Choose the same execution host
These are sidecar/execution API routes, separate from MCP fetch_audit. Read them from the host that handled the call. Local socket access provides local authority; remote archive reads require the same credential used for execution and current authorization. Never follow an outcome URL to a different origin with credentials.
GET /healthz
No body required. Sidecar response: {"status":"ok","instance":"example","registered":true,"calls":0}. This reports process health and a local call counter, not detector readiness, upstream health or write safety. An authenticated remote execution host may return only status and the default engine name.
GET /v1/registration
Sidecar only. No request body. Returns instance (string), routes (an array such as ["conn_example/vendor.read"]) and default_engine (string). The default engine detects nothing. Lists configured local connection/tool handles; it neither registers a workload nor grants authority. Do not expose a loopback sidecar as a public credential service.
GET /v1/audit/{id}
Use the ID from X-Agindow-Audit or the audit URL in policy feedback. Returns an application/json audit artifact when retained: id, ts, tool, operation, mode, drift, decision, patch and proof, with optional confidence and metadata. See the schema reference for the full versioned shape. Not every streaming or bypass call has a retrievable artifact.
GET /v1/outcome/{id}
Use X-Agindow-Outcome after a response halt. Returns the retained original upstream status, headers and body with X-Agindow-Retained-Outcome: true. The HTTP status can be an upstream error. Retrieval does not execute the operation again. A request halt has no completed upstream outcome.
curl -i http://127.0.0.1:8789/v1/outcome/aud_exampleMissing or unavailable evidence
404 means missing, expired, evicted, not captured, wrong host, or inaccessible evidence; it is not proof that a write never happened. The sidecar may return 503 internal when archive access fails. An unauthenticated remote read can return 401; remote credential mismatch or lost authorization is concealed as 404. Error bodies can be plain text. Retention is process-local: sidecar FIFO up to 128 entries / 16 MiB; remote host up to 64 entries / 16 MiB. Restarts and instance changes lose access. Reconcile uncertain writes with the vendor using the original idempotency key.