Create a versioned Assurance Policy
POST
/v1/assurance/policiesHow to call this endpoint
Every ACP API request uses bearer authentication. The examples here show the actual request path, auth header, and body shape that the platform expects.
Path, query, and header parameters
These parameters control which ACP object the endpoint acts on and how the request is processed.
Path parameters
None.
Query parameters
None.
Body schema
Content type: application/json · Required
| Field | Type | Required | Description |
|---|---|---|---|
| id | string | No | Unique identifier. |
| name | string | Yes | Human-readable name. |
| description | string | No | Human-readable description. |
| projectId | string | No | Project ID. |
| status | draft | active | archived | No | Current lifecycle status. |
| definition | object | Yes | At least one test, evaluation, or optimization gate is required. Gate IDs are unique across all gate kinds. |
| definition.schemaVersion | computer_agents_assurance_policy_v2 | No | — |
| definition.testGates | object[] | No | — |
| definition.testGates[].id | string | No | Unique identifier. |
| definition.testGates[].testPlanId | string | Yes | — |
| definition.testGates[].versionId | string | No | — |
| definition.testGates[].requireCommitSha | boolean | No | — |
| definition.testGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance. Disable only for an explicitly approved legacy/non-release migration policy. |
| definition.testGates[].maxAgeHours | number | No | — |
| definition.evaluationGates | object[] | No | — |
| definition.evaluationGates[].id | string | No | Unique identifier. |
| definition.evaluationGates[].evaluationId | string | Yes | — |
| definition.evaluationGates[].versionId | string | No | — |
| definition.evaluationGates[].minimumAverageScore | number | No | — |
| definition.evaluationGates[].minimumPassRate | number | No | — |
| definition.evaluationGates[].requireRunFingerprint | boolean | No | — |
| definition.evaluationGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance for the exact Evaluation result set and immutable bindings. |
| definition.evaluationGates[].requireSignedEvidence | boolean | No | Require the canonical Evaluation evidence fingerprint to carry a cryptographically verified Google Cloud KMS signature. |
| definition.evaluationGates[].maxAgeHours | number | No | — |
| definition.optimizationGates | object[] | No | — |
| definition.optimizationGates[].id | string | No | Unique identifier. |
| definition.optimizationGates[].agentId | string | Yes | Agent ID. |
| definition.optimizationGates[].requireTargetMet | boolean | No | — |
| definition.optimizationGates[].requirePublishedCandidate | boolean | No | — |
| definition.optimizationGates[].maxAgeHours | number | No | — |
| definition.approval | object | No | — |
| definition.approval.mode | none | manual | No | — |
| definition.budget | object | No | — |
| definition.budget.maximumTotalCostUsd | number | No | — |
| metadata | object | No | Free-form metadata object. |
What the API returns
Each response code below includes the documented payload shape for the ACP API.
201Assurance Policy and initial published versionapplication/json
| Field | Type | Required | Description |
|---|---|---|---|
| assurancePolicy | object | Yes | — |
| assurancePolicy.id | string | Yes | Unique identifier. |
| assurancePolicy.projectId | string | Yes | Project ID. |
| assurancePolicy.name | string | Yes | Human-readable name. |
| assurancePolicy.description | string | Yes | Human-readable description. |
| assurancePolicy.status | draft | active | archived | Yes | Current lifecycle status. |
| assurancePolicy.definition | object | Yes | At least one test, evaluation, or optimization gate is required. Gate IDs are unique across all gate kinds. |
| assurancePolicy.definition.schemaVersion | computer_agents_assurance_policy_v2 | No | — |
| assurancePolicy.definition.testGates | object[] | No | — |
| assurancePolicy.definition.testGates[].id | string | No | Unique identifier. |
| assurancePolicy.definition.testGates[].testPlanId | string | Yes | — |
| assurancePolicy.definition.testGates[].versionId | string | No | — |
| assurancePolicy.definition.testGates[].requireCommitSha | boolean | No | — |
| assurancePolicy.definition.testGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance. Disable only for an explicitly approved legacy/non-release migration policy. |
| assurancePolicy.definition.testGates[].maxAgeHours | number | No | — |
| assurancePolicy.definition.evaluationGates | object[] | No | — |
| assurancePolicy.definition.evaluationGates[].id | string | No | Unique identifier. |
| assurancePolicy.definition.evaluationGates[].evaluationId | string | Yes | — |
| assurancePolicy.definition.evaluationGates[].versionId | string | No | — |
| assurancePolicy.definition.evaluationGates[].minimumAverageScore | number | No | — |
| assurancePolicy.definition.evaluationGates[].minimumPassRate | number | No | — |
| assurancePolicy.definition.evaluationGates[].requireRunFingerprint | boolean | No | — |
| assurancePolicy.definition.evaluationGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance for the exact Evaluation result set and immutable bindings. |
| assurancePolicy.definition.evaluationGates[].requireSignedEvidence | boolean | No | Require the canonical Evaluation evidence fingerprint to carry a cryptographically verified Google Cloud KMS signature. |
| assurancePolicy.definition.evaluationGates[].maxAgeHours | number | No | — |
| assurancePolicy.definition.optimizationGates | object[] | No | — |
| assurancePolicy.definition.optimizationGates[].id | string | No | Unique identifier. |
| assurancePolicy.definition.optimizationGates[].agentId | string | Yes | Agent ID. |
| assurancePolicy.definition.optimizationGates[].requireTargetMet | boolean | No | — |
| assurancePolicy.definition.optimizationGates[].requirePublishedCandidate | boolean | No | — |
| assurancePolicy.definition.optimizationGates[].maxAgeHours | number | No | — |
| assurancePolicy.definition.approval | object | No | — |
| assurancePolicy.definition.approval.mode | none | manual | No | — |
| assurancePolicy.definition.budget | object | No | — |
| assurancePolicy.definition.budget.maximumTotalCostUsd | number | No | — |
| assurancePolicy.policyFingerprint | string | Yes | — |
| assurancePolicy.publishedVersionId | string | Yes | — |
| assurancePolicy.metadata | object | Yes | Free-form metadata object. |
| assurancePolicy.createdAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.updatedAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.versions | object[] | No | — |
| assurancePolicy.versions[].id | string | Yes | Unique identifier. |
| assurancePolicy.versions[].assurancePolicyId | string | Yes | — |
| assurancePolicy.versions[].version | integer | Yes | — |
| assurancePolicy.versions[].label | string | Yes | — |
| assurancePolicy.versions[].description | string | Yes | Human-readable description. |
| assurancePolicy.versions[].status | saved | published | archived | Yes | Current lifecycle status. |
| assurancePolicy.versions[].snapshot | object | Yes | — |
| assurancePolicy.versions[].snapshot.name | string | Yes | Human-readable name. |
| assurancePolicy.versions[].snapshot.description | string | Yes | Human-readable description. |
| assurancePolicy.versions[].snapshot.status | draft | active | archived | Yes | Current lifecycle status. |
| assurancePolicy.versions[].snapshot.projectId | string | Yes | Project ID. |
| assurancePolicy.versions[].snapshot.definition | object | Yes | At least one test, evaluation, or optimization gate is required. Gate IDs are unique across all gate kinds. |
| assurancePolicy.versions[].snapshot.definition.schemaVersion | computer_agents_assurance_policy_v2 | No | — |
| assurancePolicy.versions[].snapshot.definition.testGates | object[] | No | — |
| assurancePolicy.versions[].snapshot.definition.testGates[].id | string | No | Unique identifier. |
| assurancePolicy.versions[].snapshot.definition.testGates[].testPlanId | string | Yes | — |
| assurancePolicy.versions[].snapshot.definition.testGates[].versionId | string | No | — |
| assurancePolicy.versions[].snapshot.definition.testGates[].requireCommitSha | boolean | No | — |
| assurancePolicy.versions[].snapshot.definition.testGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance. Disable only for an explicitly approved legacy/non-release migration policy. |
| assurancePolicy.versions[].snapshot.definition.testGates[].maxAgeHours | number | No | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates | object[] | No | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].id | string | No | Unique identifier. |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].evaluationId | string | Yes | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].versionId | string | No | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].minimumAverageScore | number | No | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].minimumPassRate | number | No | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].requireRunFingerprint | boolean | No | — |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance for the exact Evaluation result set and immutable bindings. |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].requireSignedEvidence | boolean | No | Require the canonical Evaluation evidence fingerprint to carry a cryptographically verified Google Cloud KMS signature. |
| assurancePolicy.versions[].snapshot.definition.evaluationGates[].maxAgeHours | number | No | — |
| assurancePolicy.versions[].snapshot.definition.optimizationGates | object[] | No | — |
| assurancePolicy.versions[].snapshot.definition.optimizationGates[].id | string | No | Unique identifier. |
| assurancePolicy.versions[].snapshot.definition.optimizationGates[].agentId | string | Yes | Agent ID. |
| assurancePolicy.versions[].snapshot.definition.optimizationGates[].requireTargetMet | boolean | No | — |
| assurancePolicy.versions[].snapshot.definition.optimizationGates[].requirePublishedCandidate | boolean | No | — |
| assurancePolicy.versions[].snapshot.definition.optimizationGates[].maxAgeHours | number | No | — |
| assurancePolicy.versions[].snapshot.definition.approval | object | No | — |
| assurancePolicy.versions[].snapshot.definition.approval.mode | none | manual | No | — |
| assurancePolicy.versions[].snapshot.definition.budget | object | No | — |
| assurancePolicy.versions[].snapshot.definition.budget.maximumTotalCostUsd | number | No | — |
| assurancePolicy.versions[].snapshot.metadata | object | Yes | Free-form metadata object. |
| assurancePolicy.versions[].policyFingerprint | string | Yes | — |
| assurancePolicy.versions[].metadata | object | Yes | Free-form metadata object. |
| assurancePolicy.versions[].publishedAt | string | Yes | — |
| assurancePolicy.versions[].createdAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.versions[].updatedAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.runs | object[] | No | — |
| assurancePolicy.runs[].id | string | Yes | Unique identifier. |
| assurancePolicy.runs[].assurancePolicyId | string | Yes | — |
| assurancePolicy.runs[].policyVersionId | string | Yes | — |
| assurancePolicy.runs[].projectId | string | Yes | Project ID. |
| assurancePolicy.runs[].releaseId | string | Yes | — |
| assurancePolicy.runs[].commitSha | string | Yes | — |
| assurancePolicy.runs[].agentId | string | Yes | Agent ID. |
| assurancePolicy.runs[].agentVersionId | string | Yes | — |
| assurancePolicy.runs[].status | running | passed | failed | blocked | cancelled | Yes | Current lifecycle status. |
| assurancePolicy.runs[].evidenceReferences | object | Yes | — |
| assurancePolicy.runs[].evidenceReferences.testRunIds | string[] | No | — |
| assurancePolicy.runs[].evidenceReferences.evaluationRunIds | string[] | No | — |
| assurancePolicy.runs[].evidenceReferences.optimizationJobIds | string[] | No | — |
| assurancePolicy.runs[].evidence | object | Yes | — |
| assurancePolicy.runs[].evidence.schemaVersion | computer_agents_assurance_evidence_v1 | Yes | — |
| assurancePolicy.runs[].evidence.runId | string | Yes | — |
| assurancePolicy.runs[].evidence.policyId | string | Yes | — |
| assurancePolicy.runs[].evidence.policyVersionId | string | Yes | — |
| assurancePolicy.runs[].evidence.policyFingerprint | string | Yes | — |
| assurancePolicy.runs[].evidence.subject | object | Yes | — |
| assurancePolicy.runs[].evidence.subject.projectId | string | Yes | Project ID. |
| assurancePolicy.runs[].evidence.subject.releaseId | string | Yes | — |
| assurancePolicy.runs[].evidence.subject.commitSha | string | Yes | — |
| assurancePolicy.runs[].evidence.subject.agentId | string | Yes | Agent ID. |
| assurancePolicy.runs[].evidence.subject.agentVersionId | string | Yes | — |
| assurancePolicy.runs[].evidence.evaluatedAt | string | Yes | — |
| assurancePolicy.runs[].evidence.gates | object[] | Yes | — |
| assurancePolicy.runs[].evidence.gates[].id | string | Yes | Unique identifier. |
| assurancePolicy.runs[].evidence.gates[].kind | test | evaluation | optimization | budget | Yes | — |
| assurancePolicy.runs[].evidence.gates[].status | passed | failed | pending | Yes | Current lifecycle status. |
| assurancePolicy.runs[].evidence.gates[].reason | string | Yes | — |
| assurancePolicy.runs[].evidence.gates[].evidenceId | string | Yes | — |
| assurancePolicy.runs[].evidence.gates[].evidenceFingerprint | string | Yes | — |
| assurancePolicy.runs[].evidence.gates[].actual | object | Yes | — |
| assurancePolicy.runs[].evidence.gates[].required | object | Yes | — |
| assurancePolicy.runs[].evidence.evidenceReferences | object | Yes | — |
| assurancePolicy.runs[].evidence.evidenceReferences.testRunIds | string[] | No | — |
| assurancePolicy.runs[].evidence.evidenceReferences.evaluationRunIds | string[] | No | — |
| assurancePolicy.runs[].evidence.evidenceReferences.optimizationJobIds | string[] | No | — |
| assurancePolicy.runs[].evidence.cost | object | Yes | — |
| assurancePolicy.runs[].evidence.cost.totalCostUsd | number | Yes | — |
| assurancePolicy.runs[].evidence.cost.complete | boolean | Yes | — |
| assurancePolicy.runs[].evidence.fingerprint | string | Yes | — |
| assurancePolicy.runs[].decision | object | Yes | — |
| assurancePolicy.runs[].decision.schemaVersion | computer_agents_assurance_decision_v1 | Yes | — |
| assurancePolicy.runs[].decision.runId | string | Yes | — |
| assurancePolicy.runs[].decision.outcome | passed | failed | pending_evidence | awaiting_approval | Yes | — |
| assurancePolicy.runs[].decision.technicalOutcome | passed | failed | pending | Yes | — |
| assurancePolicy.runs[].decision.policyFingerprint | string | Yes | — |
| assurancePolicy.runs[].decision.evidenceFingerprint | string | Yes | — |
| assurancePolicy.runs[].decision.approval | object | Yes | — |
| assurancePolicy.runs[].decision.approval.status | not_required | pending | approved | Yes | Current lifecycle status. |
| assurancePolicy.runs[].decision.approval.actorId | string | Yes | — |
| assurancePolicy.runs[].decision.approval.actorType | user | policy | Yes | — |
| assurancePolicy.runs[].decision.approval.approvedAt | string | Yes | — |
| assurancePolicy.runs[].decision.approval.evidenceFingerprint | string | Yes | — |
| assurancePolicy.runs[].decision.decidedAt | string | Yes | — |
| assurancePolicy.runs[].decision.fingerprint | string | Yes | — |
| assurancePolicy.runs[].approval | object | Yes | — |
| assurancePolicy.runs[].approval.approvedByUserId | string | Yes | — |
| assurancePolicy.runs[].approval.approvedAt | string | Yes | — |
| assurancePolicy.runs[].approval.evidenceFingerprint | string | Yes | — |
| assurancePolicy.runs[].revision | integer | Yes | — |
| assurancePolicy.runs[].metadata | object | Yes | Free-form metadata object. |
| assurancePolicy.runs[].createdAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.runs[].updatedAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.runs[].completedAt | string | Yes | ISO 8601 timestamp. |
| assurancePolicy.runs[].events | object[] | No | — |
| version | object | Yes | — |
| version.id | string | Yes | Unique identifier. |
| version.assurancePolicyId | string | Yes | — |
| version.version | integer | Yes | — |
| version.label | string | Yes | — |
| version.description | string | Yes | Human-readable description. |
| version.status | saved | published | archived | Yes | Current lifecycle status. |
| version.snapshot | object | Yes | — |
| version.snapshot.name | string | Yes | Human-readable name. |
| version.snapshot.description | string | Yes | Human-readable description. |
| version.snapshot.status | draft | active | archived | Yes | Current lifecycle status. |
| version.snapshot.projectId | string | Yes | Project ID. |
| version.snapshot.definition | object | Yes | At least one test, evaluation, or optimization gate is required. Gate IDs are unique across all gate kinds. |
| version.snapshot.definition.schemaVersion | computer_agents_assurance_policy_v2 | No | — |
| version.snapshot.definition.testGates | object[] | No | — |
| version.snapshot.definition.testGates[].id | string | No | Unique identifier. |
| version.snapshot.definition.testGates[].testPlanId | string | Yes | — |
| version.snapshot.definition.testGates[].versionId | string | No | — |
| version.snapshot.definition.testGates[].requireCommitSha | boolean | No | — |
| version.snapshot.definition.testGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance. Disable only for an explicitly approved legacy/non-release migration policy. |
| version.snapshot.definition.testGates[].maxAgeHours | number | No | — |
| version.snapshot.definition.evaluationGates | object[] | No | — |
| version.snapshot.definition.evaluationGates[].id | string | No | Unique identifier. |
| version.snapshot.definition.evaluationGates[].evaluationId | string | Yes | — |
| version.snapshot.definition.evaluationGates[].versionId | string | No | — |
| version.snapshot.definition.evaluationGates[].minimumAverageScore | number | No | — |
| version.snapshot.definition.evaluationGates[].minimumPassRate | number | No | — |
| version.snapshot.definition.evaluationGates[].requireRunFingerprint | boolean | No | — |
| version.snapshot.definition.evaluationGates[].requireTrustedEvidence | boolean | No | Require control-plane verified execution-worker provenance for the exact Evaluation result set and immutable bindings. |
| version.snapshot.definition.evaluationGates[].requireSignedEvidence | boolean | No | Require the canonical Evaluation evidence fingerprint to carry a cryptographically verified Google Cloud KMS signature. |
| version.snapshot.definition.evaluationGates[].maxAgeHours | number | No | — |
| version.snapshot.definition.optimizationGates | object[] | No | — |
| version.snapshot.definition.optimizationGates[].id | string | No | Unique identifier. |
| version.snapshot.definition.optimizationGates[].agentId | string | Yes | Agent ID. |
| version.snapshot.definition.optimizationGates[].requireTargetMet | boolean | No | — |
| version.snapshot.definition.optimizationGates[].requirePublishedCandidate | boolean | No | — |
| version.snapshot.definition.optimizationGates[].maxAgeHours | number | No | — |
| version.snapshot.definition.approval | object | No | — |
| version.snapshot.definition.approval.mode | none | manual | No | — |
| version.snapshot.definition.budget | object | No | — |
| version.snapshot.definition.budget.maximumTotalCostUsd | number | No | — |
| version.snapshot.metadata | object | Yes | Free-form metadata object. |
| version.policyFingerprint | string | Yes | — |
| version.metadata | object | Yes | Free-form metadata object. |
| version.publishedAt | string | Yes | — |
| version.createdAt | string | Yes | ISO 8601 timestamp. |
| version.updatedAt | string | Yes | ISO 8601 timestamp. |
400Invalid Assurance Policy contract
None.
Create a versioned Assurance Policy
Loading...
Response 201
Loading...