decide-fyi Audit Chain API

openapi: 3.2.0
info:
  title: Decide Decision Audit Chain API
  summary: Decision protocol for state-changing software actions.
  description: Call Decide before products, agents, queues, billing systems, CRMs, or internal tools change state. The API returns a signed Decision Record v1 object with policy bundle attestation, evidence, action binding, replay, verification handles, portable Decision Packet v1 exports, simulation-only counterfactual analysis, cryptographic audit chains, Action Execution Receipts, Outcome Records, CRM Sync Records, predictive confidence, first-party policy pattern templates, policy effectiveness metrics, opt-in anonymized benchmarks, and explainable anomaly reports derived from reported outcomes.
  version: 1.13.0
  x-decision-protocol-version: decision_protocol_v1
  x-decision-record-version: decision_record_v1
  x-decision-packet-version: decision_packet_v1
servers:
- url: https://www.decide.fyi
  description: Production
security:
- ApiKeyAuth: []
tags:
- name: Audit Chain
  description: Caller-scoped cryptographic audit trails with rolling Merkle roots and retained-link verification.
paths:
  /api/decision/chains/{chain_id}:
    get:
      tags:
      - Audit Chain
      operationId: getDecisionChain
      summary: Read a Decision Record audit chain
      description: Returns decision_chain_v1 head metadata, retained chain links, rolling Merkle root, and verification checks for the caller API-key scoped audit chain. Reads fail with 503 when the authoritative chain store is unavailable rather than reporting a missing chain.
      parameters:
      - name: chain_id
        in: path
        required: true
        schema:
          type: string
          maxLength: 180
      - name: limit
        in: query
        required: false
        schema:
          type: integer
          minimum: 1
          maximum: 1000
          default: 50
      responses:
        '200':
          description: Decision chain report
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DecisionChain'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          description: Requested chain does not match caller scope
        '404':
          description: Decision chain not found
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
components:
  responses:
    Unauthorized:
      description: API key missing, invalid, inactive, or unauthorized
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
    ServiceUnavailable:
      description: Decision storage or the upstream decision engine timed out or is temporarily unavailable
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorResponse'
  schemas:
    DecisionChainLink:
      type: object
      required:
      - decision_chain_version
      - chain_id
      - chain_position
      - leaf_hash
      - merkle_root
      - link_hash
      - decision_id
      - record_hash
      properties:
        decision_chain_version:
          type: string
          const: decision_chain_v1
        chain_id:
          type: string
        chain_position:
          type: integer
        previous_link_hash:
          type:
          - string
          - 'null'
        previous_merkle_root:
          type:
          - string
          - 'null'
        leaf_hash:
          type: string
        merkle_root:
          type: string
        merkle_strategy:
          type: string
          const: rolling_sha256_pair_v1
        link_hash:
          type: string
        entry_type:
          type: string
        decision_id:
          type: string
        record_hash:
          type: string
        receipt_hash:
          type:
          - string
          - 'null'
        policy_id:
          type:
          - string
          - 'null'
        policy_version:
          type:
          - string
          - 'null'
        created_at:
          type: string
        verify_url:
          type: string
        chain_url:
          type: string
      additionalProperties: true
    DecisionChain:
      type: object
      required:
      - ok
      - decision_chain_version
      - chain_id
      - chain_size
      - merkle_root
      - head
      - retained_links
      - verification
      properties:
        ok:
          type: boolean
        decision_chain_version:
          type: string
          const: decision_chain_v1
        chain_id:
          type: string
        chain_size:
          type: integer
        merkle_strategy:
          type: string
          const: rolling_sha256_pair_v1
        merkle_root:
          type:
          - string
          - 'null'
        head_link_hash:
          type:
          - string
          - 'null'
        updated_at:
          type: string
        head:
          $ref: '#/components/schemas/DecisionChainLink'
        retained_links:
          type: array
          items:
            $ref: '#/components/schemas/DecisionChainLink'
        verification:
          type: object
          additionalProperties: true
      additionalProperties: true
    ErrorResponse:
      type: object
      properties:
        c:
          type: string
        v:
          type: string
        request_id:
          type: string
        error:
          type: string
        message:
          type: string
      additionalProperties: true
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key