Authors a containment rule.

POST

/v1/m/governance/guardian/rules

curl --request POST \
  --url https://example.com/v1/m/governance/guardian/rules \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "action": "example", "agent_tier": "example", "enabled": true, "match_kinds": "example", "min_severity": "example", "mode": "example", "name": "example", "note": "example" }'

• this engine

Authors a containment rule. Admin-tier (authoring auto-containment is enforcement-posture authoring); self-audited.

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

action

required

Case-insensitive after trimming: stop_agent, quarantine_nhi, or stop_estate.

string

agent_tier

Any of:

string

Case-insensitive after trimming: low, medium, high, critical, or empty for any.

string

null

null

enabled

Any of:

boolean

Defaults to true when absent or null.

boolean

null

null

match_kinds

Any of:

string

Comma-separated finding kinds, capped at 4096 bytes; guardian self-finding prefixes are forbidden.

string

null

null

min_severity

Any of:

string

Case-insensitive after trimming: info, low, medium, high, or critical; empty defaults to high.

string

null

null

mode

required

Case-insensitive after trimming: auto or approval.

string

name

required

Trimmed rule name capped at 128 bytes.

string

/.*\S.*/

note

Any of:

string

Capped at 4096 bytes.

string

null

null

Example ^generated

{
  "action": "example",
  "agent_tier": "example",
  "enabled": true,
  "match_kinds": "example",
  "min_severity": "example",
  "mode": "example",
  "name": "example",
  "note": "example"
}

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}