> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ankra.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Resume your service review

> Actor-scoped history on the primary database. Requires current applications rollout and applications.deploy; each row requires clusters.read for every destination and clusters.operate for the service cluster, intersected with live token scopes. Foreign actors, deleted resources and inaccessible reviews are hidden. Secret values, secret reference IDs and internal consumer binding IDs are never returned. Pending means only that the original review window has not expired; confirmation revalidates authority and configuration. Expired reviews require a new review; confirmed receipts remain confirmed after execution retention and are not readiness evidence.



## OpenAPI

````yaml https://platform.ankra.app/openapi.json get /org/service-admission/reviews/{review_id}
openapi: 3.1.0
info:
  title: FastAPI
  version: 0.1.0
servers:
  - url: https://platform.ankra.app
security: []
tags:
  - name: Clusters
    description: Create, inspect and manage clusters, and the stacks deployed on them.
  - name: Managed Clusters
    description: Provider-managed control planes, driven through one common surface.
  - name: Imported Clusters
    description: Clusters that already existed and were connected to Ankra.
  - name: Cluster Access
    description: Kubeconfigs, service-account tokens and per-cluster access grants.
  - name: Kubernetes
    description: Read and act on the Kubernetes objects inside a cluster.
  - name: AWS Clusters
    description: >-
      Provision and manage self-managed k3s / kubeadm clusters on AWS EC2 in
      your own VPC.
  - name: DigitalOcean Clusters
    description: Provision and manage DigitalOcean Kubernetes clusters.
  - name: Hetzner Clusters
    description: Provision and manage Hetzner Kubernetes clusters.
  - name: OVH Clusters
    description: Provision and manage OVH Kubernetes clusters.
  - name: Scaleway Clusters
    description: Provision and manage Scaleway Kapsule clusters.
  - name: UpCloud Clusters
    description: Provision and manage UpCloud Kubernetes clusters.
  - name: Applications
    description: Deploy, configure and observe applications across the fleet.
  - name: Backups
    description: >-
      Backup vaults, restore points, protection posture and captures for stacks
      and application deployments; a completed capture is not a verified
      restore.
  - name: Stack Profiles
    description: Reusable stack definitions, their versions and sharing.
  - name: Services
    description: >-
      Versioned service packages and explicit sharing. Runtime admission is
      separate from publication.
  - name: Charts
    description: Browse the chart catalogue behind stacks and addons.
  - name: Helm
    description: Helm registries, credentials and the charts they expose.
  - name: Executions
    description: Long-running platform executions and their jobs.
  - name: Operations
    description: Cancel in-flight cluster operations and their jobs.
  - name: Chat
    description: Conversational sessions, plans and confirmable actions.
  - name: AI Agent Runs
    description: Autonomous agent runs and their outcomes.
  - name: AI Tickets
    description: The AI ticket board, its sync connections and settings.
  - name: AI Playbooks
    description: Reusable playbooks the AI lanes execute.
  - name: AI Conditions
    description: Conditions that gate AI autonomy.
  - name: AI Remediation
    description: >-
      The organisation's auto-remediation policy: what the AI lanes may fix by
      themselves, and who approves the rest.
  - name: AI Engineering Handoffs
    description: Work the AI lanes escalate to a human engineer.
  - name: AI Environment
    description: The environment and base stacks AI demos deploy into.
  - name: Security
    description: Findings, advisories, SBOMs, compliance and posture.
  - name: Cost
    description: Cluster and fleet cost, rate cards and cost settings.
  - name: Decisions
    description: >-
      The decision ledger behind the Security and Cost queues: proposals a
      surface computed, the approve and set-aside decisions people took on them,
      and the receipts of running them.
  - name: Billing
    description: Subscription and spend caps.
  - name: Organisation
    description: Members, invitations, audit logs and organisation settings.
  - name: Account Tokens
    description: Personal access tokens for the API and CLI.
  - name: Credentials
    description: The shared credential store.
  - name: AWS Credentials
    description: >-
      AWS credentials: access keys or CloudFormation-onboarded STS roles for
      cost, EKS and self-managed provisioning.
  - name: Azure Credentials
    description: Azure credentials and SSH keys.
  - name: DigitalOcean Credentials
    description: DigitalOcean credentials and SSH keys.
  - name: Hetzner Credentials
    description: Hetzner credentials and SSH keys.
  - name: OVH Credentials
    description: OVH credentials and SSH keys.
  - name: Scaleway Credentials
    description: Scaleway credentials.
  - name: UpCloud Credentials
    description: UpCloud credentials and SSH keys.
  - name: Data Source Credentials
    description: Credentials for metrics and log sources.
  - name: DNS Credentials
    description: Credentials for DNS providers.
  - name: Object Storage Buckets
    description: >-
      Buckets Ankra creates and manages on an organisation's own provider
      credentials.
  - name: DNS
    description: DNS zones and records, including custom organisation zones.
  - name: Cloudflare
    description: Cloudflare domains and the credentials behind them.
  - name: Variables
    description: Organisation- and cluster-scoped variables.
  - name: SOPS
    description: Encrypt and decrypt values with the organisation SOPS config.
  - name: Alerts
    description: Alert integrations and ingest credentials.
  - name: Notifications
    description: Notification routes and their delivery targets.
  - name: Support
    description: Support tickets.
  - name: AI Settings
    description: Organisation AI provider, model catalog and per-function model settings
paths:
  /org/service-admission/reviews/{review_id}:
    get:
      tags:
        - Services
      summary: Resume your service review
      description: >-
        Actor-scoped history on the primary database. Requires current
        applications rollout and applications.deploy; each row requires
        clusters.read for every destination and clusters.operate for the service
        cluster, intersected with live token scopes. Foreign actors, deleted
        resources and inaccessible reviews are hidden. Secret values, secret
        reference IDs and internal consumer binding IDs are never returned.
        Pending means only that the original review window has not expired;
        confirmation revalidates authority and configuration. Expired reviews
        require a new review; confirmed receipts remain confirmed after
        execution retention and are not readiness evidence.
      operationId: getServiceReviewSession
      parameters:
        - name: review_id
          in: path
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Currently authorised review projection.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceReviewSummary'
        '307':
          description: Redirect to login
        '401':
          description: Authentication required
        '403':
          description: Insufficient permission or missing browser CSRF
        '404':
          description: Not accessible, absent, or rollout disabled
        '409':
          description: Stale revision, missing policy or unavailable deployment binding
        '422':
          description: Invalid or ambiguous request
        '500':
          description: Internal error
        '503':
          description: Rollout availability could not be verified
      security:
        - SessionCookie: []
components:
  schemas:
    ServiceReviewSummary:
      type: object
      additionalProperties: false
      required:
        - id
        - package_version_id
        - cluster_id
        - name
        - region
        - data_boundary
        - digest
        - mode
        - parameters
        - secret_inputs
        - destinations
        - state
        - created_at
        - expires_at
        - execution_id
        - confirmed_at
      properties:
        id:
          type: string
          format: uuid
        package_version_id:
          type: string
          format: uuid
        cluster_id:
          type: string
          format: uuid
        name:
          type: string
        region:
          type: string
        data_boundary:
          type: string
        digest:
          type: string
        mode:
          type: string
          enum:
            - customer
            - existing
            - hosted
        parameters:
          type: object
          additionalProperties:
            type: integer
            format: int64
        secret_inputs:
          type: array
          items:
            type: string
          description: >-
            Declared input names only; credential references and values are
            never returned.
        destinations:
          type: array
          items:
            $ref: '#/components/schemas/ServiceReviewDestination'
        state:
          type: string
          enum:
            - pending
            - expired
            - confirmed
        created_at:
          type: string
          format: date-time
        expires_at:
          type: string
          format: date-time
        execution_id:
          type: string
          format: uuid
          nullable: true
        confirmed_at:
          type: string
          format: date-time
          nullable: true
    ServiceReviewDestination:
      type: object
      additionalProperties: false
      required:
        - application_id
        - cluster_id
        - namespace
      properties:
        application_id:
          type: string
          format: uuid
        cluster_id:
          type: string
          format: uuid
        namespace:
          type: string
  securitySchemes:
    SessionCookie:
      description: Browser session. Mutations also require X-Ankra-CSRF.
      in: cookie
      name: ankra_session
      type: apiKey

````