Threat Filter Contract
- Request lens: /v1/security/threat-scores/request
- Organization lens: /v1/security/threat-scores/org
- User lens: /v1/security/threat-scores/user
- Time filter (window_hours): 24
Threat score visibility by request, organization, and user to support security inspection and incident triage.
Scope source: env
Threat score overrides are read-only and not yet implementedin this console. Any write attempt is intentionally non-operational and a no-op until backend control routes are available.
{
"items": [],
"lens": "request",
"limit": 50,
"mode": "operational",
"scope": {
"TenantID": "11111111-1111-1111-1111-111111111111",
"OrgID": "org-runtime-smoke",
"ActorSub": "smoke-user",
"ClaimsVersion": "v1"
},
"source": "proxy_security_runtime",
"window_hours": 24
}{
"items": [],
"lens": "org",
"limit": 50,
"mode": "operational",
"scope": {
"TenantID": "11111111-1111-1111-1111-111111111111",
"OrgID": "org-runtime-smoke",
"ActorSub": "smoke-user",
"ClaimsVersion": "v1"
},
"source": "proxy_security_runtime",
"window_hours": 24
}{
"items": [],
"lens": "user",
"limit": 50,
"mode": "operational",
"scope": {
"TenantID": "11111111-1111-1111-1111-111111111111",
"OrgID": "org-runtime-smoke",
"ActorSub": "smoke-user",
"ClaimsVersion": "v1"
},
"source": "proxy_security_runtime",
"window_hours": 24
}