Beta module namespace
sandbox
Beta routes may change with notice and are NOT covered by the 24-month stable window of the core contract.
Every module route is enumerated with method, path, auth and required permission; request/response schemas are not published for the beta surface.
13 operations
| Method | Path | Required permission | Authentication | Summary |
|---|---|---|---|---|
| post | /v1/m/sandbox/compare | sandbox:run:admin | Bearer token | Runs the SAME scenario/steps against two variants, scores both (if a Scorer is wired) or compares their deterministic outputs_hash, derives a verdict + delta, and persists two runs plus a sandbox_comparison (append-only deploy-decision evidence). |
| get | /v1/m/sandbox/comparisons | sandbox:run:read | Bearer token | Lists the tenant's pre/post-deploy comparisons. |
| get | /v1/m/sandbox/comparisons/{id} | sandbox:run:read | Bearer token | Returns one comparison. |
| post | /v1/m/sandbox/replay | sandbox:run:write | Bearer token | Reconstructs a historical session's input timeline via HistorySource and re-executes it DETERMINISTICALLY against the supplied mocks. |
| get | /v1/m/sandbox/runs | sandbox:run:read | Bearer token | Lists the tenant's runs (optionally filtered by kind / scenario). |
| get | /v1/m/sandbox/runs/{id} | sandbox:run:read | Bearer token | Returns one run. |
| get | /v1/m/sandbox/runs/{id}/outputs | sandbox:run:read | Bearer token | Lists one run's per-step outputs. |
| get | /v1/m/sandbox/runs/{id}/stream | sandbox:run:read | Bearer token | sandbox module route (requires sandbox:run:read) |
| get | /v1/m/sandbox/scenarios | sandbox:scenario:read | Bearer token | Lists the tenant's scenarios (optionally filtered by status). |
| post | /v1/m/sandbox/scenarios | sandbox:scenario:write | Bearer token | Records a synthetic, operator-authored scenario fixture. |
| get | /v1/m/sandbox/scenarios/{id} | sandbox:scenario:read | Bearer token | Returns one scenario. |
| post | /v1/m/sandbox/scenarios/{id}/archive | sandbox:scenario:admin | Bearer token | Marks a scenario archived (admin-tier + self-audited). |
| post | /v1/m/sandbox/scenarios/{id}/run | sandbox:run:write | Bearer token | Loads a scenario, runs its steps against the isolated runner, persists the run + per-step outputs, and (if a suite_ref is given AND a Scorer is wired) scores the outputs. |