GET /api/agent-profiles/{id}/governor-audit — the profile's most recent governor audit report (golden-set/judge quality verdict over the last window), or `null` when the governor has not yet audited the profile. Workspace-admin read.

GET

/api/agent-profiles/{id}/governor-audit

curl --request GET \
  --url https://example.com/api/agent-profiles/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/governor-audit \
  --cookie supacloud_session=<supacloud_session>

Authorizations

• cookie_auth

Parameters

Path Parameters

id

required

string format: uuid

Agent-profile ID whose latest governor audit to read

Responses

200

The latest governor audit report for the profile, or null when none has run yet

Media typeapplication/json

One of:

null

null

object

A persisted governor audit report projected for the read API (the agent-profile editor’s “Governor audit” card). Carries the audit window, the calibration kappa and the self-describing metrics blob (success rate, mean reward/cost, judge- trust verdict, quality score) so the FE renders the headline numbers without a second round trip. agent_profile_id is None on a workspace-wide audit.

object

agent_profile_id

string | null format: uuid

created_at

required

string format: date-time

id

required

string format: uuid

kappa

Cohen’s kappa of the LLM judge vs ground truth (None until enough calibration samples — the judge is then untrusted and the verdict is deterministic).

number | null format: float

metrics

required

The self-describing aggregate: sample_count, success_rate, mean_reward, mean_cost_usd, judge_trusted, quality_score, verdict_source. Runtime stays serde_json::Value; the spec types it as [GovernorAuditMetrics].

object

calibration_samples

integer | null format: int64

judge_trusted

boolean | null

mean_cost_usd

number | null format: double

mean_reward

number | null format: double

quality_score

number | null format: double

sample_count

integer | null format: int64

success_rate

number | null format: double

verdict_source

string | null

period_end

required

string format: date-time

period_start

required

string format: date-time

Example^generated

{
  "agent_profile_id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "created_at": "2026-04-15T12:00:00Z",
  "id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
  "kappa": 1,
  "metrics": {
    "calibration_samples": 1,
    "judge_trusted": true,
    "mean_cost_usd": 1,
    "mean_reward": 1,
    "quality_score": 1,
    "sample_count": 1,
    "success_rate": 1,
    "verdict_source": "example"
  },
  "period_end": "2026-04-15T12:00:00Z",
  "period_start": "2026-04-15T12:00:00Z"
}

401

Authentication required

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}

403

Permission denied

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}

500

Structured server error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object

code

required

Machine-readable, stable error code.

string

Allowed values: not_found unauthorized forbidden bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited quota_exceeded database_error docker_error vault_error internal_error

details

One of:

null

null

object

Present only on a quota-exceeded 403 — the inline upgrade-CTA payload.

object

key

required

The entitlement feature key that was hit, e.g. apps.max_count.

string

limit

required

The plan’s limit for this key.

integer format: int64

upgrade_url

required

Where to send the user to upgrade.

string

used

required

Current usage (count or bytes, per the key).

integer format: int64

error

required

Human-readable message (the server’s English text; the client may localize by code).

string

Example

{
  "code": "not_found"
}