What governs this agent

GET/api/public/v1/agents/{agent_id}/zone

The assigned zone, how it was assigned, the layer stack top-down, and every effective policy with the layer that authored it and whether that layer is the agent's own (authored_here / inherited). Resolved by app/zones/resolution.py — the one implementation every zone surface shares.

cURL

curl --fail-with-body -X GET 'https://app.openlatch.ai/api/public/v1/agents/<agent_id>/zone' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY"

Python

import json
import os
import urllib.request

request = urllib.request.Request(
    'https://app.openlatch.ai/api/public/v1/agents/<agent_id>/zone',
    method='GET',
    headers={
        'Authorization': 'Bearer ' + os.environ['OPENLATCH_API_KEY'],
    },
)
with urllib.request.urlopen(request) as response:
    text = response.read().decode()
    print(json.dumps(json.loads(text), indent=2) if text else response.status)

Bash

#!/usr/bin/env bash
set -euo pipefail

curl -sS --fail-with-body -X GET 'https://app.openlatch.ai/api/public/v1/agents/<agent_id>/zone' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" | jq .

PowerShell

$headers = @{
  Authorization = "Bearer $env:OPENLATCH_API_KEY"
}
Invoke-RestMethod -Method GET -Uri 'https://app.openlatch.ai/api/public/v1/agents/<agent_id>/zone' -Headers $headers | ConvertTo-Json -Depth 20

Authorization

Role in the organization	This endpoint
owner	Allowed
admin	Allowed
editor	Allowed
viewer	Allowed

A key carries the role its owner holds in the organization. See Authentication.

API key scope: zones:read

Path parameters

Parameter	Type	Description
agent_id	string	Required.

Response

• 200 OK — the call succeeded.
• 401 Unauthorized — UNAUTHORIZED
• 402 Payment Required — license_expired
• 403 Forbidden — FEATURE_DISABLED, FORBIDDEN, INSUFFICIENT_SCOPE
• 404 Not Found — NOT_FOUND
• 422 Unprocessable Content — INVALID_ID, VALIDATION_ERROR
• 429 Too Many Requests — TOO_MANY_REQUESTS
• 500 Internal Server Error — INTERNAL_SERVER_ERROR, tenant_isolation_violation
• 503 Service Unavailable — ENGINE_UNAVAILABLE, FEATURE_STATE_UNAVAILABLE, SERVICE_UNAVAILABLE

Response fields

Field	Type	Description
assigned_zone	string or null	Required.
assignment_source	string	Required.
capabilities	object or null
capabilities.ask	boolean	Required. Can show its own prompt to the developer.
capabilities.enforces	string	Required. all, or shell_only: which tools its refusals actually reach.
capabilities.notice	boolean	Required. Can show a non-blocking message.
capabilities.observes_execution	boolean	Required. Emits a post-execution event, so an answer can be inferred.
client	object	Required. What the install last told us about itself.
client.bundle_revision	string or null
client.omitted_kinds	array of string	Required.
client.version	string or null
compatibility	object	Required. Per-family compatibility posture for one install, keyed by contract family.
compatibility.families	object	Required.
control_level	string	Required.
effective	array of object	Required.
effective[].dimensions	array of string	Required.
effective[].display_title	string	The AIP's name: its title, else its generated_title, else its statement.
effective[].enforced_on_this_install	boolean	Required.
effective[].mode	string	Required.
effective[].optimize	array of object
effective[].optimize_preview	array of object
effective[].origin_layer_id	string	Required.
effective[].origin_layer_label	string	Required.
effective[].policy_id	string	Required.
effective[].public_id	string	Required.
effective[].standing	string	Required.
effective[].statement	string	Required.
kpis	object	Required.
kpis.anomalies_14d	integer
kpis.authored_here	integer	Required.
kpis.enforcing_n	integer	Required.
kpis.enforcing_of	integer	Required.
kpis.inherited	integer	Required.
kpis.policies_in_force	integer	Required.
layers	array of object	Required.
layers[].depth	integer	Required.
layers[].label	string	Required.
layers[].unit_id	string	Required.
stale	boolean	Required.

Example response

{
  "assigned_zone": "string",
  "assignment_source": "string",
  "capabilities": {
    "ask": false,
    "enforces": "string",
    "notice": false,
    "observes_execution": false
  },
  "client": {
    "bundle_revision": "string",
    "omitted_kinds": [
      "string"
    ],
    "version": "string"
  },
  "compatibility": {
    "families": {}
  },
  "control_level": "string",
  "effective": [
    {
      "dimensions": [
        "string"
      ],
      "display_title": "",
      "enforced_on_this_install": false,
      "mode": "string",
      "optimize": [
        {
          "atom_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
          "directive": {
            "lever": "effort_clamp",
            "params": {}
          }
        }
      ],
      "optimize_preview": [
        {}
      ],
      "origin_layer_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "origin_layer_label": "string",
      "policy_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "public_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "standing": "string",
      "statement": "string"
    }
  ],
  "kpis": {
    "anomalies_14d": 0,
    "authored_here": 3,
    "enforcing_n": 3,
    "enforcing_of": 3,
    "inherited": 3,
    "policies_in_force": 3
  },
  "layers": [
    {
      "depth": 3,
      "label": "string",
      "unit_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10"
    }
  ],
  "stale": false
}

Related

• DELETE Reset an agent to automatic zone assignment
• PUT Assign an agent to a zone by hand
• GET List the organization's org units