Agent-readable docs index: /llms.txt. Full docs in one file: /llms-full.txt. Download /docs.zip to grep all markdown files locally.

List attack fixtures

/api/v1/owner/attacksGET
Authored adversarial cases, not live-model measurements.
Examples are synthetic and illustrate response shape; IDs, signatures, and credentials are not usable authority.
Authorization
ownerSession *cookie halfspan_session
Authenticated HttpOnly owner session. Not an executor credential.
Response
200 · Successful response. A paused run is an application outcome, not an HTTP error.
items?object
Show properties
id *string
name *string
description *string
expectedDecision *"ALLOW" | "PAUSE" | "TERMINATE"
boundaryOnly?boolean
400 · Request validation failed.
error *string
reasonCode?string
401 · Sign in to the Halfspan workspace.
error *string
reasonCode?string
403 · Console requests must come from the local owner workspace.
error *string
reasonCode?string
500 · The local service could not complete this request.
error *string
reasonCode?string
Request example
curl -X GET "https://service.example.com/api/v1/owner/attacks" \
  -b "halfspan_session=<token>"
Response example
[
  {
    "id": "forbidden-read",
    "name": "Unauthorized balance read",
    "description": "Select an out-of-scope balance read.",
    "expectedDecision": "TERMINATE"
  }
]