Workflow verification incomplete
This receipt shows the requests we made, what the app reported back, and which checks passed or failed. It covers what ran in this sandbox session against the rules we set.
Failing
Each check was set up before the run. This shows what we tried, what came back, and which rule it was checked against.
This receipt covers the checks in this run only. Passing all checks does not certify the whole app as production-ready.
Test scenarios
An access request is recorded against its statutory deadline
baselineWhat we probed
An access request is recorded against its statutory deadline
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocations
Expected vs actual
- Expected
- An access request is recorded against its statutory deadline
- Actual
- expected exactly 1, found 1; stable under 2 repeats (1)
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-baseline",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
}
}Server returned
HTTP 200
{
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 199
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 427
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 180
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-baseline",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1e676ba0-a13a-4b50-a894-ca63885281c6",
"appliedAt": "2026-10-22T20:21:59.185Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17K3WF22HS.2H14UM",
"appliedAt": "2026-10-22T20:21:59.348Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "b9f3315f33977d38afb10cf5117f87e95f5222fae873f53b5af38ad4924343af"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:21:58.593Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:21:59.028Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:21:59.031Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:21:59.186Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:21:59.348Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:21:59.351Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:21:58.593Z",
"updatedAt": "2026-10-22T20:21:59.351Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "495",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-baseline",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 199
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 427
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 180
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-baseline",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1e676ba0-a13a-4b50-a894-ca63885281c6",
"appliedAt": "2026-10-22T20:21:59.185Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17K3WF22HS.2H14UM",
"appliedAt": "2026-10-22T20:21:59.348Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "b9f3315f33977d38afb10cf5117f87e95f5222fae873f53b5af38ad4924343af"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:21:58.593Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:21:59.028Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:21:59.031Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:21:59.186Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:21:59.348Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:21:59.351Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:21:58.593Z",
"updatedAt": "2026-10-22T20:21:59.351Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
04POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-baseline",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
}
}Server returned
HTTP 200
{
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 199
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 427
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 180
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-baseline",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1e676ba0-a13a-4b50-a894-ca63885281c6",
"appliedAt": "2026-10-22T20:21:59.185Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17K3WF22HS.2H14UM",
"appliedAt": "2026-10-22T20:21:59.348Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "f431e48a44d3ec1f770a294a50319954226a475124c01689f8256d55692d719c"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:21:58.593Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:21:59.028Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:21:59.031Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:21:59.186Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:21:59.348Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:21:59.351Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:21:59.913Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:21:58.593Z",
"updatedAt": "2026-10-22T20:21:59.913Z",
"duplicate": true
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "495",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-baseline",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
05GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "baseline"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 199
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 427
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 180
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-baseline",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1e676ba0-a13a-4b50-a894-ca63885281c6",
"appliedAt": "2026-10-22T20:21:59.185Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17K3WF22HS.2H14UM",
"appliedAt": "2026-10-22T20:21:59.348Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "f431e48a44d3ec1f770a294a50319954226a475124c01689f8256d55692d719c"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:21:58.593Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:21:59.028Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:21:59.031Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:21:59.186Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:21:59.348Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:21:59.351Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:21:59.913Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:21:58.593Z",
"updatedAt": "2026-10-22T20:21:59.913Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
baselineApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
An access request is recorded against its statutory deadline
expected exactly 1, found 1; stable under 2 repeats (1)
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "112858093844",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "317",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_KHT1HTNLZ23OE8L9",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 32,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-baseline: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-baseline, received 2026-10-22, due 2026-11-21. Subject ref 124c82e78d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-baseline: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-baseline, received 2026-10-22, due 2026-11-21. Subject ref 124c82e78d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "1e676ba0-a13a-4b50-a894-ca63885281c6"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "320",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-baseline: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-baseline, received 2026-10-22, due 2026-11-21. Subject ref 124c82e78d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-baseline: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_f6c6b09693dc440b891c834227",
"client_msg_id": "cli_889761dd5cc64d749d87d984ea",
"name": "item-e9593a",
"old_name": "Sample Old",
"parent_user_id": "par_eef8738937b34c889fa2fa7b7c",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "17K3WF22HS.2H14UM"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "214",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-baseline: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
The subject is found in CRM, billing and support, and the request waits for identity
discovery_completeWhat we probed
The subject is found in CRM, billing and support, and the request waits for identity
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocations
Expected vs actual
- Expected
- The subject is found in CRM, billing and support, and the request waits for identity
- Actual
- expected exactly 1, found 0; stable under 2 repeats (0)
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-discovery-complete",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
}
}Server returned
HTTP 200
{
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 215
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 355
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 119
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-discovery-complete",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef",
"appliedAt": "2026-10-22T20:22:01.455Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "179SA2V9LQ.96X1M3",
"appliedAt": "2026-10-22T20:22:01.723Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "543e8f34d0ca36561529f4db0121da6f2f4393e6156e61edb96f1b8192bf08fb"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:00.895Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:01.252Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:01.255Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:01.455Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:01.723Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:01.725Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:00.895Z",
"updatedAt": "2026-10-22T20:22:01.725Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "535",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-discovery-complete",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 215
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 355
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 119
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-discovery-complete",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef",
"appliedAt": "2026-10-22T20:22:01.455Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "179SA2V9LQ.96X1M3",
"appliedAt": "2026-10-22T20:22:01.723Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "543e8f34d0ca36561529f4db0121da6f2f4393e6156e61edb96f1b8192bf08fb"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:00.895Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:01.252Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:01.255Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:01.455Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:01.723Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:01.725Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:00.895Z",
"updatedAt": "2026-10-22T20:22:01.725Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
04POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-discovery-complete",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
}
}Server returned
HTTP 200
{
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 215
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 355
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 119
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-discovery-complete",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef",
"appliedAt": "2026-10-22T20:22:01.455Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "179SA2V9LQ.96X1M3",
"appliedAt": "2026-10-22T20:22:01.723Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "d805a194b47a44b350413b95ee60c8e26b8d1488cdc64d5efa84d637ac0fc06d"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:00.895Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:01.252Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:01.255Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:01.455Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:01.723Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:01.725Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:22:02.576Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:22:00.895Z",
"updatedAt": "2026-10-22T20:22:02.577Z",
"duplicate": true
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "535",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-discovery-complete",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
05GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "discovery_complete"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 215
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 355
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 119
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-discovery-complete",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef",
"appliedAt": "2026-10-22T20:22:01.455Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "179SA2V9LQ.96X1M3",
"appliedAt": "2026-10-22T20:22:01.723Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "d805a194b47a44b350413b95ee60c8e26b8d1488cdc64d5efa84d637ac0fc06d"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:00.895Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:01.252Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:01.255Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:01.455Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:01.723Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:01.725Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:22:02.576Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:22:00.895Z",
"updatedAt": "2026-10-22T20:22:02.577Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
discovery_completeApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
The subject is found in CRM, billing and support, and the request waits for identity
expected exactly 1, found 0; stable under 2 repeats (0)
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_T2Q8AHZOT2B817W9",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 93,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "240034172558",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "327",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-discovery-complete: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-discovery-complete, received 2026-10-22, due 2026-11-21. Subject ref ce78194896.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-discovery-complete: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-discovery-complete, received 2026-10-22, due 2026-11-21. Subject ref ce78194896.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "7cc7bdde-814c-42d4-95aa-1079bcb767ef"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "340",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-discovery-complete: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-discovery-complete, received 2026-10-22, due 2026-11-21. Subject ref ce78194896.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-discovery-complete: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_5fb8a840044e4140a859abe947",
"client_msg_id": "cli_fefa52fc1c374c4a8c8074e5aa",
"name": "item-e57073",
"old_name": "Sample Old",
"parent_user_id": "par_29bf4c0811f0419db52c21518c",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "179SA2V9LQ.96X1M3"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "224",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-discovery-complete: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Once identity is confirmed the export is assembled and uploaded to Box
verified_export_uploadedWhat we probed
Once identity is confirmed the export is assembled and uploaded to Box
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocationsPOST /invocations
Expected vs actual
- Expected
- Once identity is confirmed the export is assembled and uploaded to Box
- Actual
- app action expected HTTP 200, received 404
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verified_export_uploaded/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verified_export_uploaded/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verified_export_uploaded/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verified_export_uploaded/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-verified-export-uploaded",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "verified_export_uploaded"
}
}Server returned
HTTP 200
{
"runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "verified_export_uploaded"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 741
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 846
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 765
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-verified-export-uploaded",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "6150fc46-a193-4655-bd65-4e9c36981c36",
"appliedAt": "2026-10-22T20:22:04.380Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17JAUSZTT4.6ZHS6S",
"appliedAt": "2026-10-22T20:22:04.507Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "8c564fd765ef737643424ad2d81341da61fe07cb368fa7094fa45c5b19049efe"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:03.370Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:04.218Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:04.220Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:04.380Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:04.507Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:04.509Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:03.370Z",
"updatedAt": "2026-10-22T20:22:04.509Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "559",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-verified-export-uploaded",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "verified_export_uploaded"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03POST /invocations404
We sent
POST /invocations
{
"action": "signal",
"runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-verified-export-uploaded",
"value": "approve",
"userId": "U_VERIFIER"
}Server returned
HTTP 404
{
"result": "no_such_signal",
"runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-verified-export-uploaded"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "197",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "signal",
"runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-verified-export-uploaded",
"value": "approve",
"userId": "U_VERIFIER"
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
verified_export_uploadedApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
Once identity is confirmed the export is assembled and uploaded to Box
app action expected HTTP 200, received 404
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_T5ZZADG02H5ROTGF",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 83,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "809858970162",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "333",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-verified-export-uploaded: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-verified-export-uploaded, received 2026-10-22, due 2026-11-21. Subject ref c27e695975.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-verified-export-uploaded: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-verified-export-uploaded, received 2026-10-22, due 2026-11-21. Subject ref c27e695975.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "6150fc46-a193-4655-bd65-4e9c36981c36"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "352",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-verified-export-uploaded: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-verified-export-uploaded, received 2026-10-22, due 2026-11-21. Subject ref c27e695975.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-verified-export-uploaded: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_0fe6a709ec204275af28d2659b",
"client_msg_id": "cli_03c4cafbe8a0443389bcb31576",
"name": "item-02f694",
"old_name": "Sample Old",
"parent_user_id": "par_685cf7adca034784bfb0b3c52a",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "17JAUSZTT4.6ZHS6S"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "230",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-verified-export-uploaded: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Whoever confirmed identity can't also release the export
verifier_cannot_releaseWhat we probed
Whoever confirmed identity can't also release the export
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocationsPOST /invocationsPOST /invocations
Expected vs actual
- Expected
- Whoever confirmed identity can't also release the export
- Actual
- app action expected HTTP 200, received 404
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verifier_cannot_release/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verifier_cannot_release/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verifier_cannot_release/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verifier_cannot_release/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-verifier-cannot-release",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "verifier_cannot_release"
}
}Server returned
HTTP 200
{
"runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "verifier_cannot_release"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 187
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 388
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 139
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-verifier-cannot-release",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "7a2c8d1d-d5d6-424f-b212-483e5f99c342",
"appliedAt": "2026-10-22T20:22:05.727Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17VS1R00OF.IGY0U9",
"appliedAt": "2026-10-22T20:22:05.891Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "a7ad11cc6a3bd3dcbe0b3f1f47fa8b5548e1acc254c7813a6d80c12e7dff37c5"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:05.184Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:05.574Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:05.576Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:05.728Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:05.891Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:05.893Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:05.184Z",
"updatedAt": "2026-10-22T20:22:05.893Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "555",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-verifier-cannot-release",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "verifier_cannot_release"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03POST /invocations404
We sent
POST /invocations
{
"action": "signal",
"runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-verifier-cannot-release",
"value": "approve",
"userId": "U_ANALYST"
}Server returned
HTTP 404
{
"result": "no_such_signal",
"runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-verifier-cannot-release"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "194",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "signal",
"runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-verifier-cannot-release",
"value": "approve",
"userId": "U_ANALYST"
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
verifier_cannot_releaseApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
Whoever confirmed identity can't also release the export
app action expected HTTP 200, received 404
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "003510472299",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "332",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_DM37E4HU5CYU64P8",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 62,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-verifier-cannot-release: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-verifier-cannot-release, received 2026-10-22, due 2026-11-21. Subject ref 576282a91e.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-verifier-cannot-release: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-verifier-cannot-release, received 2026-10-22, due 2026-11-21. Subject ref 576282a91e.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "7a2c8d1d-d5d6-424f-b212-483e5f99c342"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "350",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-verifier-cannot-release: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-verifier-cannot-release, received 2026-10-22, due 2026-11-21. Subject ref 576282a91e.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-verifier-cannot-release: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_8b52104e12014fb3bfc02fc31e",
"client_msg_id": "cli_22044262659c4eefb118076362",
"name": "item-2c7342",
"old_name": "Sample Old",
"parent_user_id": "par_32a7349dc6a24e53865f263a2c",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "17VS1R00OF.IGY0U9"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "229",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-verifier-cannot-release: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
A second analyst's release creates an expiring link and a response draft (not sent)
release_drafts_responseWhat we probed
A second analyst's release creates an expiring link and a response draft (not sent)
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocationsPOST /invocationsPOST /invocations
Expected vs actual
- Expected
- A second analyst's release creates an expiring link and a response draft (not sent)
- Actual
- app action expected HTTP 200, received 404
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/release_drafts_response/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/release_drafts_response/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/release_drafts_response/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/release_drafts_response/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-release-drafts-response",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "release_drafts_response"
}
}Server returned
HTTP 200
{
"runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "release_drafts_response"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 137
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 309
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 185
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-release-drafts-response",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "75d97652-24d2-428c-8aea-7fe2ec2e2616",
"appliedAt": "2026-10-22T20:22:07.000Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17Y4VAPX2B.05ZDJV",
"appliedAt": "2026-10-22T20:22:07.138Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "a0827a8512518fb909540b4e29976d16d01ba31f5e7f571ea7c48aabef4cb534"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:06.546Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:06.857Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:06.860Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:07.000Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:07.138Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:07.140Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:06.546Z",
"updatedAt": "2026-10-22T20:22:07.140Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "555",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-release-drafts-response",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "release_drafts_response"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03POST /invocations404
We sent
POST /invocations
{
"action": "signal",
"runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-release-drafts-response",
"value": "approve",
"userId": "U_VERIFIER"
}Server returned
HTTP 404
{
"result": "no_such_signal",
"runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-release-drafts-response"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "195",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "signal",
"runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1",
"actionId": "privacy.verify_identity:DSAR-release-drafts-response",
"value": "approve",
"userId": "U_VERIFIER"
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
release_drafts_responseApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
A second analyst's release creates an expiring link and a response draft (not sent)
app action expected HTTP 200, received 404
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "466539223104",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "332",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_TWKYL42XH7OFV4A4",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 26,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-release-drafts-response: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-release-drafts-response, received 2026-10-22, due 2026-11-21. Subject ref 10b0155eca.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-release-drafts-response: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-release-drafts-response, received 2026-10-22, due 2026-11-21. Subject ref 10b0155eca.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "75d97652-24d2-428c-8aea-7fe2ec2e2616"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "350",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-release-drafts-response: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-release-drafts-response, received 2026-10-22, due 2026-11-21. Subject ref 10b0155eca.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-release-drafts-response: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_3c7ffaba4c4a412baf951127c2",
"client_msg_id": "cli_fc051b793e0e4a0b886867796b",
"name": "item-5bd670",
"old_name": "Sample Old",
"parent_user_id": "par_49ce41c760ef43c0b1413ea4bc",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "17Y4VAPX2B.05ZDJV"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "229",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-release-drafts-response: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
A request still open three days before the deadline is escalated (needs clock control)
deadline_escalationWhat we probed
A request still open three days before the deadline is escalated (needs clock control)
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocationsPOST /invocations
Expected vs actual
- Expected
- A request still open three days before the deadline is escalated (needs clock control)
- Actual
- expected exactly 1, found 0; stable under 2 repeats (0)
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-deadline-escalation",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
}
}Server returned
HTTP 200
{
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 180
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 285
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 194
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-deadline-escalation",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "b3791acd-2035-4428-af07-d61fd145d081",
"appliedAt": "2026-10-22T20:22:08.217Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17W47C79DT.2IJ194",
"appliedAt": "2026-10-22T20:22:08.344Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "91fbe11322238d74c75f12e2f3ef516eba7e83da7bcb93a5899301540281c6c8"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:07.784Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:08.071Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:08.074Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:08.217Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:08.344Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:08.346Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:07.784Z",
"updatedAt": "2026-10-22T20:22:08.346Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "539",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-deadline-escalation",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03POST /invocations200
We sent
POST /invocations
{
"action": "tick"
}Server returned
HTTP 200
{
"woken": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "17",
"content-type": "application/json"
}{
"content-type": "application/json",
"content-length": "12"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "tick"
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
04GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 180
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 285
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 194
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-deadline-escalation",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "b3791acd-2035-4428-af07-d61fd145d081",
"appliedAt": "2026-10-22T20:22:08.217Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17W47C79DT.2IJ194",
"appliedAt": "2026-10-22T20:22:08.344Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "91fbe11322238d74c75f12e2f3ef516eba7e83da7bcb93a5899301540281c6c8"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:07.784Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:08.071Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:08.074Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:08.217Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:08.344Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:08.346Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:07.784Z",
"updatedAt": "2026-10-22T20:22:08.346Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
05POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-deadline-escalation",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
}
}Server returned
HTTP 200
{
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 180
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 285
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 194
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-deadline-escalation",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "b3791acd-2035-4428-af07-d61fd145d081",
"appliedAt": "2026-10-22T20:22:08.217Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17W47C79DT.2IJ194",
"appliedAt": "2026-10-22T20:22:08.344Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "899e65c6e51ae2ec7d8afeda8d0f31aac9f7a380282be6c1f9e920c64c0e4ed4"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:07.784Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:08.071Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:08.074Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:08.217Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:08.344Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:08.346Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:22:09.079Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:22:07.784Z",
"updatedAt": "2026-10-22T20:22:09.079Z",
"duplicate": true
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "539",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-deadline-escalation",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
06POST /invocations200
We sent
POST /invocations
{
"action": "tick"
}Server returned
HTTP 200
{
"woken": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "17",
"content-type": "application/json"
}{
"content-type": "application/json",
"content-length": "12"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "tick"
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
07GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "deadline_escalation"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 180
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 285
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 194
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-deadline-escalation",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "b3791acd-2035-4428-af07-d61fd145d081",
"appliedAt": "2026-10-22T20:22:08.217Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "17W47C79DT.2IJ194",
"appliedAt": "2026-10-22T20:22:08.344Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "899e65c6e51ae2ec7d8afeda8d0f31aac9f7a380282be6c1f9e920c64c0e4ed4"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:07.784Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:08.071Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:08.074Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:08.217Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:08.344Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:08.346Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:22:09.079Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:22:07.784Z",
"updatedAt": "2026-10-22T20:22:09.079Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
deadline_escalationApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
A request still open three days before the deadline is escalated (needs clock control)
expected exactly 1, found 0; stable under 2 repeats (0)
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_EGN9OLCIR3KGLY45",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 63,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "044622251451",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "328",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-deadline-escalation: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-deadline-escalation, received 2026-10-22, due 2026-11-21. Subject ref 9c9cc3e35d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-deadline-escalation: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-deadline-escalation, received 2026-10-22, due 2026-11-21. Subject ref 9c9cc3e35d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "b3791acd-2035-4428-af07-d61fd145d081"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "342",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-deadline-escalation: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-deadline-escalation, received 2026-10-22, due 2026-11-21. Subject ref 9c9cc3e35d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-deadline-escalation: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_3048015d29dc4161ab424ccce5",
"client_msg_id": "cli_c336db070c6c40219a1fb8f38c",
"name": "item-061d9d",
"old_name": "Sample Old",
"parent_user_id": "par_09bb2ca994a34a40b32171a02a",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "17W47C79DT.2IJ194"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "225",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-deadline-escalation: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
When support can't be searched nothing is exported and privacy-ops is told
support_unavailable_blocksWhat we probed
When support can't be searched nothing is exported and privacy-ops is told
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
Declared zendesk fault: rate_limited.
POST /invocations
Expected vs actual
- Expected
- When support can't be searched nothing is exported and privacy-ops is told
- Actual
- expected exactly 1, found 1; stable under 2 repeats (1)
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-support-unavailable-blocks",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
}
}Server returned
HTTP 200
{
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 222
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 302
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 153
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-support-unavailable-blocks",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1dc7b29f-702a-4c40-a812-c943db8387b7",
"appliedAt": "2026-10-22T20:22:10.575Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "172D2T7CXV.EEFXXP",
"appliedAt": "2026-10-22T20:22:10.704Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "270671ccf856652063fa2335b4172f2c92ab962a426b1ec2c187387291cc3356"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:10.113Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:10.417Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:10.419Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:10.575Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:10.704Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:10.706Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:10.113Z",
"updatedAt": "2026-10-22T20:22:10.706Z",
"duplicate": false
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "567",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-support-unavailable-blocks",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03zendesk · GET /api/v2/search.json404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET '<ZENDESK_TWIN_BASE_URL>/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
04GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
},
"duplicateStarts": 0,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 222
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 302
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 153
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-support-unavailable-blocks",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1dc7b29f-702a-4c40-a812-c943db8387b7",
"appliedAt": "2026-10-22T20:22:10.575Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "172D2T7CXV.EEFXXP",
"appliedAt": "2026-10-22T20:22:10.704Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 5,
"head": "270671ccf856652063fa2335b4172f2c92ab962a426b1ec2c187387291cc3356"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:10.113Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:10.417Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:10.419Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:10.575Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:10.704Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:10.706Z",
"msg": "done (partial)"
}
],
"createdAt": "2026-10-22T20:22:10.113Z",
"updatedAt": "2026-10-22T20:22:10.706Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
05POST /invocations200
We sent
POST /invocations
{
"action": "start",
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-support-unavailable-blocks",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
}
}Server returned
HTTP 200
{
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 222
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 302
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 153
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-support-unavailable-blocks",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1dc7b29f-702a-4c40-a812-c943db8387b7",
"appliedAt": "2026-10-22T20:22:10.575Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "172D2T7CXV.EEFXXP",
"appliedAt": "2026-10-22T20:22:10.704Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "c3cc3e688dcbd995f48c239777bf9e7889435f1f010ab66f9af7a9491e579bca"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:10.113Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:10.417Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:10.419Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:10.575Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:10.704Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:10.706Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:22:11.257Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:22:10.113Z",
"updatedAt": "2026-10-22T20:22:11.257Z",
"duplicate": true
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "567",
"content-type": "application/json"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "DSAR-support-unavailable-blocks",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
06GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs
This request had no body.
Server returned
HTTP 200
{
"runs": [
{
"runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1",
"workflow": "dsar-export",
"metadata": {
"organization": "Acme",
"company": "Acme Corporation",
"environment": "unconfigured",
"owner": "unassigned",
"department": "unassigned",
"ownerTeam": "unassigned",
"oncall": "unassigned",
"version": "unversioned",
"sourceCommit": "unrecorded"
},
"org": "Legal",
"team": "privacy-ops",
"phase": "DONE",
"closed": true,
"outcome": "partial",
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "support_unavailable_blocks"
},
"duplicateStarts": 1,
"agents": [
{
"name": "crm",
"status": "ok",
"summary": "1 HubSpot contact",
"durationMs": 222
},
{
"name": "billing",
"status": "ok",
"summary": "1 customer(s), 0 invoice(s)",
"durationMs": 302
},
{
"name": "support",
"status": "failed",
"error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method",
"errorCode": "zendesk:EGeneral:Unknown method",
"durationMs": 153
}
],
"actions": [
{
"id": "asana.dsar_record",
"kind": "asana.dsar_record",
"provider": "asana",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"requestId": "DSAR-support-unavailable-blocks",
"deadline": "2026-11-21",
"complete": false
},
"attempts": 1,
"ref": "1dc7b29f-702a-4c40-a812-c943db8387b7",
"appliedAt": "2026-10-22T20:22:10.575Z",
"reconciled": null
},
{
"id": "slack.post_blocked",
"kind": "slack.post_blocked",
"provider": "slack",
"agent": "crm",
"gate": "auto",
"status": "applied",
"summary": {
"missing": [
"support (Zendesk)"
]
},
"attempts": 1,
"ref": "172D2T7CXV.EEFXXP",
"appliedAt": "2026-10-22T20:22:10.704Z",
"reconciled": null
}
],
"counts": {
"applied": 2,
"failed": 0,
"pendingApproval": 0,
"skipped": 0,
"rejected": 0,
"scheduled": 0,
"awaitingSignal": 0,
"compensated": 0
},
"wakeAt": null,
"audit": {
"seq": 6,
"head": "c3cc3e688dcbd995f48c239777bf9e7889435f1f010ab66f9af7a9491e579bca"
},
"output": {
"mode": "blocked",
"missing": [
"support (Zendesk)"
]
},
"events": [
{
"at": "2026-10-22T20:22:10.113Z",
"msg": "started by U_FETCHSANDBOX"
},
{
"at": "2026-10-22T20:22:10.417Z",
"msg": "agents: crm=ok, billing=ok, support=failed"
},
{
"at": "2026-10-22T20:22:10.419Z",
"msg": "planned 2 action(s): 0 need approval"
},
{
"at": "2026-10-22T20:22:10.575Z",
"msg": "asana.dsar_record: applied"
},
{
"at": "2026-10-22T20:22:10.704Z",
"msg": "slack.post_blocked: applied"
},
{
"at": "2026-10-22T20:22:10.706Z",
"msg": "done (partial)"
},
{
"at": "2026-10-22T20:22:11.257Z",
"msg": "duplicate start ignored"
}
],
"createdAt": "2026-10-22T20:22:10.113Z",
"updatedAt": "2026-10-22T20:22:11.257Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
support_unavailable_blocksApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
When support can't be searched nothing is exported and privacy-ops is told
expected exactly 1, found 1; stable under 2 repeats (1)
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Provider traffic in the same time window (6)
These calls were recorded during the same request window as this check but are not directly linked to it. Timing alone is not proof that they caused or were caused by this check.
zendesk · GET /api/v2/search.json · HTTP 404
We sent
GET /api/v2/search.json
No body shown for this read.
Server returned
HTTP 404
{
"errors": [
{
"status": "404",
"code": "EGeneral:Unknown method",
"detail": "No route matches GET /api/v2/search.json"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/customers · HTTP 200
We sent
GET /v1/customers
No body shown for this read.
Server returned
HTTP 200
{
"data": [
{
"email": "[email protected]",
"name": "Sam Subject",
"id": "cus_ZLCXWWGQIJG9YGHX",
"address": null,
"balance": 0,
"business_name": "Sample Business",
"cash_balance": null,
"created": 41,
"currency": "USD",
"customer_account": null,
"default_source": null,
"delinquent": false,
"description": null,
"discount": null,
"individual_name": "Sample Individual",
"invoice_prefix": null,
"livemode": false,
"object": "customer",
"phone": "+14155550100",
"preferred_locales": null,
"shipping": null,
"tax_exempt": "exempt",
"test_clock": null
}
],
"has_more": false,
"object": "list",
"url": "/v1/customers"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/customers
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
hubspot · POST /crm/v3/objects/contacts/search · HTTP 200
We sent
POST /crm/v3/objects/contacts/search
{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}Server returned
HTTP 200
{
"total": 1,
"results": [
{
"properties": {
"email": "[email protected]",
"firstname": "Sam"
},
"id": "292253422493",
"archived": false,
"createdAt": "2019-10-30T03:30:17.883Z",
"updatedAt": "2019-12-07T16:50:06.678Z"
}
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search
{
"host": "fetchsandbox.com",
"content-length": "335",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"filterGroups": [
{
"filters": [
{
"propertyName": "email",
"operator": "EQ",
"value": "[email protected]"
}
]
}
],
"properties": [
"email",
"firstname",
"lastname",
"company",
"lifecyclestage",
"hs_lead_status",
"hubspot_owner_id",
"hs_email_domain",
"country",
"numberofemployees",
"notes_last_contacted",
"createdate"
],
"limit": 10
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
stripe · GET /v1/invoices · HTTP 200
We sent
GET /v1/invoices
No body shown for this read.
Server returned
HTTP 200
{
"data": [],
"has_more": false,
"object": "list",
"url": "/v1/invoices"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices
{
"host": "fetchsandbox.com",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1"
}Response headers were not saved in this run.
Rebuilt curl
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
asana · POST /tasks · HTTP 201
We sent
POST /tasks
{
"data": {
"name": "DSAR-support-unavailable-blocks: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-support-unavailable-blocks, received 2026-10-22, due 2026-11-21. Subject ref 2ac812467f.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}Server returned
HTTP 201
{
"data": {
"name": "DSAR-support-unavailable-blocks: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-support-unavailable-blocks, received 2026-10-22, due 2026-11-21. Subject ref 2ac812467f.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
},
"id": "1dc7b29f-702a-4c40-a812-c943db8387b7"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/efcfbae379/tasks
{
"host": "fetchsandbox.com",
"content-length": "356",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"data": {
"name": "DSAR-support-unavailable-blocks: GDPR access request, due 2026-11-21",
"notes": "GDPR access request DSAR-support-unavailable-blocks, received 2026-10-22, due 2026-11-21. Subject ref 2ac812467f.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.",
"workspace": "acme-privacy",
"due_on": "2026-11-21"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
slack · POST /api/chat.postMessage · HTTP 200
We sent
POST /api/chat.postMessage
{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-support-unavailable-blocks: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}Server returned
HTTP 200
{
"channel": "C0PRIVACY01",
"message": {
"bot_id": "bot_9ee05eb9b47041259bd547b1e1",
"client_msg_id": "cli_b4446560ed5248c7a14128feff",
"name": "item-066b32",
"old_name": "Sample Old",
"parent_user_id": "par_691e6ce9e0124243b6634ed005",
"permalink": "my-resource",
"reply_count": 0,
"reply_users_count": 0,
"text": "Sample text content",
"ts": "sample-value",
"type": "default",
"unread_count": 0,
"username": "acme-corp"
},
"ok": true,
"ts": "172D2T7CXV.EEFXXP"
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage
{
"host": "fetchsandbox.com",
"content-length": "232",
"user-agent": "node",
"accept": "application/json",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"content-type": "application/json; charset=utf-8"
}Response headers were not saved in this run.
Rebuilt curl
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \
--header 'host: fetchsandbox.com' \
--header 'user-agent: node' \
--header 'accept: application/json' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'content-type: application/json; charset=utf-8' \
--data-raw '{
"channel": "C0PRIVACY01",
"text": ":warning: DSAR-support-unavailable-blocks: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.",
"unfurl_links": false,
"unfurl_media": false
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
A malformed request id is rejected before any agent runs
invalid_input_rejectedWhat we probed
A malformed request id is rejected before any agent runs
How we probed it
Frozen intended probe steps. Recorded requests show what actually ran.
POST /invocations
Expected vs actual
- Expected
- A malformed request id is rejected before any agent runs
- Actual
- expected exactly 0, found 0; stable under 2 repeats (0)
Requests and responses
01GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
02POST /invocations400
We sent
POST /invocations
{
"action": "start",
"runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "please send my data",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "invalid_input_rejected"
}
}Server returned
HTTP 400
{
"error": "invalid input",
"issues": [
"requestId: request id like DSAR-2026-0042"
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "529",
"content-type": "application/json"
}{
"content-type": "application/json",
"content-length": "80"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "please send my data",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "invalid_input_rejected"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
03GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
04POST /invocations400
We sent
POST /invocations
{
"action": "start",
"runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "please send my data",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "invalid_input_rejected"
}
}Server returned
HTTP 400
{
"error": "invalid input",
"issues": [
"requestId: request id like DSAR-2026-0042"
]
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]",
"content-length": "529",
"content-type": "application/json"
}{
"content-type": "application/json",
"content-length": "80"
}Rebuilt curl
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \
--header 'accept: */*' \
--header 'user-agent: python-httpx/0.28.1' \
--header 'host: fetchsandbox.com' \
--header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \
--header 'x-fetchsandbox-relay: [redacted]' \
--header 'authorization: [redacted]' \
--header 'content-type: application/json' \
--data-raw '{
"action": "start",
"runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1",
"input": {
"requestId": "please send my data",
"subject": {
"email": "[email protected]",
"name": "Sam Subject"
},
"regulation": "gdpr",
"receivedAt": "2026-10-22T20:20:34.817Z",
"privacyChannel": "C0PRIVACY01",
"exportFolderId": "0",
"verifiers": [
"U_VERIFIER",
"U_ANALYST"
],
"analysts": [
"U_ANALYST",
"U_ANALYST_2"
]
},
"requestedBy": {
"userId": "U_FETCHSANDBOX"
},
"labels": {
"fs_run": "vr_898103f011f8472f969dde72d7c22bd1",
"fs_case": "invalid_input_rejected"
}
}'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
05GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs200
We sent
GET /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs
This request had no body.
Server returned
HTTP 200
{
"runs": []
}HTTP status is a response, not the scenario verdict. State shown here is reported by the app.
Technical details
Headers and timing
https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs
{
"accept": "*/*",
"user-agent": "python-httpx/0.28.1",
"host": "fetchsandbox.com",
"x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1",
"x-fetchsandbox-relay": "[redacted]",
"authorization": "[redacted]"
}{
"content-type": "application/json",
"content-length": "11"
}Rebuilt curl
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Evidence
- Run
vr_898103f011f8472f969dde72d7c22bd1- App version (declared)
acme-ops-dsar-export-1.0.0-06c2f09- Source receipt
- Source receipt ↗
Technical reference
invalid_input_rejectedApp version (declared): acme-ops-dsar-export-1.0.0-06c2f09
A malformed request id is rejected before any agent runs
expected exactly 0, found 0; stable under 2 repeats (0)
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Run details
Run vr_898103f011f8472f969dde72d7c22bd1
8 required checks for the declared application workflow. Results apply to the recorded observation windows.
3 passed · 2 failed · 3 not checked
Coverage beyond the declared checks
Passing these checks does not establish every production behavior.
- Normal successful behavior · Linked checks passed · baseline
- The right user gets the right access · Not checked · verified_export_uploaded, verifier_cannot_release
- Valid data and boundary values · Linked checks passed · invalid_input_rejected
- Correct amount, currency and quantity · Proposed as not applicable
- Duplicate requests and events · Proposed as not applicable
- Requests arriving together · Proposed as not applicable
- Out-of-order and stale events · Not checked · verifier_cannot_release
- Delayed or missing events · Linked check failed · deadline_escalation
- Provider authentication and permissions · Linked checks passed · support_unavailable_blocks
- Rate limits, server failures and timeouts · Linked checks passed · support_unavailable_blocks
- Completed action with a lost response · Proposed as not applicable
- Partial completion and recovery · Linked checks passed · support_unavailable_blocks
- Restart without losing or duplicating work · Proposed as not applicable
- Finding and repairing inconsistent state · Proposed as not applicable
- Cancellation, refunds and access · Proposed as not applicable
- Data ownership and privacy · Linked check failed · discovery_complete, release_drafts_response
- Test isolation and cleanup · Linked checks passed · baseline
Applicability comes from the proposed plan. Test results come from the recorded execution.
App version: acme-ops-dsar-export-1.0.0-06c2f09 (declared)
Measured run: 2026-10-22T20:21:58.244701+00:00 – 2026-10-22T20:22:13.010541+00:00
Recorded execution
Recorded application requests and state reads for the declared HTTP contract.
The timeline below merges all requests from this run, sorted by recorded timestamp.
Recorded requests and deliveries: 66/79 successful · checkpoints: 5/8 recorded
Why checks are unmeasured
- verified_export_uploaded: app action expected HTTP 200, received 404
- verifier_cannot_release: app action expected HTTP 200, received 404
- release_drafts_response: app action expected HTTP 200, received 404
Sanitized request and event timeline (79 events)
- · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs · baseline · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:21:58.484065+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · baseline · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-baseline", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:21:59.462817+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "495", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-baseline", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" } }Recorded response · HTTP 200
{ "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 199 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 427 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 180 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-baseline", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1e676ba0-a13a-4b50-a894-ca63885281c6", "appliedAt": "2026-10-22T20:21:59.185Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17K3WF22HS.2H14UM", "appliedAt": "2026-10-22T20:21:59.348Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "b9f3315f33977d38afb10cf5117f87e95f5222fae873f53b5af38ad4924343af" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:21:58.593Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:21:59.028Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:21:59.031Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:21:59.186Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:21:59.348Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:21:59.351Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:21:58.593Z", "updatedAt": "2026-10-22T20:21:59.351Z", "duplicate": false } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request dbee2116d150 · processing 2.01ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 2.01ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 693204e2f8a5 · processing 1.76ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.76ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "317", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "112858093844", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request ddeb49d13668 · processing 14.58ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.58ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_KHT1HTNLZ23OE8L9", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 32, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request c7128d6fee0a · processing 9.73ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 9.73ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request 9ee4dfc0e243 · processing 12.28ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-baseline: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-baseline, received 2026-10-22, due 2026-11-21. Subject ref 124c82e78d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 12.28ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "320", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-baseline: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-baseline, received 2026-10-22, due 2026-11-21. Subject ref 124c82e78d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-baseline: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-baseline, received 2026-10-22, due 2026-11-21. Subject ref 124c82e78d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "1e676ba0-a13a-4b50-a894-ca63885281c6" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 0023484580a1 · processing 12.29ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-baseline: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 12.29ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "214", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-baseline: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_f6c6b09693dc440b891c834227", "client_msg_id": "cli_889761dd5cc64d749d87d984ea", "name": "item-e9593a", "old_name": "Sample Old", "parent_user_id": "par_eef8738937b34c889fa2fa7b7c", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "17K3WF22HS.2H14UM" } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs · baseline · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:21:59.788684+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 199 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 427 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 180 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-baseline", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1e676ba0-a13a-4b50-a894-ca63885281c6", "appliedAt": "2026-10-22T20:21:59.185Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17K3WF22HS.2H14UM", "appliedAt": "2026-10-22T20:21:59.348Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "b9f3315f33977d38afb10cf5117f87e95f5222fae873f53b5af38ad4924343af" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:21:58.593Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:21:59.028Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:21:59.031Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:21:59.186Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:21:59.348Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:21:59.351Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:21:58.593Z", "updatedAt": "2026-10-22T20:21:59.351Z" } ] } - · POST app request /invocations · baseline · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-baseline", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:00.203963+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "495", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-baseline", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" } }Recorded response · HTTP 200
{ "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 199 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 427 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 180 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-baseline", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1e676ba0-a13a-4b50-a894-ca63885281c6", "appliedAt": "2026-10-22T20:21:59.185Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17K3WF22HS.2H14UM", "appliedAt": "2026-10-22T20:21:59.348Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "f431e48a44d3ec1f770a294a50319954226a475124c01689f8256d55692d719c" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:21:58.593Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:21:59.028Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:21:59.031Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:21:59.186Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:21:59.348Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:21:59.351Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:21:59.913Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:21:58.593Z", "updatedAt": "2026-10-22T20:21:59.913Z", "duplicate": true } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs · baseline · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/baseline/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:00.565258+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "baseline-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "baseline" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 199 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 427 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 180 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-baseline", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1e676ba0-a13a-4b50-a894-ca63885281c6", "appliedAt": "2026-10-22T20:21:59.185Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17K3WF22HS.2H14UM", "appliedAt": "2026-10-22T20:21:59.348Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "f431e48a44d3ec1f770a294a50319954226a475124c01689f8256d55692d719c" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:21:58.593Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:21:59.028Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:21:59.031Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:21:59.186Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:21:59.348Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:21:59.351Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:21:59.913Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:21:58.593Z", "updatedAt": "2026-10-22T20:21:59.913Z" } ] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs · discovery complete · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:00.785527+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · discovery complete · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-discovery-complete", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:01.884283+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "535", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-discovery-complete", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" } }Recorded response · HTTP 200
{ "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 215 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 355 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 119 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-discovery-complete", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef", "appliedAt": "2026-10-22T20:22:01.455Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "179SA2V9LQ.96X1M3", "appliedAt": "2026-10-22T20:22:01.723Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "543e8f34d0ca36561529f4db0121da6f2f4393e6156e61edb96f1b8192bf08fb" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:00.895Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:01.252Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:01.255Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:01.455Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:01.723Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:01.725Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:00.895Z", "updatedAt": "2026-10-22T20:22:01.725Z", "duplicate": false } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request f8ac4c9ab0ae · processing 1.65ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.65ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request d803bcffd937 · processing 16.86ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 16.86ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_T2Q8AHZOT2B817W9", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 93, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 16b963739751 · processing 1.66ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.66ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "327", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "240034172558", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request 20c9f891aca4 · processing 6.59ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 6.59ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request dede395450be · processing 23.72ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-discovery-complete: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-discovery-complete, received 2026-10-22, due 2026-11-21. Subject ref ce78194896.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 23.72ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "340", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-discovery-complete: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-discovery-complete, received 2026-10-22, due 2026-11-21. Subject ref ce78194896.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-discovery-complete: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-discovery-complete, received 2026-10-22, due 2026-11-21. Subject ref ce78194896.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "7cc7bdde-814c-42d4-95aa-1079bcb767ef" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 2ceea375988f · processing 73.32ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-discovery-complete: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 73.32ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "224", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-discovery-complete: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_5fb8a840044e4140a859abe947", "client_msg_id": "cli_fefa52fc1c374c4a8c8074e5aa", "name": "item-e57073", "old_name": "Sample Old", "parent_user_id": "par_29bf4c0811f0419db52c21518c", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "179SA2V9LQ.96X1M3" } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs · discovery complete · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:02.435559+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 215 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 355 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 119 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-discovery-complete", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef", "appliedAt": "2026-10-22T20:22:01.455Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "179SA2V9LQ.96X1M3", "appliedAt": "2026-10-22T20:22:01.723Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "543e8f34d0ca36561529f4db0121da6f2f4393e6156e61edb96f1b8192bf08fb" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:00.895Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:01.252Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:01.255Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:01.455Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:01.723Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:01.725Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:00.895Z", "updatedAt": "2026-10-22T20:22:01.725Z" } ] } - · POST app request /invocations · discovery complete · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-discovery-complete", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:02.707358+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "535", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-discovery-complete", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" } }Recorded response · HTTP 200
{ "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 215 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 355 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 119 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-discovery-complete", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef", "appliedAt": "2026-10-22T20:22:01.455Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "179SA2V9LQ.96X1M3", "appliedAt": "2026-10-22T20:22:01.723Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "d805a194b47a44b350413b95ee60c8e26b8d1488cdc64d5efa84d637ac0fc06d" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:00.895Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:01.252Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:01.255Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:01.455Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:01.723Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:01.725Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:22:02.576Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:22:00.895Z", "updatedAt": "2026-10-22T20:22:02.577Z", "duplicate": true } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs · discovery complete · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/discovery_complete/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:03.048919+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "discovery-complete-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "discovery_complete" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 215 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 355 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 119 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-discovery-complete", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "7cc7bdde-814c-42d4-95aa-1079bcb767ef", "appliedAt": "2026-10-22T20:22:01.455Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "179SA2V9LQ.96X1M3", "appliedAt": "2026-10-22T20:22:01.723Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "d805a194b47a44b350413b95ee60c8e26b8d1488cdc64d5efa84d637ac0fc06d" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:00.895Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:01.252Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:01.255Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:01.455Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:01.723Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:01.725Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:22:02.576Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:22:00.895Z", "updatedAt": "2026-10-22T20:22:02.577Z" } ] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verified_export_uploaded/runs · verified export uploaded · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verified_export_uploaded/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:03.268667+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · verified export uploaded · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-verified-export-uploaded", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "verified_export_uploaded" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:04.623339+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "559", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-verified-export-uploaded", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "verified_export_uploaded" } }Recorded response · HTTP 200
{ "runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "verified_export_uploaded" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 741 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 846 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 765 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-verified-export-uploaded", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "6150fc46-a193-4655-bd65-4e9c36981c36", "appliedAt": "2026-10-22T20:22:04.380Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17JAUSZTT4.6ZHS6S", "appliedAt": "2026-10-22T20:22:04.507Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "8c564fd765ef737643424ad2d81341da61fe07cb368fa7094fa45c5b19049efe" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:03.370Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:04.218Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:04.220Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:04.380Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:04.507Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:04.509Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:03.370Z", "updatedAt": "2026-10-22T20:22:04.509Z", "duplicate": false } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request d30ef10a1c2a · processing 582.99ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 582.99ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_T5ZZADG02H5ROTGF", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 83, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 9a109ceb4c4c · processing 1.94ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.94ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "333", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "809858970162", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request f79b85edbc5b · processing 2.03ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 2.03ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request 5b935295b119 · processing 8.44ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 8.44ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request 616a74985bb0 · processing 15.23ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-verified-export-uploaded: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-verified-export-uploaded, received 2026-10-22, due 2026-11-21. Subject ref c27e695975.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 15.23ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "352", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-verified-export-uploaded: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-verified-export-uploaded, received 2026-10-22, due 2026-11-21. Subject ref c27e695975.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-verified-export-uploaded: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-verified-export-uploaded, received 2026-10-22, due 2026-11-21. Subject ref c27e695975.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "6150fc46-a193-4655-bd65-4e9c36981c36" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 9096ecce0085 · processing 14.93ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-verified-export-uploaded: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.93ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "230", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-verified-export-uploaded: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_0fe6a709ec204275af28d2659b", "client_msg_id": "cli_03c4cafbe8a0443389bcb31576", "name": "item-02f694", "old_name": "Sample Old", "parent_user_id": "par_685cf7adca034784bfb0b3c52a", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "17JAUSZTT4.6ZHS6S" } - · POST app request /invocations · verified export uploaded · HTTP 404
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "signal", "runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-verified-export-uploaded", "value": "approve", "userId": "U_VERIFIER" }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:04.864126+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "197", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "signal", "runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-verified-export-uploaded", "value": "approve", "userId": "U_VERIFIER" }Recorded response · HTTP 404
{ "result": "no_such_signal", "runId": "verified-export-uploaded-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-verified-export-uploaded" } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verifier_cannot_release/runs · verifier cannot release · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/verifier_cannot_release/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:05.080955+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · verifier cannot release · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-verifier-cannot-release", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "verifier_cannot_release" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:06.000188+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "555", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-verifier-cannot-release", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "verifier_cannot_release" } }Recorded response · HTTP 200
{ "runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "verifier_cannot_release" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 187 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 388 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 139 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-verifier-cannot-release", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "7a2c8d1d-d5d6-424f-b212-483e5f99c342", "appliedAt": "2026-10-22T20:22:05.727Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17VS1R00OF.IGY0U9", "appliedAt": "2026-10-22T20:22:05.891Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "a7ad11cc6a3bd3dcbe0b3f1f47fa8b5548e1acc254c7813a6d80c12e7dff37c5" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:05.184Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:05.574Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:05.576Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:05.728Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:05.891Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:05.893Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:05.184Z", "updatedAt": "2026-10-22T20:22:05.893Z", "duplicate": false } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request 0a9a497bcbd4 · processing 1.86ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.86ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 6935b8fda2ed · processing 2.49ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 2.49ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "332", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "003510472299", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request 61655092caca · processing 15.75ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 15.75ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_DM37E4HU5CYU64P8", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 62, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request 52c79f2be3f6 · processing 6.03ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 6.03ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request 9d8d581e8609 · processing 15.28ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-verifier-cannot-release: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-verifier-cannot-release, received 2026-10-22, due 2026-11-21. Subject ref 576282a91e.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 15.28ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "350", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-verifier-cannot-release: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-verifier-cannot-release, received 2026-10-22, due 2026-11-21. Subject ref 576282a91e.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-verifier-cannot-release: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-verifier-cannot-release, received 2026-10-22, due 2026-11-21. Subject ref 576282a91e.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "7a2c8d1d-d5d6-424f-b212-483e5f99c342" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 5f66f2b78176 · processing 14.7ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-verifier-cannot-release: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.7ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "229", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-verifier-cannot-release: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_8b52104e12014fb3bfc02fc31e", "client_msg_id": "cli_22044262659c4eefb118076362", "name": "item-2c7342", "old_name": "Sample Old", "parent_user_id": "par_32a7349dc6a24e53865f263a2c", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "17VS1R00OF.IGY0U9" } - · POST app request /invocations · verifier cannot release · HTTP 404
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "signal", "runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-verifier-cannot-release", "value": "approve", "userId": "U_ANALYST" }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:06.233161+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "194", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "signal", "runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-verifier-cannot-release", "value": "approve", "userId": "U_ANALYST" }Recorded response · HTTP 404
{ "result": "no_such_signal", "runId": "verifier-cannot-release-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-verifier-cannot-release" } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/release_drafts_response/runs · release drafts response · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/release_drafts_response/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:06.443697+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · release drafts response · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-release-drafts-response", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "release_drafts_response" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:07.275775+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "555", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-release-drafts-response", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "release_drafts_response" } }Recorded response · HTTP 200
{ "runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "release_drafts_response" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 137 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 309 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 185 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-release-drafts-response", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "75d97652-24d2-428c-8aea-7fe2ec2e2616", "appliedAt": "2026-10-22T20:22:07.000Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17Y4VAPX2B.05ZDJV", "appliedAt": "2026-10-22T20:22:07.138Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "a0827a8512518fb909540b4e29976d16d01ba31f5e7f571ea7c48aabef4cb534" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:06.546Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:06.857Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:06.860Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:07.000Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:07.138Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:07.140Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:06.546Z", "updatedAt": "2026-10-22T20:22:07.140Z", "duplicate": false } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 833d176f0c64 · processing 1.73ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.73ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "332", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "466539223104", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request 094c5640743b · processing 2.3ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 2.3ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request 0d6f0a611951 · processing 16.06ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 16.06ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_TWKYL42XH7OFV4A4", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 26, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request 9b4dd043176a · processing 5.93ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 5.93ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request bfe9dfddf38c · processing 15.43ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-release-drafts-response: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-release-drafts-response, received 2026-10-22, due 2026-11-21. Subject ref 10b0155eca.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 15.43ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "350", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-release-drafts-response: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-release-drafts-response, received 2026-10-22, due 2026-11-21. Subject ref 10b0155eca.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-release-drafts-response: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-release-drafts-response, received 2026-10-22, due 2026-11-21. Subject ref 10b0155eca.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "75d97652-24d2-428c-8aea-7fe2ec2e2616" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 64bc0833cf36 · processing 14.25ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-release-drafts-response: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.25ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "229", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-release-drafts-response: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_3c7ffaba4c4a412baf951127c2", "client_msg_id": "cli_fc051b793e0e4a0b886867796b", "name": "item-5bd670", "old_name": "Sample Old", "parent_user_id": "par_49ce41c760ef43c0b1413ea4bc", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "17Y4VAPX2B.05ZDJV" } - · POST app request /invocations · release drafts response · HTTP 404
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "signal", "runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-release-drafts-response", "value": "approve", "userId": "U_VERIFIER" }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:07.480006+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "195", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "signal", "runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-release-drafts-response", "value": "approve", "userId": "U_VERIFIER" }Recorded response · HTTP 404
{ "result": "no_such_signal", "runId": "release-drafts-response-vr_898103f011f8472f969dde72d7c22bd1", "actionId": "privacy.verify_identity:DSAR-release-drafts-response" } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:07.685760+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-deadline-escalation", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:08.456410+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "539", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-deadline-escalation", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" } }Recorded response · HTTP 200
{ "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 180 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 285 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 194 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-deadline-escalation", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "b3791acd-2035-4428-af07-d61fd145d081", "appliedAt": "2026-10-22T20:22:08.217Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17W47C79DT.2IJ194", "appliedAt": "2026-10-22T20:22:08.344Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "91fbe11322238d74c75f12e2f3ef516eba7e83da7bcb93a5899301540281c6c8" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:07.784Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:08.071Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:08.074Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:08.217Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:08.344Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:08.346Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:07.784Z", "updatedAt": "2026-10-22T20:22:08.346Z", "duplicate": false } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request 90da01cd9177 · processing 16.42ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 16.42ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_EGN9OLCIR3KGLY45", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 63, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 593a02108b6c · processing 2.23ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 2.23ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "328", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "044622251451", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request 563a0ef7e005 · processing 2.18ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 2.18ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request a81ea5925c8a · processing 7.73ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 7.73ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request 9a7d56b307ac · processing 14.79ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-deadline-escalation: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-deadline-escalation, received 2026-10-22, due 2026-11-21. Subject ref 9c9cc3e35d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.79ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "342", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-deadline-escalation: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-deadline-escalation, received 2026-10-22, due 2026-11-21. Subject ref 9c9cc3e35d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-deadline-escalation: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-deadline-escalation, received 2026-10-22, due 2026-11-21. Subject ref 9c9cc3e35d.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "b3791acd-2035-4428-af07-d61fd145d081" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 8061f380f467 · processing 14.66ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-deadline-escalation: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.66ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "225", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-deadline-escalation: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_3048015d29dc4161ab424ccce5", "client_msg_id": "cli_c336db070c6c40219a1fb8f38c", "name": "item-061d9d", "old_name": "Sample Old", "parent_user_id": "par_09bb2ca994a34a40b32171a02a", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "17W47C79DT.2IJ194" } - · POST app request /invocations · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "tick" }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:08.672851+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "17", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json", "content-length": "12" }Request body
{ "action": "tick" }Recorded response · HTTP 200
{ "woken": [] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:08.977100+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 180 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 285 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 194 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-deadline-escalation", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "b3791acd-2035-4428-af07-d61fd145d081", "appliedAt": "2026-10-22T20:22:08.217Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17W47C79DT.2IJ194", "appliedAt": "2026-10-22T20:22:08.344Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "91fbe11322238d74c75f12e2f3ef516eba7e83da7bcb93a5899301540281c6c8" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:07.784Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:08.071Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:08.074Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:08.217Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:08.344Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:08.346Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:07.784Z", "updatedAt": "2026-10-22T20:22:08.346Z" } ] } - · POST app request /invocations · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-deadline-escalation", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:09.205886+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "539", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-deadline-escalation", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" } }Recorded response · HTTP 200
{ "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 180 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 285 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 194 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-deadline-escalation", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "b3791acd-2035-4428-af07-d61fd145d081", "appliedAt": "2026-10-22T20:22:08.217Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17W47C79DT.2IJ194", "appliedAt": "2026-10-22T20:22:08.344Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "899e65c6e51ae2ec7d8afeda8d0f31aac9f7a380282be6c1f9e920c64c0e4ed4" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:07.784Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:08.071Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:08.074Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:08.217Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:08.344Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:08.346Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:22:09.079Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:22:07.784Z", "updatedAt": "2026-10-22T20:22:09.079Z", "duplicate": true } - · POST app request /invocations · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "tick" }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:09.445553+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "17", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json", "content-length": "12" }Request body
{ "action": "tick" }Recorded response · HTTP 200
{ "woken": [] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs · deadline escalation · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/deadline_escalation/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:09.765514+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "deadline-escalation-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "deadline_escalation" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 180 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 285 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 194 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-deadline-escalation", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "b3791acd-2035-4428-af07-d61fd145d081", "appliedAt": "2026-10-22T20:22:08.217Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "17W47C79DT.2IJ194", "appliedAt": "2026-10-22T20:22:08.344Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "899e65c6e51ae2ec7d8afeda8d0f31aac9f7a380282be6c1f9e920c64c0e4ed4" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:07.784Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:08.071Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:08.074Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:08.217Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:08.344Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:08.346Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:22:09.079Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:22:07.784Z", "updatedAt": "2026-10-22T20:22:09.079Z" } ] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs · support unavailable blocks · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:10.006206+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · support unavailable blocks · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-support-unavailable-blocks", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:10.833445+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "567", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-support-unavailable-blocks", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" } }Recorded response · HTTP 200
{ "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 222 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 302 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 153 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-support-unavailable-blocks", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1dc7b29f-702a-4c40-a812-c943db8387b7", "appliedAt": "2026-10-22T20:22:10.575Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "172D2T7CXV.EEFXXP", "appliedAt": "2026-10-22T20:22:10.704Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "270671ccf856652063fa2335b4172f2c92ab962a426b1ec2c187387291cc3356" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:10.113Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:10.417Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:10.419Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:10.575Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:10.704Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:10.706Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:10.113Z", "updatedAt": "2026-10-22T20:22:10.706Z", "duplicate": false } - · GET zendesk request · support unavailable blocks · /api/v2/search.json · HTTP 404 · processing 1.91ms
View sanitized request and response
Curl-style request view
curl --request GET '<ZENDESK_TWIN_BASE_URL>/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL was not recorded. Provider processing: 1.91ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · GET zendesk request · provider traffic · /api/v2/search.json · HTTP 404 · request 62f15f5bf9b4 · processing 1.91ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/bc0302fb9a/api/v2/search.json' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.91ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 404
{ "errors": [ { "status": "404", "code": "EGeneral:Unknown method", "detail": "No route matches GET /api/v2/search.json" } ] } - · GET stripe request · provider traffic · /v1/customers · HTTP 200 · request fbecacd9515a · processing 16.44ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/customers' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 16.44ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [ { "email": "[email protected]", "name": "Sam Subject", "id": "cus_ZLCXWWGQIJG9YGHX", "address": null, "balance": 0, "business_name": "Sample Business", "cash_balance": null, "created": 41, "currency": "USD", "customer_account": null, "default_source": null, "delinquent": false, "description": null, "discount": null, "individual_name": "Sample Individual", "invoice_prefix": null, "livemode": false, "object": "customer", "phone": "+14155550100", "preferred_locales": null, "shipping": null, "tax_exempt": "exempt", "test_clock": null } ], "has_more": false, "object": "list", "url": "/v1/customers" } - · POST hubspot request · provider traffic · /crm/v3/objects/contacts/search · HTTP 200 · request 0882f188409d · processing 1.59ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/d18e6b7bda/crm/v3/objects/contacts/search' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 1.59ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "335", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "filterGroups": [ { "filters": [ { "propertyName": "email", "operator": "EQ", "value": "[email protected]" } ] } ], "properties": [ "email", "firstname", "lastname", "company", "lifecyclestage", "hs_lead_status", "hubspot_owner_id", "hs_email_domain", "country", "numberofemployees", "notes_last_contacted", "createdate" ], "limit": 10 }Recorded response · HTTP 200
{ "total": 1, "results": [ { "properties": { "email": "[email protected]", "firstname": "Sam" }, "id": "292253422493", "archived": false, "createdAt": "2019-10-30T03:30:17.883Z", "updatedAt": "2019-12-07T16:50:06.678Z" } ] } - · GET stripe request · provider traffic · /v1/invoices · HTTP 200 · request 24e696829aac · processing 6.48ms
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/sandbox/ed780229ca/v1/invoices' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 6.48ms.
Recorded request headers
{ "host": "fetchsandbox.com", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1" }Recorded response headers
Response headers were not saved in this run.
Request body
No body shown for this read.
Recorded response · HTTP 200
{ "data": [], "has_more": false, "object": "list", "url": "/v1/invoices" } - · POST asana request · provider traffic · /tasks · HTTP 201 · request 1cfcdf8d2032 · processing 14.9ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/efcfbae379/tasks' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "data": { "name": "DSAR-support-unavailable-blocks: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-support-unavailable-blocks, received 2026-10-22, due 2026-11-21. Subject ref 2ac812467f.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.9ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "356", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "data": { "name": "DSAR-support-unavailable-blocks: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-support-unavailable-blocks, received 2026-10-22, due 2026-11-21. Subject ref 2ac812467f.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" } }Recorded response · HTTP 201
{ "data": { "name": "DSAR-support-unavailable-blocks: GDPR access request, due 2026-11-21", "notes": "GDPR access request DSAR-support-unavailable-blocks, received 2026-10-22, due 2026-11-21. Subject ref 2ac812467f.\nDiscovery incomplete (support (Zendesk)): nothing is exported until every system is searched.", "workspace": "acme-privacy", "due_on": "2026-11-21" }, "id": "1dc7b29f-702a-4c40-a812-c943db8387b7" } - · POST slack request · provider traffic · /api/chat.postMessage · HTTP 200 · request 8ab77d8e072c · processing 14.28ms
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/sandbox/8c0b752301/api/chat.postMessage' \ --header 'host: fetchsandbox.com' \ --header 'user-agent: node' \ --header 'accept: application/json' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'content-type: application/json; charset=utf-8' \ --data-raw '{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-support-unavailable-blocks: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL resolved from the saved run route. Provider processing: 14.28ms.
Recorded request headers
{ "host": "fetchsandbox.com", "content-length": "232", "user-agent": "node", "accept": "application/json", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "content-type": "application/json; charset=utf-8" }Recorded response headers
Response headers were not saved in this run.
Request body
{ "channel": "C0PRIVACY01", "text": ":warning: DSAR-support-unavailable-blocks: discovery incomplete (support (Zendesk)). Nothing exported; re-run once the system is reachable. Due 2026-11-21.", "unfurl_links": false, "unfurl_media": false }Recorded response · HTTP 200
{ "channel": "C0PRIVACY01", "message": { "bot_id": "bot_9ee05eb9b47041259bd547b1e1", "client_msg_id": "cli_b4446560ed5248c7a14128feff", "name": "item-066b32", "old_name": "Sample Old", "parent_user_id": "par_691e6ce9e0124243b6634ed005", "permalink": "my-resource", "reply_count": 0, "reply_users_count": 0, "text": "Sample text content", "ts": "sample-value", "type": "default", "unread_count": 0, "username": "acme-corp" }, "ok": true, "ts": "172D2T7CXV.EEFXXP" } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs · support unavailable blocks · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:11.154876+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" }, "duplicateStarts": 0, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 222 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 302 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 153 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-support-unavailable-blocks", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1dc7b29f-702a-4c40-a812-c943db8387b7", "appliedAt": "2026-10-22T20:22:10.575Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "172D2T7CXV.EEFXXP", "appliedAt": "2026-10-22T20:22:10.704Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 5, "head": "270671ccf856652063fa2335b4172f2c92ab962a426b1ec2c187387291cc3356" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:10.113Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:10.417Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:10.419Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:10.575Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:10.704Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:10.706Z", "msg": "done (partial)" } ], "createdAt": "2026-10-22T20:22:10.113Z", "updatedAt": "2026-10-22T20:22:10.706Z" } ] } - · POST app request /invocations · support unavailable blocks · HTTP 200
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-support-unavailable-blocks", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:11.376914+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "567", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json" }Request body
{ "action": "start", "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "DSAR-support-unavailable-blocks", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" } }Recorded response · HTTP 200
{ "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 222 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 302 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 153 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-support-unavailable-blocks", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1dc7b29f-702a-4c40-a812-c943db8387b7", "appliedAt": "2026-10-22T20:22:10.575Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "172D2T7CXV.EEFXXP", "appliedAt": "2026-10-22T20:22:10.704Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "c3cc3e688dcbd995f48c239777bf9e7889435f1f010ab66f9af7a9491e579bca" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:10.113Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:10.417Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:10.419Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:10.575Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:10.704Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:10.706Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:22:11.257Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:22:10.113Z", "updatedAt": "2026-10-22T20:22:11.257Z", "duplicate": true } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs · support unavailable blocks · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/support_unavailable_blocks/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:11.698945+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [ { "runId": "support-unavailable-blocks-vr_898103f011f8472f969dde72d7c22bd1", "workflow": "dsar-export", "metadata": { "organization": "Acme", "company": "Acme Corporation", "environment": "unconfigured", "owner": "unassigned", "department": "unassigned", "ownerTeam": "unassigned", "oncall": "unassigned", "version": "unversioned", "sourceCommit": "unrecorded" }, "org": "Legal", "team": "privacy-ops", "phase": "DONE", "closed": true, "outcome": "partial", "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "support_unavailable_blocks" }, "duplicateStarts": 1, "agents": [ { "name": "crm", "status": "ok", "summary": "1 HubSpot contact", "durationMs": 222 }, { "name": "billing", "status": "ok", "summary": "1 customer(s), 0 invoice(s)", "durationMs": 302 }, { "name": "support", "status": "failed", "error": "zendesk 404 EGeneral:Unknown method: GET /api/v2/search.json → 404 EGeneral:Unknown method", "errorCode": "zendesk:EGeneral:Unknown method", "durationMs": 153 } ], "actions": [ { "id": "asana.dsar_record", "kind": "asana.dsar_record", "provider": "asana", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "requestId": "DSAR-support-unavailable-blocks", "deadline": "2026-11-21", "complete": false }, "attempts": 1, "ref": "1dc7b29f-702a-4c40-a812-c943db8387b7", "appliedAt": "2026-10-22T20:22:10.575Z", "reconciled": null }, { "id": "slack.post_blocked", "kind": "slack.post_blocked", "provider": "slack", "agent": "crm", "gate": "auto", "status": "applied", "summary": { "missing": [ "support (Zendesk)" ] }, "attempts": 1, "ref": "172D2T7CXV.EEFXXP", "appliedAt": "2026-10-22T20:22:10.704Z", "reconciled": null } ], "counts": { "applied": 2, "failed": 0, "pendingApproval": 0, "skipped": 0, "rejected": 0, "scheduled": 0, "awaitingSignal": 0, "compensated": 0 }, "wakeAt": null, "audit": { "seq": 6, "head": "c3cc3e688dcbd995f48c239777bf9e7889435f1f010ab66f9af7a9491e579bca" }, "output": { "mode": "blocked", "missing": [ "support (Zendesk)" ] }, "events": [ { "at": "2026-10-22T20:22:10.113Z", "msg": "started by U_FETCHSANDBOX" }, { "at": "2026-10-22T20:22:10.417Z", "msg": "agents: crm=ok, billing=ok, support=failed" }, { "at": "2026-10-22T20:22:10.419Z", "msg": "planned 2 action(s): 0 need approval" }, { "at": "2026-10-22T20:22:10.575Z", "msg": "asana.dsar_record: applied" }, { "at": "2026-10-22T20:22:10.704Z", "msg": "slack.post_blocked: applied" }, { "at": "2026-10-22T20:22:10.706Z", "msg": "done (partial)" }, { "at": "2026-10-22T20:22:11.257Z", "msg": "duplicate start ignored" } ], "createdAt": "2026-10-22T20:22:10.113Z", "updatedAt": "2026-10-22T20:22:11.257Z" } ] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:11.922914+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · invalid input rejected · HTTP 400
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "please send my data", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "invalid_input_rejected" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:12.130159+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "529", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json", "content-length": "80" }Request body
{ "action": "start", "runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "please send my data", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "invalid_input_rejected" } }Recorded response · HTTP 400
{ "error": "invalid input", "issues": [ "requestId: request id like DSAR-2026-0042" ] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:12.439393+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] } - · POST app request /invocations · invalid input rejected · HTTP 400
View sanitized request and response
Curl-style request view
curl --request POST 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/invocations' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]' \ --header 'content-type: application/json' \ --data-raw '{ "action": "start", "runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "please send my data", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "invalid_input_rejected" } }'This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:12.660430+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]", "content-length": "529", "content-type": "application/json" }Recorded response headers
{ "content-type": "application/json", "content-length": "80" }Request body
{ "action": "start", "runId": "invalid-input-rejected-vr_898103f011f8472f969dde72d7c22bd1", "input": { "requestId": "please send my data", "subject": { "email": "[email protected]", "name": "Sam Subject" }, "regulation": "gdpr", "receivedAt": "2026-10-22T20:20:34.817Z", "privacyChannel": "C0PRIVACY01", "exportFolderId": "0", "verifiers": [ "U_VERIFIER", "U_ANALYST" ], "analysts": [ "U_ANALYST", "U_ANALYST_2" ] }, "requestedBy": { "userId": "U_FETCHSANDBOX" }, "labels": { "fs_run": "vr_898103f011f8472f969dde72d7c22bd1", "fs_case": "invalid_input_rejected" } }Recorded response · HTTP 400
{ "error": "invalid input", "issues": [ "requestId: request id like DSAR-2026-0042" ] } - · GET app request /verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs · invalid input rejected · HTTP 200
View sanitized request and response
Curl-style request view
curl --request GET 'https://fetchsandbox.com/api/relay/924753bc296c4b0947a215cd5099ce0291d9d12ff0065466/verify/runs/vr_898103f011f8472f969dde72d7c22bd1/cases/invalid_input_rejected/runs' \ --header 'accept: */*' \ --header 'user-agent: python-httpx/0.28.1' \ --header 'host: fetchsandbox.com' \ --header 'x-flow-run-id: vr_898103f011f8472f969dde72d7c22bd1' \ --header 'x-fetchsandbox-relay: [redacted]' \ --header 'authorization: [redacted]'
This view is reconstructed from the saved method, URL, and sanitized headers and body. Secrets are removed and the result is not exact wire bytes, so it cannot be used as a runnable authenticated replay.
Target URL recorded at execution. Response finished: 2026-10-22T20:22:12.996959+00:00.
Recorded request headers
{ "accept": "*/*", "user-agent": "python-httpx/0.28.1", "host": "fetchsandbox.com", "x-flow-run-id": "vr_898103f011f8472f969dde72d7c22bd1", "x-fetchsandbox-relay": "[redacted]", "authorization": "[redacted]" }Recorded response headers
{ "content-type": "application/json", "content-length": "11" }Request body
This request had no body.
Recorded response · HTTP 200
{ "runs": [] }
Expand a request to inspect its sanitized payload. Credentials and personal data stay hidden.
Timestamps reflect when the sandbox recorded each request, not the order your app triggered them.
- Verification covers the declared HTTP actions and state reads in this run.
- The app version shown was supplied by the app itself, not independently checked.
- Passing all checks in this run does not certify the whole app as production-ready.
- The verifier session does not survive a restart. This says nothing about the durability of the app under test.
- App state shown here is what the app's own endpoint reported. It is not independently checked against the database.
Sanitized summary. Expand a timeline event to inspect the safe request and response fields; sensitive provider and application data stays hidden.