api__search_incidents

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 6 props · 0 required

{
  "type": "object",
  "required": [],
  "properties": {
    "limit": {
      "type": "integer",
      "maximum": 500,
      "minimum": 1
    },
    "query": {
      "type": "string"
    },
    "status": {
      "enum": [
        "open",
        "investigating",
        "contained",
        "resolved"
      ],
      "type": "string"
    },
    "severity": {
      "type": "array",
      "items": {
        "enum": [
          "critical",
          "high",
          "medium",
          "low"
        ],
        "type": "string"
      }
    },
    "date_range": {
      "type": "object",
      "properties": {
        "end_date": {
          "type": "string",
          "format": "date-time"
        },
        "start_date": {
          "type": "string",
          "format": "date-time"
        }
      }
    },
    "attack_vector": {
      "type": "array",
      "items": {
        "enum": [
          "injection",
          "broken_authentication",
          "sensitive_data_exposure",
          "xxe",
          "broken_access_control",
          "security_misconfiguration",
          "xss",
          "insecure_deserialization",
          "components_with_vulnerabilities",
          "insufficient_logging"
        ],
        "type": "string"
      }
    }
  }
}

registry name changes propagate to the decoy surface on the next drain