saas__list_policy_violations

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 6 props · 0 required

{
  "type": "object",
  "required": [],
  "properties": {
    "status": {
      "type": "array",
      "items": {
        "enum": [
          "active",
          "remediated",
          "accepted",
          "suppressed"
        ],
        "type": "string"
      }
    },
    "severity": {
      "type": "array",
      "items": {
        "enum": [
          "critical",
          "high",
          "medium",
          "low"
        ],
        "type": "string"
      }
    },
    "time_range": {
      "enum": [
        "1h",
        "24h",
        "7d",
        "30d"
      ],
      "type": "string",
      "default": "7d"
    },
    "policy_type": {
      "type": "array",
      "items": {
        "enum": [
          "access_control",
          "data_protection",
          "encryption",
          "sharing",
          "retention",
          "authentication"
        ],
        "type": "string"
      }
    },
    "application_id": {
      "type": "string"
    },
    "compliance_framework": {
      "type": "array",
      "items": {
        "enum": [
          "sox",
          "pci",
          "hipaa",
          "gdpr",
          "iso27001",
          "nist"
        ],
        "type": "string"
      }
    }
  }
}

registry name changes propagate to the decoy surface on the next drain