{"openapi":"3.1.0","info":{"title":"Log Event Normalize and Policy Guard API","version":"1.0.0","description":"Inspect, normalize, batch, summarize, and apply explicit policy to bounded caller-supplied JSON, logfmt, and RFC 5424 VERSION 1 records. The canonical shape aligns with the OpenTelemetry Logs data model but is not an OTLP ingestion or export endpoint. The API accesses no log source or backend, executes no query, creates no alert, diagnoses no incident, does not exhaustively detect sensitive data, and stores no payload."},"paths":{"/marketplace/rapid/log-events/v1/inspect":{"post":{"tags":["Log Event Inspect"],"summary":"Inspect one bounded caller-supplied log record","operationId":"inspectLogEvent","parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/InspectLogRequest"},"examples":{"example":{"summary":"Inspect one bounded caller-supplied log record","value":{"input":{"format":"JSON_LINE","record":"{\"timestamp\":\"2026-08-11T12:00:00Z\",\"level\":\"info\",\"message\":\"job complete\",\"service\":\"worker\"}"}}}}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/InspectLogResult"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/marketplace/rapid/log-events/v1/normalize":{"post":{"tags":["Log Event Normalize"],"summary":"Normalize one record to an OpenTelemetry-aligned shape","operationId":"normalizeLogEvent","parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/NormalizeLogRequest"},"examples":{"example":{"summary":"Normalize one record to an OpenTelemetry-aligned shape","value":{"input":{"format":"LOGFMT","record":"timestamp=2026-08-11T12:00:00Z level=warn message=retry service=worker"}}}}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/NormalizeLogResult"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/marketplace/rapid/log-events/v1/parse-rfc5424":{"post":{"tags":["RFC 5424 Parse"],"summary":"Parse one strict RFC 5424 VERSION 1 record","operationId":"parseRfc5424Log","parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ParseRfc5424Request"},"examples":{"example":{"summary":"Parse one strict RFC 5424 VERSION 1 record","value":{"line":"<34>1 2026-08-11T12:00:00Z host app 123 ID47 [meta key=\"value\"] message"}}}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ParseRfc5424Result"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/marketplace/rapid/log-events/v1/batch-normalize":{"post":{"tags":["Log Event Batch Normalize"],"summary":"Normalize up to 1,000 supplied records","operationId":"batchNormalizeLogEvents","parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/BatchNormalizeRequest"},"examples":{"example":{"summary":"Normalize up to 1,000 supplied records","value":{"items":[{"reference":"one","input":{"format":"JSON_OBJECT","record":{"timestamp":"2026-08-11T12:00:00Z","level":"info","message":"ready"}}}]}}}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/BatchNormalizeResult"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/marketplace/rapid/log-events/v1/summarize":{"post":{"tags":["Log Event Summary"],"summary":"Summarize a bounded supplied batch without diagnosis","operationId":"summarizeLogEvents","parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SummarizeLogsRequest"},"examples":{"example":{"summary":"Summarize a bounded supplied batch without diagnosis","value":{"items":[{"input":{"format":"LOGFMT","record":"timestamp=2026-08-11T12:00:00Z level=error message=failed service=api"}}]}}}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/LogSummaryResult"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}},"/marketplace/rapid/log-events/v1/policy-check":{"post":{"tags":["Log Event Policy"],"summary":"Apply explicit caller policy to one normalized event","operationId":"checkLogEventPolicy","parameters":[],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/LogPolicyRequest"},"examples":{"example":{"summary":"Apply explicit caller policy to one normalized event","value":{"input":{"format":"JSON_OBJECT","record":{"timestamp":"2026-08-11T12:00:00Z","level":"error","message":"request failed","service":"api"}},"policy_name":"production-ingest","allowed_formats":["JSON_OBJECT"],"require_timestamp":true,"require_severity":true,"minimum_severity_number":13,"require_body":true,"require_service":true,"allowed_services":["api"]}}}}}},"responses":{"200":{"description":"Successful Response","content":{"application/json":{"schema":{"$ref":"#/components/schemas/LogPolicyResult"}}}},"422":{"description":"Validation Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTPValidationError"}}}}}}}},"components":{"schemas":{"BatchItem-Input":{"properties":{"reference":{"anyOf":[{"type":"string","maxLength":128},{"type":"null"}],"title":"Reference"},"input":{"$ref":"#/components/schemas/LogRecordInput"}},"additionalProperties":false,"type":"object","required":["input"],"title":"BatchItem"},"BatchNormalizeRequest":{"properties":{"items":{"items":{"$ref":"#/components/schemas/BatchItem-Input"},"type":"array","maxItems":1000,"minItems":1,"title":"Items"}},"additionalProperties":false,"type":"object","required":["items"],"title":"BatchNormalizeRequest"},"BatchNormalizeResult":{"properties":{"status":{"type":"string","const":"COMPLETED","title":"Status","default":"COMPLETED"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"},"ruleset_version":{"type":"string","const":"LOG_EVENT_PREFLIGHT_2026_08","title":"Ruleset Version","default":"LOG_EVENT_PREFLIGHT_2026_08"},"scope":{"type":"string","const":"CALLER_SUPPLIED_LOG_RECORDS_ONLY","title":"Scope","default":"CALLER_SUPPLIED_LOG_RECORDS_ONLY"},"network_accessed":{"type":"boolean","const":false,"title":"Network Accessed","default":false},"log_source_accessed":{"type":"boolean","const":false,"title":"Log Source Accessed","default":false},"log_backend_accessed":{"type":"boolean","const":false,"title":"Log Backend Accessed","default":false},"query_executed":{"type":"boolean","const":false,"title":"Query Executed","default":false},"alert_created":{"type":"boolean","const":false,"title":"Alert Created","default":false},"incident_diagnosed":{"type":"boolean","const":false,"title":"Incident Diagnosed","default":false},"sensitive_data_exhaustively_detected":{"type":"boolean","const":false,"title":"Sensitive Data Exhaustively Detected","default":false},"compliance_verified":{"type":"boolean","const":false,"title":"Compliance Verified","default":false},"payload_stored":{"type":"boolean","const":false,"title":"Payload Stored","default":false},"next_action":{"type":"string","title":"Next Action"},"item_count":{"type":"integer","title":"Item Count"},"success_count":{"type":"integer","title":"Success Count"},"failed_count":{"type":"integer","title":"Failed Count"},"items":{"items":{"$ref":"#/components/schemas/BatchNormalizedItem"},"type":"array","title":"Items"}},"additionalProperties":false,"type":"object","required":["decision","findings","next_action","item_count","success_count","failed_count","items"],"title":"BatchNormalizeResult"},"BatchNormalizedItem":{"properties":{"index":{"type":"integer","title":"Index"},"reference":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Reference"},"status":{"type":"string","enum":["SUCCESS","FAILED"],"title":"Status"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"event":{"anyOf":[{"$ref":"#/components/schemas/CanonicalLogEvent"},{"type":"null"}]},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"}},"additionalProperties":false,"type":"object","required":["index","reference","status","decision","event","findings"],"title":"BatchNormalizedItem"},"CanonicalLogEvent":{"properties":{"timestamp":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Timestamp"},"severity_text":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Severity Text"},"severity_number":{"type":"integer","title":"Severity Number"},"severity_range":{"type":"string","enum":["UNSPECIFIED","TRACE","DEBUG","INFO","WARN","ERROR","FATAL"],"title":"Severity Range"},"body":{"anyOf":[{},{"type":"null"}],"title":"Body"},"resource":{"additionalProperties":true,"type":"object","title":"Resource"},"attributes":{"additionalProperties":true,"type":"object","title":"Attributes"},"trace_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Trace Id"},"span_id":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Span Id"},"event_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Event Name"},"source_format":{"type":"string","enum":["JSON_OBJECT","JSON_LINE","LOGFMT","RFC5424"],"title":"Source Format"},"source_sha256":{"type":"string","title":"Source Sha256"},"normalization_changes":{"items":{"type":"string"},"type":"array","title":"Normalization Changes"}},"additionalProperties":false,"type":"object","required":["timestamp","severity_text","severity_number","severity_range","body","resource","attributes","trace_id","span_id","event_name","source_format","source_sha256","normalization_changes"],"title":"CanonicalLogEvent"},"CountGroup":{"properties":{"name":{"type":"string","title":"Name"},"count":{"type":"integer","title":"Count"}},"additionalProperties":false,"type":"object","required":["name","count"],"title":"CountGroup"},"FieldMapping":{"properties":{"timestamp_field":{"type":"string","title":"Timestamp Field","default":"timestamp"},"severity_field":{"type":"string","title":"Severity Field","default":"level"},"body_field":{"type":"string","title":"Body Field","default":"message"},"service_field":{"type":"string","title":"Service Field","default":"service"},"host_field":{"type":"string","title":"Host Field","default":"host"},"trace_id_field":{"type":"string","title":"Trace Id Field","default":"trace_id"},"span_id_field":{"type":"string","title":"Span Id Field","default":"span_id"},"event_name_field":{"type":"string","title":"Event Name Field","default":"event_name"}},"additionalProperties":false,"type":"object","title":"FieldMapping"},"HTTPValidationError":{"properties":{"detail":{"items":{"$ref":"#/components/schemas/ValidationError"},"type":"array","title":"Detail"}},"type":"object","title":"HTTPValidationError"},"InspectLogRequest":{"properties":{"input":{"$ref":"#/components/schemas/LogRecordInput"}},"additionalProperties":false,"type":"object","required":["input"],"title":"InspectLogRequest"},"InspectLogResult":{"properties":{"status":{"type":"string","const":"COMPLETED","title":"Status","default":"COMPLETED"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"},"ruleset_version":{"type":"string","const":"LOG_EVENT_PREFLIGHT_2026_08","title":"Ruleset Version","default":"LOG_EVENT_PREFLIGHT_2026_08"},"scope":{"type":"string","const":"CALLER_SUPPLIED_LOG_RECORDS_ONLY","title":"Scope","default":"CALLER_SUPPLIED_LOG_RECORDS_ONLY"},"network_accessed":{"type":"boolean","const":false,"title":"Network Accessed","default":false},"log_source_accessed":{"type":"boolean","const":false,"title":"Log Source Accessed","default":false},"log_backend_accessed":{"type":"boolean","const":false,"title":"Log Backend Accessed","default":false},"query_executed":{"type":"boolean","const":false,"title":"Query Executed","default":false},"alert_created":{"type":"boolean","const":false,"title":"Alert Created","default":false},"incident_diagnosed":{"type":"boolean","const":false,"title":"Incident Diagnosed","default":false},"sensitive_data_exhaustively_detected":{"type":"boolean","const":false,"title":"Sensitive Data Exhaustively Detected","default":false},"compliance_verified":{"type":"boolean","const":false,"title":"Compliance Verified","default":false},"payload_stored":{"type":"boolean","const":false,"title":"Payload Stored","default":false},"next_action":{"type":"string","title":"Next Action"},"source_format":{"type":"string","enum":["JSON_OBJECT","JSON_LINE","LOGFMT","RFC5424"],"title":"Source Format"},"byte_count":{"type":"integer","title":"Byte Count"},"top_level_field_count":{"type":"integer","title":"Top Level Field Count"},"timestamp_present":{"type":"boolean","title":"Timestamp Present"},"severity_present":{"type":"boolean","title":"Severity Present"},"body_present":{"type":"boolean","title":"Body Present"},"service_present":{"type":"boolean","title":"Service Present"},"trace_context_present":{"type":"boolean","title":"Trace Context Present"},"source_sha256":{"type":"string","title":"Source Sha256"}},"additionalProperties":false,"type":"object","required":["decision","findings","next_action","source_format","byte_count","top_level_field_count","timestamp_present","severity_present","body_present","service_present","trace_context_present","source_sha256"],"title":"InspectLogResult"},"LogFinding":{"properties":{"code":{"type":"string","title":"Code"},"severity":{"type":"string","enum":["INFO","LOW","MEDIUM","HIGH"],"title":"Severity"},"message":{"type":"string","title":"Message"},"evidence":{"additionalProperties":true,"type":"object","title":"Evidence"},"next_action":{"type":"string","title":"Next Action"}},"additionalProperties":false,"type":"object","required":["code","severity","message","next_action"],"title":"LogFinding"},"LogPolicyRequest":{"properties":{"input":{"$ref":"#/components/schemas/LogRecordInput"},"policy_name":{"type":"string","maxLength":128,"minLength":1,"title":"Policy Name"},"allowed_formats":{"anyOf":[{"items":{"type":"string","enum":["JSON_OBJECT","JSON_LINE","LOGFMT","RFC5424"]},"type":"array","maxItems":4,"minItems":1},{"type":"null"}],"title":"Allowed Formats"},"require_timestamp":{"type":"boolean","title":"Require Timestamp","default":true},"require_severity":{"type":"boolean","title":"Require Severity","default":true},"reject_unmapped_severity":{"type":"boolean","title":"Reject Unmapped Severity","default":true},"minimum_severity_number":{"anyOf":[{"type":"integer","maximum":24.0,"minimum":1.0},{"type":"null"}],"title":"Minimum Severity Number"},"require_body":{"type":"boolean","title":"Require Body","default":true},"require_service":{"type":"boolean","title":"Require Service","default":false},"allowed_services":{"anyOf":[{"items":{"type":"string"},"type":"array","maxItems":100,"minItems":1},{"type":"null"}],"title":"Allowed Services"},"require_trace_context":{"type":"boolean","title":"Require Trace Context","default":false},"maximum_event_age_seconds":{"anyOf":[{"type":"integer","maximum":31536000.0,"minimum":0.0},{"type":"null"}],"title":"Maximum Event Age Seconds"},"maximum_future_skew_seconds":{"type":"integer","maximum":86400.0,"minimum":0.0,"title":"Maximum Future Skew Seconds","default":300},"evaluated_at":{"anyOf":[{"type":"string","format":"date-time"},{"type":"null"}],"title":"Evaluated At"},"maximum_attribute_count":{"type":"integer","maximum":256.0,"minimum":0.0,"title":"Maximum Attribute Count","default":256},"allowed_attribute_keys":{"anyOf":[{"items":{"type":"string"},"type":"array","maxItems":256,"minItems":1},{"type":"null"}],"title":"Allowed Attribute Keys"},"blocked_attribute_keys":{"items":{"type":"string"},"type":"array","maxItems":256,"title":"Blocked Attribute Keys"},"maximum_body_bytes":{"type":"integer","maximum":32768.0,"minimum":0.0,"title":"Maximum Body Bytes","default":32768}},"additionalProperties":false,"type":"object","required":["input","policy_name"],"title":"LogPolicyRequest"},"LogPolicyResult":{"properties":{"status":{"type":"string","const":"COMPLETED","title":"Status","default":"COMPLETED"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"},"ruleset_version":{"type":"string","const":"LOG_EVENT_PREFLIGHT_2026_08","title":"Ruleset Version","default":"LOG_EVENT_PREFLIGHT_2026_08"},"scope":{"type":"string","const":"CALLER_SUPPLIED_LOG_RECORDS_ONLY","title":"Scope","default":"CALLER_SUPPLIED_LOG_RECORDS_ONLY"},"network_accessed":{"type":"boolean","const":false,"title":"Network Accessed","default":false},"log_source_accessed":{"type":"boolean","const":false,"title":"Log Source Accessed","default":false},"log_backend_accessed":{"type":"boolean","const":false,"title":"Log Backend Accessed","default":false},"query_executed":{"type":"boolean","const":false,"title":"Query Executed","default":false},"alert_created":{"type":"boolean","const":false,"title":"Alert Created","default":false},"incident_diagnosed":{"type":"boolean","const":false,"title":"Incident Diagnosed","default":false},"sensitive_data_exhaustively_detected":{"type":"boolean","const":false,"title":"Sensitive Data Exhaustively Detected","default":false},"compliance_verified":{"type":"boolean","const":false,"title":"Compliance Verified","default":false},"payload_stored":{"type":"boolean","const":false,"title":"Payload Stored","default":false},"next_action":{"type":"string","title":"Next Action"},"allowed_by_policy":{"type":"boolean","title":"Allowed By Policy"},"policy_name":{"type":"string","title":"Policy Name"},"event":{"$ref":"#/components/schemas/CanonicalLogEvent"},"evaluated_policy":{"additionalProperties":true,"type":"object","title":"Evaluated Policy"}},"additionalProperties":false,"type":"object","required":["decision","findings","next_action","allowed_by_policy","policy_name","event","evaluated_policy"],"title":"LogPolicyResult"},"LogRecordInput":{"properties":{"format":{"type":"string","enum":["JSON_OBJECT","JSON_LINE","LOGFMT","RFC5424"],"title":"Format"},"record":{"anyOf":[{"additionalProperties":true,"type":"object"},{"type":"string"}],"title":"Record"},"mapping":{"$ref":"#/components/schemas/FieldMapping"}},"additionalProperties":false,"type":"object","required":["format","record"],"title":"LogRecordInput"},"LogSummaryResult":{"properties":{"status":{"type":"string","const":"COMPLETED","title":"Status","default":"COMPLETED"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"},"ruleset_version":{"type":"string","const":"LOG_EVENT_PREFLIGHT_2026_08","title":"Ruleset Version","default":"LOG_EVENT_PREFLIGHT_2026_08"},"scope":{"type":"string","const":"CALLER_SUPPLIED_LOG_RECORDS_ONLY","title":"Scope","default":"CALLER_SUPPLIED_LOG_RECORDS_ONLY"},"network_accessed":{"type":"boolean","const":false,"title":"Network Accessed","default":false},"log_source_accessed":{"type":"boolean","const":false,"title":"Log Source Accessed","default":false},"log_backend_accessed":{"type":"boolean","const":false,"title":"Log Backend Accessed","default":false},"query_executed":{"type":"boolean","const":false,"title":"Query Executed","default":false},"alert_created":{"type":"boolean","const":false,"title":"Alert Created","default":false},"incident_diagnosed":{"type":"boolean","const":false,"title":"Incident Diagnosed","default":false},"sensitive_data_exhaustively_detected":{"type":"boolean","const":false,"title":"Sensitive Data Exhaustively Detected","default":false},"compliance_verified":{"type":"boolean","const":false,"title":"Compliance Verified","default":false},"payload_stored":{"type":"boolean","const":false,"title":"Payload Stored","default":false},"next_action":{"type":"string","title":"Next Action"},"item_count":{"type":"integer","title":"Item Count"},"normalized_count":{"type":"integer","title":"Normalized Count"},"failed_count":{"type":"integer","title":"Failed Count"},"timestamped_count":{"type":"integer","title":"Timestamped Count"},"first_timestamp":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"First Timestamp"},"last_timestamp":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Last Timestamp"},"severity_counts":{"items":{"$ref":"#/components/schemas/CountGroup"},"type":"array","title":"Severity Counts"},"service_counts":{"items":{"$ref":"#/components/schemas/CountGroup"},"type":"array","title":"Service Counts"},"trace_context_count":{"type":"integer","title":"Trace Context Count"}},"additionalProperties":false,"type":"object","required":["decision","findings","next_action","item_count","normalized_count","failed_count","timestamped_count","first_timestamp","last_timestamp","severity_counts","service_counts","trace_context_count"],"title":"LogSummaryResult"},"NormalizeLogRequest":{"properties":{"input":{"$ref":"#/components/schemas/LogRecordInput"}},"additionalProperties":false,"type":"object","required":["input"],"title":"NormalizeLogRequest"},"NormalizeLogResult":{"properties":{"status":{"type":"string","const":"COMPLETED","title":"Status","default":"COMPLETED"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"},"ruleset_version":{"type":"string","const":"LOG_EVENT_PREFLIGHT_2026_08","title":"Ruleset Version","default":"LOG_EVENT_PREFLIGHT_2026_08"},"scope":{"type":"string","const":"CALLER_SUPPLIED_LOG_RECORDS_ONLY","title":"Scope","default":"CALLER_SUPPLIED_LOG_RECORDS_ONLY"},"network_accessed":{"type":"boolean","const":false,"title":"Network Accessed","default":false},"log_source_accessed":{"type":"boolean","const":false,"title":"Log Source Accessed","default":false},"log_backend_accessed":{"type":"boolean","const":false,"title":"Log Backend Accessed","default":false},"query_executed":{"type":"boolean","const":false,"title":"Query Executed","default":false},"alert_created":{"type":"boolean","const":false,"title":"Alert Created","default":false},"incident_diagnosed":{"type":"boolean","const":false,"title":"Incident Diagnosed","default":false},"sensitive_data_exhaustively_detected":{"type":"boolean","const":false,"title":"Sensitive Data Exhaustively Detected","default":false},"compliance_verified":{"type":"boolean","const":false,"title":"Compliance Verified","default":false},"payload_stored":{"type":"boolean","const":false,"title":"Payload Stored","default":false},"next_action":{"type":"string","title":"Next Action"},"event":{"$ref":"#/components/schemas/CanonicalLogEvent"}},"additionalProperties":false,"type":"object","required":["decision","findings","next_action","event"],"title":"NormalizeLogResult"},"ParseRfc5424Request":{"properties":{"line":{"type":"string","title":"Line"}},"additionalProperties":false,"type":"object","required":["line"],"title":"ParseRfc5424Request"},"ParseRfc5424Result":{"properties":{"status":{"type":"string","const":"COMPLETED","title":"Status","default":"COMPLETED"},"decision":{"type":"string","enum":["CLEAR","REVIEW_REQUIRED","BLOCKED"],"title":"Decision"},"findings":{"items":{"$ref":"#/components/schemas/LogFinding"},"type":"array","title":"Findings"},"ruleset_version":{"type":"string","const":"LOG_EVENT_PREFLIGHT_2026_08","title":"Ruleset Version","default":"LOG_EVENT_PREFLIGHT_2026_08"},"scope":{"type":"string","const":"CALLER_SUPPLIED_LOG_RECORDS_ONLY","title":"Scope","default":"CALLER_SUPPLIED_LOG_RECORDS_ONLY"},"network_accessed":{"type":"boolean","const":false,"title":"Network Accessed","default":false},"log_source_accessed":{"type":"boolean","const":false,"title":"Log Source Accessed","default":false},"log_backend_accessed":{"type":"boolean","const":false,"title":"Log Backend Accessed","default":false},"query_executed":{"type":"boolean","const":false,"title":"Query Executed","default":false},"alert_created":{"type":"boolean","const":false,"title":"Alert Created","default":false},"incident_diagnosed":{"type":"boolean","const":false,"title":"Incident Diagnosed","default":false},"sensitive_data_exhaustively_detected":{"type":"boolean","const":false,"title":"Sensitive Data Exhaustively Detected","default":false},"compliance_verified":{"type":"boolean","const":false,"title":"Compliance Verified","default":false},"payload_stored":{"type":"boolean","const":false,"title":"Payload Stored","default":false},"next_action":{"type":"string","title":"Next Action"},"record":{"$ref":"#/components/schemas/Rfc5424Record"}},"additionalProperties":false,"type":"object","required":["decision","findings","next_action","record"],"title":"ParseRfc5424Result"},"Rfc5424Record":{"properties":{"priority":{"type":"integer","title":"Priority"},"facility_code":{"type":"integer","title":"Facility Code"},"facility_name":{"type":"string","title":"Facility Name"},"severity_code":{"type":"integer","title":"Severity Code"},"severity_name":{"type":"string","title":"Severity Name"},"version":{"type":"integer","title":"Version"},"timestamp":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Timestamp"},"hostname":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Hostname"},"app_name":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"App Name"},"procid":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Procid"},"msgid":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Msgid"},"structured_data":{"items":{"$ref":"#/components/schemas/StructuredDataElement"},"type":"array","title":"Structured Data"},"message":{"anyOf":[{"type":"string"},{"type":"null"}],"title":"Message"},"source_sha256":{"type":"string","title":"Source Sha256"}},"additionalProperties":false,"type":"object","required":["priority","facility_code","facility_name","severity_code","severity_name","version","timestamp","hostname","app_name","procid","msgid","structured_data","message","source_sha256"],"title":"Rfc5424Record"},"StructuredDataElement":{"properties":{"id":{"type":"string","title":"Id"},"params":{"additionalProperties":{"type":"string"},"type":"object","title":"Params"}},"additionalProperties":false,"type":"object","required":["id","params"],"title":"StructuredDataElement"},"SummarizeLogsRequest":{"properties":{"items":{"items":{"$ref":"#/components/schemas/BatchItem-Input"},"type":"array","maxItems":1000,"minItems":1,"title":"Items"}},"additionalProperties":false,"type":"object","required":["items"],"title":"SummarizeLogsRequest"},"ValidationError":{"properties":{"loc":{"items":{"anyOf":[{"type":"string"},{"type":"integer"}]},"type":"array","title":"Location"},"msg":{"type":"string","title":"Message"},"type":{"type":"string","title":"Error Type"},"input":{"title":"Input"},"ctx":{"type":"object","title":"Context"}},"type":"object","required":["loc","msg","type"],"title":"ValidationError"}}},"tags":[{"name":"Log Event Inspect","description":"Bounded log parsing and deterministic policy evidence for observability pipelines, developer tooling, integrations, and AI agents."},{"name":"Log Event Normalize","description":"Bounded log parsing and deterministic policy evidence for observability pipelines, developer tooling, integrations, and AI agents."},{"name":"RFC 5424 Parse","description":"Bounded log parsing and deterministic policy evidence for observability pipelines, developer tooling, integrations, and AI agents."},{"name":"Log Event Batch Normalize","description":"Bounded log parsing and deterministic policy evidence for observability pipelines, developer tooling, integrations, and AI agents."},{"name":"Log Event Summary","description":"Bounded log parsing and deterministic policy evidence for observability pipelines, developer tooling, integrations, and AI agents."},{"name":"Log Event Policy","description":"Bounded log parsing and deterministic policy evidence for observability pipelines, developer tooling, integrations, and AI agents."}],"servers":[{"url":"https://api-production-9502.up.railway.app"}]}