execution.

App version: acme-ops-vulnerability-remediation-1.0.0-befeb35 (declared)

Measured run: 2026-10-22T19:53:48.397025+00:00 – 2026-10-22T19:54:03.521036+00:00

Recorded execution

Recorded application requests and state reads for the declared HTTP contract.

The timeline below merges all requests from this run, sorted by recorded timestamp.

Recorded requests and deliveries: 47/61 successful · checkpoints: 6/9 recorded

Why checks are unmeasured

  • second_sweep_creates_nothing: assertion could not read evidence: required observation 'output.untracked' is missing
  • owner_cannot_accept_own_risk: app action expected HTTP 403, received 404
  • accepted_risk_dismisses_alert: app action expected HTTP 200, received 404
Sanitized request and event timeline (61 events)
  1. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:48.630475+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  2. · POST app request /invocations · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:49.375383+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "380",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 367
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17YCMIE9H3.A7X92D",
      "appliedAt": "2026-10-22T19:53:49.266Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "e1161582b5f947b4d93f749074db4a016ee31371c7ba098436fa40efdda35e22"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:48.763Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:49.132Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:49.134Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:49.267Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:49.268Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:48.763Z",
  "updatedAt": "2026-10-22T19:53:49.268Z",
  "duplicate": false
}
  3. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request 33d27696c9d7 · processing 0.23ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.23ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  4. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 76509580a61e · processing 11.64ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-baseline: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 11.64ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "159",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-baseline: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_7296147bd0774e439c42388b30",
    "client_msg_id": "cli_f0a86e188e14470f9cd7898f62",
    "name": "item-b5acc4",
    "old_name": "Sample Old",
    "parent_user_id": "par_5bd0f45ad93c4d5c861528aa4b",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17YCMIE9H3.A7X92D"
}
  5. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:49.692629+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "baseline"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 367
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17YCMIE9H3.A7X92D",
          "appliedAt": "2026-10-22T19:53:49.266Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "e1161582b5f947b4d93f749074db4a016ee31371c7ba098436fa40efdda35e22"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:48.763Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:49.132Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:49.134Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:49.267Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:49.268Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:48.763Z",
      "updatedAt": "2026-10-22T19:53:49.268Z"
    }
  ]
}
  6. · POST app request /invocations · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:49.915163+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "380",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 367
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17YCMIE9H3.A7X92D",
      "appliedAt": "2026-10-22T19:53:49.266Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "50dd78ab3825597cde0d77404f5ae03aebc4d09eba6350aef75e9df56c50f3d9"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:48.763Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:49.132Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:49.134Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:49.267Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:49.268Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:53:49.798Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:53:48.763Z",
  "updatedAt": "2026-10-22T19:53:49.798Z",
  "duplicate": true
}
  7. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs · baseline · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:50.242553+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "baseline-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "baseline"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 367
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17YCMIE9H3.A7X92D",
          "appliedAt": "2026-10-22T19:53:49.266Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "50dd78ab3825597cde0d77404f5ae03aebc4d09eba6350aef75e9df56c50f3d9"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:48.763Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:49.132Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:49.134Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:49.267Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:49.268Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:53:49.798Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:53:48.763Z",
      "updatedAt": "2026-10-22T19:53:49.798Z"
    }
  ]
}
  8. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline_effects/runs · baseline effects · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline_effects/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:50.458130+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  9. · POST app request /invocations · baseline effects · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline_effects"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:51.004471+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "396",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline_effects"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline_effects"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 133
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "172XC0JWTO.JGG3BF",
      "appliedAt": "2026-10-22T19:53:50.842Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "5d254def7420d8642864da2428896b3ed304f08d6da214c80ec944125e3eae9a"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:50.560Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:50.694Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:50.696Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:50.842Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:50.845Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:50.560Z",
  "updatedAt": "2026-10-22T19:53:50.845Z",
  "duplicate": false
}
  10. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request 45c743b6e837 · processing 0.16ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.16ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  11. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request b4b2fb9c4d77 · processing 13.8ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-baseline: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.8ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "159",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-baseline: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_6409c4ed65de4f9187da20f045",
    "client_msg_id": "cli_d0281cd339804d698fa0b40cf4",
    "name": "item-23d12e",
    "old_name": "Sample Old",
    "parent_user_id": "par_ea6dce4fcaac44c28fb0563385",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "172XC0JWTO.JGG3BF"
}
  12. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline_effects/runs · baseline effects · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline_effects/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:51.331213+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "baseline_effects"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 133
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "172XC0JWTO.JGG3BF",
          "appliedAt": "2026-10-22T19:53:50.842Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "5d254def7420d8642864da2428896b3ed304f08d6da214c80ec944125e3eae9a"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:50.560Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:50.694Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:50.696Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:50.842Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:50.845Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:50.560Z",
      "updatedAt": "2026-10-22T19:53:50.845Z"
    }
  ]
}
  13. · POST app request /invocations · baseline effects · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline_effects"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:51.556580+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "396",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-baseline",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline_effects"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "baseline_effects"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 133
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "172XC0JWTO.JGG3BF",
      "appliedAt": "2026-10-22T19:53:50.842Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "5e283a4b389ffabfc1b664c218fbfa3fdf606bb0512dd7ec98ed043bd7170988"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:50.560Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:50.694Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:50.696Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:50.842Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:50.845Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:53:51.440Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:53:50.560Z",
  "updatedAt": "2026-10-22T19:53:51.440Z",
  "duplicate": true
}
  14. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline_effects/runs · baseline effects · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/baseline_effects/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:51.869367+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "baseline-effects-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "baseline_effects"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 133
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "172XC0JWTO.JGG3BF",
          "appliedAt": "2026-10-22T19:53:50.842Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "5e283a4b389ffabfc1b664c218fbfa3fdf606bb0512dd7ec98ed043bd7170988"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:50.560Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:50.694Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:50.696Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:50.842Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:50.845Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:53:51.440Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:53:50.560Z",
      "updatedAt": "2026-10-22T19:53:51.440Z"
    }
  ]
}
  15. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/every_alert_tracked_once/runs · every alert tracked once · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/every_alert_tracked_once/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:52.080763+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  16. · POST app request /invocations · every alert tracked once · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-every-alert-tracked-once",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "every_alert_tracked_once"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:52.570352+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "428",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-every-alert-tracked-once",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "every_alert_tracked_once"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "every_alert_tracked_once"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 121
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "1762S3YBJ1.2Q19VM",
      "appliedAt": "2026-10-22T19:53:52.447Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "ab43cf766c8e53cf5b59b2be90d962829b7d4c8b74704abe2cc7981abff61b7d"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:52.197Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:52.318Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:52.320Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:52.447Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:52.449Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:52.197Z",
  "updatedAt": "2026-10-22T19:53:52.449Z",
  "duplicate": false
}
  17. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request cc10cccb356b · processing 0.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  18. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request e5276f77961d · processing 13.86ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-every-alert-tracked-once: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.86ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "175",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-every-alert-tracked-once: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_014ac363f39c4441a625b60b4f",
    "client_msg_id": "cli_2fd015ea107340ea939b8560ad",
    "name": "item-71171d",
    "old_name": "Sample Old",
    "parent_user_id": "par_f6b24cb014f8401e9a749fd980",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "1762S3YBJ1.2Q19VM"
}
  19. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/every_alert_tracked_once/runs · every alert tracked once · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/every_alert_tracked_once/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:52.917555+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "every_alert_tracked_once"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 121
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "1762S3YBJ1.2Q19VM",
          "appliedAt": "2026-10-22T19:53:52.447Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "ab43cf766c8e53cf5b59b2be90d962829b7d4c8b74704abe2cc7981abff61b7d"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:52.197Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:52.318Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:52.320Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:52.447Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:52.449Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:52.197Z",
      "updatedAt": "2026-10-22T19:53:52.449Z"
    }
  ]
}
  20. · POST app request /invocations · every alert tracked once · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-every-alert-tracked-once",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "every_alert_tracked_once"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:53.138935+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "428",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-every-alert-tracked-once",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "every_alert_tracked_once"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "every_alert_tracked_once"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 121
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "1762S3YBJ1.2Q19VM",
      "appliedAt": "2026-10-22T19:53:52.447Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "95494050be59440653ed2685864eee78759f1c82083a3771e3e90405537f9295"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:52.197Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:52.318Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:52.320Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:52.447Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:52.449Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:53:53.019Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:53:52.197Z",
  "updatedAt": "2026-10-22T19:53:53.019Z",
  "duplicate": true
}
  21. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/every_alert_tracked_once/runs · every alert tracked once · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/every_alert_tracked_once/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:53.469102+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "every-alert-tracked-once-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "every_alert_tracked_once"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 121
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "1762S3YBJ1.2Q19VM",
          "appliedAt": "2026-10-22T19:53:52.447Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "95494050be59440653ed2685864eee78759f1c82083a3771e3e90405537f9295"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:52.197Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:52.318Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:52.320Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:52.447Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:52.449Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:53:53.019Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:53:52.197Z",
      "updatedAt": "2026-10-22T19:53:53.019Z"
    }
  ]
}
  22. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/second_sweep_creates_nothing/runs · second sweep creates nothing · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/second_sweep_creates_nothing/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:53.714425+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  23. · POST app request /invocations · second sweep creates nothing · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "second-sweep-creates-nothing-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-second-sweep-creates-nothing",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "second_sweep_creates_nothing"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:54.194749+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "440",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "second-sweep-creates-nothing-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-second-sweep-creates-nothing",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "second_sweep_creates_nothing"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "second-sweep-creates-nothing-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "second_sweep_creates_nothing"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 111
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17YQYOYYYS.K0GINK",
      "appliedAt": "2026-10-22T19:53:54.064Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "5d8f0a7a073e13e808c39c16e4d63fe70996ec0a61a6624507fe278f0a7b548f"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:53.821Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:53.933Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:53.935Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:54.065Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:54.067Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:53.821Z",
  "updatedAt": "2026-10-22T19:53:54.067Z",
  "duplicate": false
}
  24. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request d9a308589011 · processing 0.19ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.19ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  25. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request b790dc246316 · processing 16.09ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-second-sweep-creates-nothing: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 16.09ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "179",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-second-sweep-creates-nothing: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_5ec3d470123b47fd88297f2b08",
    "client_msg_id": "cli_4d7b5aa3cdc048dbad4893981b",
    "name": "item-a20696",
    "old_name": "Sample Old",
    "parent_user_id": "par_306b8d716076414c91175534e5",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17YQYOYYYS.K0GINK"
}
  26. · POST app request /invocations · second sweep creates nothing · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "second-b-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-second-b",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": []
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "second_sweep_creates_nothing"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:54.686135+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "379",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "second-b-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-second-b",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": []
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "second_sweep_creates_nothing"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "second-b-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "second_sweep_creates_nothing"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 113
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17GUZ332BD.FPNFVX",
      "appliedAt": "2026-10-22T19:53:54.563Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "f3a71b7babc6efa17e4cf48a4cd41e64c1751531196a46c333105d1e65ea19a3"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:54.305Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:54.419Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:54.422Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:54.564Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:54.566Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:54.305Z",
  "updatedAt": "2026-10-22T19:53:54.566Z",
  "duplicate": false
}
  27. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request 72478e301232 · processing 0.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  28. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 017e24706e84 · processing 14.63ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-second-b: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 14.63ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "159",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-second-b: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_621c2bf803d841bab57373e01e",
    "client_msg_id": "cli_ca69b8f5dce843619aefcd30f2",
    "name": "item-886fd2",
    "old_name": "Sample Old",
    "parent_user_id": "par_33b20e83745a468cb4dd89eebc",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17GUZ332BD.FPNFVX"
}
  29. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/second_sweep_creates_nothing/runs · second sweep creates nothing · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/second_sweep_creates_nothing/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:55.010519+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "second-sweep-creates-nothing-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "second_sweep_creates_nothing"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 111
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17YQYOYYYS.K0GINK",
          "appliedAt": "2026-10-22T19:53:54.064Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "5d8f0a7a073e13e808c39c16e4d63fe70996ec0a61a6624507fe278f0a7b548f"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:53.821Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:53.933Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:53.935Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:54.065Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:54.067Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:53.821Z",
      "updatedAt": "2026-10-22T19:53:54.067Z"
    },
    {
      "runId": "second-b-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "second_sweep_creates_nothing"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 113
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17GUZ332BD.FPNFVX",
          "appliedAt": "2026-10-22T19:53:54.563Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "f3a71b7babc6efa17e4cf48a4cd41e64c1751531196a46c333105d1e65ea19a3"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:54.305Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:54.419Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:54.422Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:54.564Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:54.566Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:54.305Z",
      "updatedAt": "2026-10-22T19:53:54.566Z"
    }
  ]
}
  30. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/owner_cannot_accept_own_risk/runs · owner cannot accept own risk · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/owner_cannot_accept_own_risk/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:55.239848+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  31. · POST app request /invocations · owner cannot accept own risk · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "owner-cannot-accept-own-risk-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-owner-cannot-accept-own-risk",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ],
    "acceptanceRequests": [
      "acme/api#1"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "owner_cannot_accept_own_risk"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:55.723937+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "476",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "owner-cannot-accept-own-risk-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-owner-cannot-accept-own-risk",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ],
    "acceptanceRequests": [
      "acme/api#1"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "owner_cannot_accept_own_risk"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "owner-cannot-accept-own-risk-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "owner_cannot_accept_own_risk"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 108
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17HER4AVYM.JCYF2O",
      "appliedAt": "2026-10-22T19:53:55.570Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "abfd48e01ccb398bd4d0ce258587fef57d5d9ccaad252d2e0052f602c4745e78"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:55.338Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:55.448Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:55.451Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:55.571Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:55.573Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:55.338Z",
  "updatedAt": "2026-10-22T19:53:55.573Z",
  "duplicate": false
}
  32. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request 5b56cfc91218 · processing 0.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  33. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request ee25bd5f125d · processing 14.05ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-owner-cannot-accept-own-risk: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 14.05ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "179",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-owner-cannot-accept-own-risk: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_cfe2d133fc0844689f8214c454",
    "client_msg_id": "cli_23d2ff664221450cafc41cd72e",
    "name": "item-3cd53c",
    "old_name": "Sample Old",
    "parent_user_id": "par_e053b77dac104b7884987c6a98",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17HER4AVYM.JCYF2O"
}
  34. · POST app request /invocations · owner cannot accept own risk · HTTP 404
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "owner-cannot-accept-own-risk-vr_14858015802a4bd8bc7aff4532274dff",
  "actionId": "security.accept_risk:acme/api#1",
  "value": "approve",
  "userId": "api-lead"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:55.917062+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "177",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "owner-cannot-accept-own-risk-vr_14858015802a4bd8bc7aff4532274dff",
  "actionId": "security.accept_risk:acme/api#1",
  "value": "approve",
  "userId": "api-lead"
}

    Recorded response · HTTP 404

    {
  "result": "no_such_signal",
  "runId": "owner-cannot-accept-own-risk-vr_14858015802a4bd8bc7aff4532274dff",
  "actionId": "security.accept_risk:acme/api#1"
}
  35. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/accepted_risk_dismisses_alert/runs · accepted risk dismisses alert · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/accepted_risk_dismisses_alert/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:56.126585+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  36. · POST app request /invocations · accepted risk dismisses alert · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "accepted-risk-dismisses-alert-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-accepted-risk-dismisses-alert",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ],
    "acceptanceRequests": [
      "acme/api#1"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "accepted_risk_dismisses_alert"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:56.592980+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "479",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "accepted-risk-dismisses-alert-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-accepted-risk-dismisses-alert",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ],
    "acceptanceRequests": [
      "acme/api#1"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "accepted_risk_dismisses_alert"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "accepted-risk-dismisses-alert-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "accepted_risk_dismisses_alert"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 114
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17FNE1O09F.PB925G",
      "appliedAt": "2026-10-22T19:53:56.482Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "49af6a3f3e68c9b5aaffa38751c1518ed362dc970c9be90681c36f5081561c77"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:56.241Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:56.357Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:56.360Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:56.482Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:56.484Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:56.241Z",
  "updatedAt": "2026-10-22T19:53:56.484Z",
  "duplicate": false
}
  37. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request 9b5cd258e843 · processing 0.18ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.18ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  38. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request f3bc295b6273 · processing 13.64ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-accepted-risk-dismisses-alert: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.64ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "180",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-accepted-risk-dismisses-alert: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_bd06068436494cb6989fb7ccd8",
    "client_msg_id": "cli_594f3328763749edae1762a4c6",
    "name": "item-7d7293",
    "old_name": "Sample Old",
    "parent_user_id": "par_17afd0c6aa074ac9b82c9164d6",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17FNE1O09F.PB925G"
}
  39. · POST app request /invocations · accepted risk dismisses alert · HTTP 404
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "signal",
  "runId": "accepted-risk-dismisses-alert-vr_14858015802a4bd8bc7aff4532274dff",
  "actionId": "security.accept_risk:acme/api#1",
  "value": "approve",
  "userId": "sec-lead"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:56.807853+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "178",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "signal",
  "runId": "accepted-risk-dismisses-alert-vr_14858015802a4bd8bc7aff4532274dff",
  "actionId": "security.accept_risk:acme/api#1",
  "value": "approve",
  "userId": "sec-lead"
}

    Recorded response · HTTP 404

    {
  "result": "no_such_signal",
  "runId": "accepted-risk-dismisses-alert-vr_14858015802a4bd8bc7aff4532274dff",
  "actionId": "security.accept_risk:acme/api#1"
}
  40. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/overdue_escalated/runs · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/overdue_escalated/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:57.043500+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  41. · POST app request /invocations · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-overdue-escalated",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "overdue_escalated"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:57.503718+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "407",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-overdue-escalated",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "overdue_escalated"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "overdue_escalated"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 124
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17B4WF3XEV.RVE657",
      "appliedAt": "2026-10-22T19:53:57.388Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "87372a76cc7ea29e2f624292e23c2d0a4483a3ff9e63491bab21c9fe71f6d29a"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:57.142Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:57.267Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:57.269Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:57.388Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:57.391Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:57.142Z",
  "updatedAt": "2026-10-22T19:53:57.391Z",
  "duplicate": false
}
  42. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request 827c93f0a230 · processing 0.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  43. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 1f900aa67f13 · processing 13.69ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-overdue-escalated: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.69ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "168",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-overdue-escalated: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_c5c86564b06e4b3d8ec4176758",
    "client_msg_id": "cli_43aab5d3178c4f6384b09bfd82",
    "name": "item-62120d",
    "old_name": "Sample Old",
    "parent_user_id": "par_c13207f03ef94e299a020148ec",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17B4WF3XEV.RVE657"
}
  44. · POST app request /invocations · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "tick"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:57.731359+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "17",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "12"
}

    Request body

    {
  "action": "tick"
}

    Recorded response · HTTP 200

    {
  "woken": []
}
  45. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/overdue_escalated/runs · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/overdue_escalated/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:58.039911+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "overdue_escalated"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 124
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17B4WF3XEV.RVE657",
          "appliedAt": "2026-10-22T19:53:57.388Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "87372a76cc7ea29e2f624292e23c2d0a4483a3ff9e63491bab21c9fe71f6d29a"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:57.142Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:57.267Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:57.269Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:57.388Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:57.391Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:57.142Z",
      "updatedAt": "2026-10-22T19:53:57.391Z"
    }
  ]
}
  46. · POST app request /invocations · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-overdue-escalated",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "overdue_escalated"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:58.550672+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "407",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-overdue-escalated",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "overdue_escalated"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "overdue_escalated"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 124
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17B4WF3XEV.RVE657",
      "appliedAt": "2026-10-22T19:53:57.388Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "a2c9f64bec5111e2944087867df956813aba65e74417deaab64485bf47075dcb"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:57.142Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:57.267Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:57.269Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:57.388Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:57.391Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:53:58.142Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:53:57.142Z",
  "updatedAt": "2026-10-22T19:53:58.142Z",
  "duplicate": true
}
  47. · POST app request /invocations · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "tick"
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:58.764378+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "17",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "12"
}

    Request body

    {
  "action": "tick"
}

    Recorded response · HTTP 200

    {
  "woken": []
}
  48. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/overdue_escalated/runs · overdue escalated · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/overdue_escalated/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:59.108458+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "overdue-escalated-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "overdue_escalated"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 124
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17B4WF3XEV.RVE657",
          "appliedAt": "2026-10-22T19:53:57.388Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "a2c9f64bec5111e2944087867df956813aba65e74417deaab64485bf47075dcb"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:57.142Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:57.267Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:57.269Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:57.388Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:57.391Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:53:58.142Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:53:57.142Z",
      "updatedAt": "2026-10-22T19:53:58.142Z"
    }
  ]
}
  49. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/github_unreadable_blocks/runs · github unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/github_unreadable_blocks/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:53:59.335893+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  50. · POST app request /invocations · github unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-github-unreadable-blocks",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "github_unreadable_blocks"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:00.226058+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "428",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-github-unreadable-blocks",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "github_unreadable_blocks"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "github_unreadable_blocks"
  },
  "duplicateStarts": 0,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 298
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17ULKBVZUH.I8EJZ0",
      "appliedAt": "2026-10-22T19:53:59.948Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 4,
    "head": "3d658d175ceb9253f919023057aa9db86bd3f4aaab3727cbb1de6254f592d315"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:59.466Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:59.765Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:59.768Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:59.948Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:59.951Z",
      "msg": "done (partial)"
    }
  ],
  "createdAt": "2026-10-22T19:53:59.466Z",
  "updatedAt": "2026-10-22T19:53:59.951Z",
  "duplicate": false
}
  51. · GET github request · github unreadable blocks · /repos/acme/api/dependabot/alerts · HTTP 404 · processing 0.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET '<GITHUB_TWIN_BASE_URL>/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL was not recorded. Provider processing: 0.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  52. · GET github request · provider traffic · /repos/acme/api/dependabot/alerts · HTTP 404 · request b23f7f46da01 · processing 0.15ms
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/sandbox/5825e3a8cf/repos/acme/api/dependabot/alerts' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 0.15ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    No body shown for this read.

    Recorded response · HTTP 404

    {
  "errors": [
    {
      "status": "404",
      "code": "EGeneral:Unknown method",
      "detail": "No route matches GET /repos/acme/api/dependabot/alerts"
    }
  ]
}
  53. · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 4f6d6dbd9772 · processing 13.96ms
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/sandbox/314a6b1517/api/chat.postMessage' \
  --header 'host: fetchsandbox.com' \
  --header 'user-agent: node' \
  --header 'accept: application/json' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'content-type: application/json; charset=utf-8' \
  --data-raw '{
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-github-unreadable-blocks: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL resolved from the saved run route. Provider processing: 13.96ms.

    Recorded request headers

    {
  "host": "fetchsandbox.com",
  "content-length": "175",
  "user-agent": "node",
  "accept": "application/json",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "content-type": "application/json; charset=utf-8"
}

    Recorded response headers

    Response headers were not saved in this run.

    Request body

    {
  "channel": "C0SECURITY1",
  "text": ":rotating_light: VULN-github-unreadable-blocks: alerts could not be read; no SLA is being tracked.",
  "unfurl_links": false,
  "unfurl_media": false
}

    Recorded response · HTTP 200

    {
  "channel": "C0SECURITY1",
  "message": {
    "bot_id": "bot_b808b0242f5c4c2b9c47c89954",
    "client_msg_id": "cli_585149e65d9042118f033da39b",
    "name": "item-d3df68",
    "old_name": "Sample Old",
    "parent_user_id": "par_82b6346145f143948ca6069ccc",
    "permalink": "my-resource",
    "reply_count": 0,
    "reply_users_count": 0,
    "text": "Sample text content",
    "ts": "sample-value",
    "type": "default",
    "unread_count": 0,
    "username": "acme-corp"
  },
  "ok": true,
  "ts": "17ULKBVZUH.I8EJZ0"
}
  54. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/github_unreadable_blocks/runs · github unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/github_unreadable_blocks/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:00.575448+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "github_unreadable_blocks"
      },
      "duplicateStarts": 0,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 298
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17ULKBVZUH.I8EJZ0",
          "appliedAt": "2026-10-22T19:53:59.948Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 4,
        "head": "3d658d175ceb9253f919023057aa9db86bd3f4aaab3727cbb1de6254f592d315"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:59.466Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:59.765Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:59.768Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:59.948Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:59.951Z",
          "msg": "done (partial)"
        }
      ],
      "createdAt": "2026-10-22T19:53:59.466Z",
      "updatedAt": "2026-10-22T19:53:59.951Z"
    }
  ]
}
  55. · POST app request /invocations · github unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-github-unreadable-blocks",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "github_unreadable_blocks"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:00.794868+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "428",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    {
  "action": "start",
  "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-github-unreadable-blocks",
    "repos": {
      "acme/api": {
        "ownerSlackId": "S_API_TEAM",
        "ownerLogins": [
          "api-lead"
        ]
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead",
      "api-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "github_unreadable_blocks"
  }
}

    Recorded response · HTTP 200

    {
  "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
  "workflow": "vulnerability-remediation",
  "metadata": {
    "organization": "Acme",
    "company": "Acme Corporation",
    "environment": "unconfigured",
    "owner": "unassigned",
    "department": "unassigned",
    "ownerTeam": "unassigned",
    "oncall": "unassigned",
    "version": "unversioned",
    "sourceCommit": "unrecorded"
  },
  "org": "IT Security",
  "team": "appsec",
  "phase": "DONE",
  "closed": true,
  "outcome": "partial",
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "github_unreadable_blocks"
  },
  "duplicateStarts": 1,
  "agents": [
    {
      "name": "alerts",
      "status": "failed",
      "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
      "errorCode": "github:EGeneral:Unknown method",
      "durationMs": 298
    }
  ],
  "actions": [
    {
      "id": "slack.post_sweep",
      "kind": "slack.post_sweep",
      "provider": "slack",
      "agent": "alerts",
      "gate": "auto",
      "status": "applied",
      "summary": {
        "blocked": true
      },
      "attempts": 1,
      "ref": "17ULKBVZUH.I8EJZ0",
      "appliedAt": "2026-10-22T19:53:59.948Z",
      "reconciled": null
    }
  ],
  "counts": {
    "applied": 1,
    "failed": 0,
    "pendingApproval": 0,
    "skipped": 0,
    "rejected": 0,
    "scheduled": 0,
    "awaitingSignal": 0,
    "compensated": 0
  },
  "wakeAt": null,
  "audit": {
    "seq": 5,
    "head": "6a15967d20d81ccae65dda355a0b64094239b1683f4df95f81e00d965665c741"
  },
  "output": {
    "mode": "blocked"
  },
  "events": [
    {
      "at": "2026-10-22T19:53:59.466Z",
      "msg": "started by U_FETCHSANDBOX"
    },
    {
      "at": "2026-10-22T19:53:59.765Z",
      "msg": "agents: alerts=failed"
    },
    {
      "at": "2026-10-22T19:53:59.768Z",
      "msg": "planned 1 action(s): 0 need approval"
    },
    {
      "at": "2026-10-22T19:53:59.948Z",
      "msg": "slack.post_sweep: applied"
    },
    {
      "at": "2026-10-22T19:53:59.951Z",
      "msg": "done (partial)"
    },
    {
      "at": "2026-10-22T19:54:00.683Z",
      "msg": "duplicate start ignored"
    }
  ],
  "createdAt": "2026-10-22T19:53:59.466Z",
  "updatedAt": "2026-10-22T19:54:00.684Z",
  "duplicate": true
}
  56. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/github_unreadable_blocks/runs · github unreadable blocks · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/github_unreadable_blocks/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:01.122490+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": [
    {
      "runId": "github-unreadable-blocks-vr_14858015802a4bd8bc7aff4532274dff",
      "workflow": "vulnerability-remediation",
      "metadata": {
        "organization": "Acme",
        "company": "Acme Corporation",
        "environment": "unconfigured",
        "owner": "unassigned",
        "department": "unassigned",
        "ownerTeam": "unassigned",
        "oncall": "unassigned",
        "version": "unversioned",
        "sourceCommit": "unrecorded"
      },
      "org": "IT Security",
      "team": "appsec",
      "phase": "DONE",
      "closed": true,
      "outcome": "partial",
      "requestedBy": {
        "userId": "U_FETCHSANDBOX"
      },
      "labels": {
        "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
        "fs_case": "github_unreadable_blocks"
      },
      "duplicateStarts": 1,
      "agents": [
        {
          "name": "alerts",
          "status": "failed",
          "error": "github 404 EGeneral:Unknown method: GET /repos/acme/api/dependabot/alerts → 404 EGeneral:Unknown method",
          "errorCode": "github:EGeneral:Unknown method",
          "durationMs": 298
        }
      ],
      "actions": [
        {
          "id": "slack.post_sweep",
          "kind": "slack.post_sweep",
          "provider": "slack",
          "agent": "alerts",
          "gate": "auto",
          "status": "applied",
          "summary": {
            "blocked": true
          },
          "attempts": 1,
          "ref": "17ULKBVZUH.I8EJZ0",
          "appliedAt": "2026-10-22T19:53:59.948Z",
          "reconciled": null
        }
      ],
      "counts": {
        "applied": 1,
        "failed": 0,
        "pendingApproval": 0,
        "skipped": 0,
        "rejected": 0,
        "scheduled": 0,
        "awaitingSignal": 0,
        "compensated": 0
      },
      "wakeAt": null,
      "audit": {
        "seq": 5,
        "head": "6a15967d20d81ccae65dda355a0b64094239b1683f4df95f81e00d965665c741"
      },
      "output": {
        "mode": "blocked"
      },
      "events": [
        {
          "at": "2026-10-22T19:53:59.466Z",
          "msg": "started by U_FETCHSANDBOX"
        },
        {
          "at": "2026-10-22T19:53:59.765Z",
          "msg": "agents: alerts=failed"
        },
        {
          "at": "2026-10-22T19:53:59.768Z",
          "msg": "planned 1 action(s): 0 need approval"
        },
        {
          "at": "2026-10-22T19:53:59.948Z",
          "msg": "slack.post_sweep: applied"
        },
        {
          "at": "2026-10-22T19:53:59.951Z",
          "msg": "done (partial)"
        },
        {
          "at": "2026-10-22T19:54:00.683Z",
          "msg": "duplicate start ignored"
        }
      ],
      "createdAt": "2026-10-22T19:53:59.466Z",
      "updatedAt": "2026-10-22T19:54:00.684Z"
    }
  ]
}
  57. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/invalid_input_rejected/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:01.632670+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  58. · POST app request /invocations · invalid input rejected · HTTP 400
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "invalid-input-rejected-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-x-y",
    "repos": {
      "not a repo": {
        "ownerSlackId": "S_X"
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "invalid_input_rejected"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:02.073147+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "360",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "78"
}

    Request body

    {
  "action": "start",
  "runId": "invalid-input-rejected-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-x-y",
    "repos": {
      "not a repo": {
        "ownerSlackId": "S_X"
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "invalid_input_rejected"
  }
}

    Recorded response · HTTP 400

    {
  "error": "invalid input",
  "issues": [
    "repos.not a repo: Invalid key in record"
  ]
}
  59. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/invalid_input_rejected/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:02.659142+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}
  60. · POST app request /invocations · invalid input rejected · HTTP 400
    View sanitized request and response

    Curl-style request view

    curl --request POST 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/invocations' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]' \
  --header 'content-type: application/json' \
  --data-raw '{
  "action": "start",
  "runId": "invalid-input-rejected-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-x-y",
    "repos": {
      "not a repo": {
        "ownerSlackId": "S_X"
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "invalid_input_rejected"
  }
}'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:03.124522+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]",
  "content-length": "360",
  "content-type": "application/json"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "78"
}

    Request body

    {
  "action": "start",
  "runId": "invalid-input-rejected-vr_14858015802a4bd8bc7aff4532274dff",
  "input": {
    "sweepId": "VULN-x-y",
    "repos": {
      "not a repo": {
        "ownerSlackId": "S_X"
      }
    },
    "securityChannel": "C0SECURITY1",
    "securityLeads": [
      "sec-lead"
    ]
  },
  "requestedBy": {
    "userId": "U_FETCHSANDBOX"
  },
  "labels": {
    "fs_run": "vr_14858015802a4bd8bc7aff4532274dff",
    "fs_case": "invalid_input_rejected"
  }
}

    Recorded response · HTTP 400

    {
  "error": "invalid input",
  "issues": [
    "repos.not a repo: Invalid key in record"
  ]
}
  61. · GET app request /verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
    View sanitized request and response

    Curl-style request view

    curl --request GET 'https://fetchsandbox.com/api/relay/16685a46a985ca141e69fcb2850b07970a645d75ac3c0cc5/verify/runs/vr_14858015802a4bd8bc7aff4532274dff/cases/invalid_input_rejected/runs' \
  --header 'accept: */*' \
  --header 'user-agent: python-httpx/0.28.1' \
  --header 'host: fetchsandbox.com' \
  --header 'x-flow-run-id: vr_14858015802a4bd8bc7aff4532274dff' \
  --header 'x-fetchsandbox-relay: [redacted]' \
  --header 'authorization: [redacted]'

    This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.

    Target URL recorded at execution. Response finished: 2026-10-22T19:54:03.501312+00:00.

    Recorded request headers

    {
  "accept": "*/*",
  "user-agent": "python-httpx/0.28.1",
  "host": "fetchsandbox.com",
  "x-flow-run-id": "vr_14858015802a4bd8bc7aff4532274dff",
  "x-fetchsandbox-relay": "[redacted]",
  "authorization": "[redacted]"
}

    Recorded response headers

    {
  "content-type": "application/json",
  "content-length": "11"
}

    Request body

    This request had no body.

    Recorded response · HTTP 200

    {
  "runs": []
}

Expand a request to inspect its sanitized payload. Credentials and personal data stay hidden.

Timestamps reflect when the sandbox recorded each request, not the order your app triggered them.

  • Verification covers the declared HTTP actions and state reads in this run.
  • The app version shown was supplied by the app itself, not independently checked.
  • Passing all checks in this run does not certify the whole app as production-ready.
  • The verifier session does not survive a restart. This says nothing about the durability of the app under test.
  • App state shown here is what the app's own endpoint reported. It is not independently checked against the database.

Sanitized summary. Expand a timeline event to inspect the safe request and response fields; sensitive provider and application data stays hidden.