import requests
url = "https://platform.ankra.app/api/v1/org/stack-profiles/summary-runtime-qualifications"
payload = { "request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({request_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a'})
};
fetch('https://platform.ankra.app/api/v1/org/stack-profiles/summary-runtime-qualifications', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://platform.ankra.app/api/v1/org/stack-profiles/summary-runtime-qualifications \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}
'{
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"state": "<string>",
"outcome": "unverified",
"agent_version": "<string>",
"image": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"report": {
"version": "profile_runtime_qualification_v1",
"nonce": "<string>",
"policy": "profile_analysis_stdin_v1",
"image": "<string>",
"checks": {
"non_root_identity": "satisfied",
"no_new_privileges": "satisfied",
"seccomp_filter": "satisfied",
"capabilities_dropped": "satisfied",
"service_account_token_absent": "satisfied",
"root_filesystem_read_only": "satisfied",
"temporary_write_denied_read_only": "satisfied",
"memory_limit_at_most_one_gib": "satisfied",
"cpu_limit_at_most_one_core": "satisfied",
"admission_policy": "satisfied",
"authenticated_input_attach": "satisfied",
"bounded_output": "satisfied",
"normal_cleanup": "satisfied",
"network_egress_ipv4": "satisfied",
"network_ingress_ipv4": "satisfied",
"network_egress_ipv6": "satisfied",
"network_ingress_ipv6": "satisfied",
"network_cleanup": "satisfied",
"cancel_cleanup": "unverified",
"agent_death_cleanup": "unverified",
"transport_reconnect": "unverified",
"duplicate_delivery": "unverified",
"restore_replay": "unverified",
"nats_account_isolation": "unverified",
"nats_retention": "unverified",
"backup_retention": "unverified"
}
},
"subject_retention_observed": true,
"cleanup_state": "observed"
}{
"detail": "<string>",
"code": "qualification_unavailable"
}{
"detail": "<string>",
"code": "qualification_unavailable"
}Start a profile runtime qualification
Requires fresh organisation-wide ai.manage and clusters.read on the recorded target; start and cancel also require clusters.operate. Token scopes and current membership are rechecked. Start derives the target from organisation staging settings, requires one recently checked-in agent, and serializes active runs across API replicas. Only a fixed synthetic nonce reaches the probe: no profile configuration, credentials or model request. Cancellation records a request; external cleanup remains unverified until independently observed. History remains readable when new starts are unconfigured. Browser writes require CSRF.
import requests
url = "https://platform.ankra.app/api/v1/org/stack-profiles/summary-runtime-qualifications"
payload = { "request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a" }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({request_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a'})
};
fetch('https://platform.ankra.app/api/v1/org/stack-profiles/summary-runtime-qualifications', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));curl --request POST \
--url https://platform.ankra.app/api/v1/org/stack-profiles/summary-runtime-qualifications \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a"
}
'{
"operation_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"request_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"cluster_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"agent_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"state": "<string>",
"outcome": "unverified",
"agent_version": "<string>",
"image": "<string>",
"created_at": "2023-11-07T05:31:56Z",
"updated_at": "2023-11-07T05:31:56Z",
"report": {
"version": "profile_runtime_qualification_v1",
"nonce": "<string>",
"policy": "profile_analysis_stdin_v1",
"image": "<string>",
"checks": {
"non_root_identity": "satisfied",
"no_new_privileges": "satisfied",
"seccomp_filter": "satisfied",
"capabilities_dropped": "satisfied",
"service_account_token_absent": "satisfied",
"root_filesystem_read_only": "satisfied",
"temporary_write_denied_read_only": "satisfied",
"memory_limit_at_most_one_gib": "satisfied",
"cpu_limit_at_most_one_core": "satisfied",
"admission_policy": "satisfied",
"authenticated_input_attach": "satisfied",
"bounded_output": "satisfied",
"normal_cleanup": "satisfied",
"network_egress_ipv4": "satisfied",
"network_ingress_ipv4": "satisfied",
"network_egress_ipv6": "satisfied",
"network_ingress_ipv6": "satisfied",
"network_cleanup": "satisfied",
"cancel_cleanup": "unverified",
"agent_death_cleanup": "unverified",
"transport_reconnect": "unverified",
"duplicate_delivery": "unverified",
"restore_replay": "unverified",
"nats_account_isolation": "unverified",
"nats_retention": "unverified",
"backup_retention": "unverified"
}
},
"subject_retention_observed": true,
"cleanup_state": "observed"
}{
"detail": "<string>",
"code": "qualification_unavailable"
}{
"detail": "<string>",
"code": "qualification_unavailable"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
One nonzero UUID per operator action. Retrying it as the same actor returns the recorded operation without redispatch, including after completion or target changes.
Response
Recorded qualification operation; inspect state and individual observations.
Private execution history bound to the exact staging cluster, agent version and operator-configured immutable probe image. Completion means the report was accepted, not that every observation passed. This operation cannot enable generation or write a qualification receipt.
Execution state; success is rendered as completed. Terminal failures can include failed, timeout, or cancelled.
unverified, completed, unavailable, cancelled, interrupted, authority_changed 1 - 128^registry\.ankra\.cloud/cluster/cluster@sha256:[a-f0-9]{64}$Bounded synthetic observations, never an admission receipt or an overall pass. Version one leaves lifecycle, account and backup checks unverified. IPv6 can remain unverified on a single-stack cluster.
Show child attributes
Show child attributes
True only after actual reply and input subjects were checked against JetStream before and after the exchange. False means unverified, not retained. Does not establish account isolation, backups, or future topology.
Observed only for reported normal and network cleanup. Cancellation acceptance does not prove cleanup.
observed, unverified