Error code catalog
Search the stable central taxonomy and release feature contracts, then follow a safe next action.
Exact release scope. This page documents the reviewed v0.0.1 source at fcc5871. Check release status before enabling a gated capability.
How to diagnose
- 01
Read the whole envelope
HTTP status, error_code, category, detail, nextAction, retryability and correlation extensions belong together.
- 02
Find the owning state
Open the run, step, command, cluster, agent, provider or artifact named by the response.
- 03
Classify before retry
Input/policy/authorization errors need correction; only explicitly retryable transient failures should be retried.
- 04
Preserve secret-safe evidence
Record UTC, release, environment and identifiers without copying credentials or raw protected payloads.
Search all codes
245 of 245 stable codes in the reviewed taxonomy and feature contracts
API_VALIDATION_INVALID_REQUESTAPI & validation
MeaningThe api & validation contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
API_IDEMPOTENCY_KEY_REQUIREDAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
API_RESOURCE_NOT_FOUNDAPI & validation
MeaningA required api & validation resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
API_INTERNAL_ERRORAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
OUTBOUND_REQUEST_BLOCKEDAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
PRODUCTION_STARTUP_GUARD_FAILEDAPI & validation
MeaningThe production startup validator rejected one or more unsafe dependencies or settings.
Safe next actionKeep the service stopped; read the failed guard list, fix durable database, artifacts, key, replica or feature-gate posture, then restart.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
STARTUP_DEPENDENCY_BLOCKEDAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
STARTUP_INVALID_CONFIGURATIONAPI & validation
MeaningRuntime configuration is internally invalid or outside a supported range.
Safe next actionCompare effective configuration with the profile and configuration reference; correct it before restarting.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_VALIDATION_FAILEDSupply chain
MeaningA required supply chain dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_OVERRIDE_REQUIREDSupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_SIGNATURE_INVALIDSupply chain
MeaningA required release, compatibility or mirror signature could not be verified.
Safe next actionDo not install. Re-fetch from the approved source and verify the signer, metadata and checksum chain.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_CHECKSUM_MISMATCHSupply chain
MeaningThe supply chain contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_METADATA_INVALIDSupply chain
MeaningThe supply chain contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_REGISTRY_UNVERIFIABLESupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_REGISTRY_PROVIDER_UNSUPPORTEDSupply chain
MeaningThe supply chain capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_REGISTRY_AUTH_UNSUPPORTEDSupply chain
MeaningThe supply chain capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_REGISTRY_TLS_UNSUPPORTEDSupply chain
MeaningThe supply chain capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_MIRROR_METADATA_REQUIREDSupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_MIRROR_SYNC_STALESupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_MIRROR_SYNC_PARTIALSupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_MIRROR_SYNC_DRIFTSupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_AGENT_CHANNEL_UNAVAILABLESupply chain
MeaningA required supply chain dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_AGENT_CHANNEL_EVIDENCE_INCOMPLETESupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_SOURCE_AGENT_CHANNEL_DRIFTSupply chain
MeaningClusterPilot rejected the request at the supply chain boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_MATERIAL_VALIDATION_FAILEDSecrets
MeaningA required secrets dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_SOURCE_MODE_UNSUPPORTEDSecrets
MeaningThe secrets capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_MATERIAL_MISSINGSecrets
MeaningA required secrets resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_MATERIAL_MALFORMEDSecrets
MeaningThe secrets contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_MATERIAL_EXPIREDSecrets
MeaningClusterPilot rejected the request at the secrets boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_MATERIAL_MISMATCHSecrets
MeaningThe secrets contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_MATERIAL_ACCESS_DENIEDSecrets
MeaningThe actor, key or session is not authorized for this secrets action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
DB_MIGRATION_STATUS_UNAVAILABLEOperations
MeaningA required operations dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
COMPATIBILITY_MANIFEST_UNAVAILABLESupply chain
MeaningA required supply chain dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
DISTRIBUTION_DIAGNOSTICS_UNAVAILABLESupply chain
MeaningA required supply chain dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_PREFLIGHT_POLICY_CONFLICTUpdates
MeaningThe request conflicts with current updates state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_PREFLIGHT_UNAVAILABLEUpdates
MeaningA required updates dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_APPROVAL_MISSING_ROLEUpdates
MeaningA required updates resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_APPROVAL_MISSING_APPROVALUpdates
MeaningA required updates resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_APPROVAL_EXPIRED_APPROVALUpdates
MeaningClusterPilot rejected the request at the updates boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_REVISION_CONFLICTUpdates
MeaningThe request conflicts with current updates state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_GOVERNANCE_POLICY_VIOLATIONUpdates
MeaningClusterPilot rejected the request at the updates boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_ROLLOUT_PROFILE_UNSUPPORTEDUpdates
MeaningThe updates capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_ROLLOUT_PHASE_NOT_ADVANCEABLEUpdates
MeaningClusterPilot rejected the request at the updates boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_ROLLOUT_PHASE_NOT_ABORTABLEUpdates
MeaningClusterPilot rejected the request at the updates boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_ROLLOUT_RUN_NOT_FOUNDUpdates
MeaningA required updates resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_RUN_ACTIVE_CONFLICTUpdates
MeaningThe request conflicts with current updates state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_RUN_NOT_FOUNDUpdates
MeaningA required updates resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
UPDATE_RUN_ALREADY_TERMINALUpdates
MeaningClusterPilot rejected the request at the updates boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
BACKUP_VERIFICATION_FAILEDOperations
MeaningDatabase, artifact or protected-secret verification did not complete successfully.
Safe next actionDo not upgrade. Preserve the failed evidence, repair the backup set, and repeat restore verification.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RETENTION_HOLD_ACTIVEOperations
MeaningThe request conflicts with current operations state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RETENTION_ACTIVE_RUN_SKIPPEDOperations
MeaningThe request conflicts with current operations state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_NOT_FOUNDConfiguration
MeaningA required configuration resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_ACTIVE_PROFILE_NOT_FOUNDConfiguration
MeaningA required configuration resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_PROFILE_ACTIVATION_CONFLICTConfiguration
MeaningThe request conflicts with current configuration state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_PROFILE_CONFLICTConfiguration
MeaningThe request conflicts with current configuration state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_PROFILE_NOT_FOUNDConfiguration
MeaningA required configuration resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_PROFILE_ROLLBACK_UNAVAILABLEConfiguration
MeaningA required configuration dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_PROFILE_VALIDATION_FAILEDConfiguration
MeaningA required configuration dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_PROFILE_VERSION_NOT_FOUNDConfiguration
MeaningA required configuration resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_VALIDATION_FAILEDConfiguration
MeaningA required configuration dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SETTINGS_REVISION_CONFLICTConfiguration
MeaningThe request conflicts with current configuration state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RATE_LIMITEDCapacity
MeaningThe request exceeded a bounded capacity limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RATE_LIMIT_EXCEEDEDCapacity
MeaningThe request exceeded a bounded capacity limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
QUEUE_CAPACITY_EXCEEDEDCapacity
MeaningThe request exceeded a bounded capacity limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
STORAGE_QUOTA_EXCEEDEDCapacity
MeaningThe request exceeded a bounded capacity limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SERVICE_OVERLOADEDCapacity
MeaningClusterPilot rejected the request at the capacity boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
STREAM_LIMIT_EXCEEDEDAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
API_KEY_INVALIDIdentity & access
MeaningThe identity & access contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
API_KEY_EXPIREDIdentity & access
MeaningClusterPilot rejected the request at the identity & access boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
API_KEY_REVOKEDIdentity & access
MeaningClusterPilot rejected the request at the identity & access boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSUFFICIENT_SCOPEIdentity & access
MeaningThe actor, key or session is not authorized for this identity & access action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INTEGRATIONS_API_KEY_QUOTA_EXCEEDEDIntegrations
MeaningThe request exceeded a bounded integrations limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INTEGRATIONS_WEBHOOK_SUBSCRIPTION_QUOTA_EXCEEDEDIntegrations
MeaningThe request exceeded a bounded integrations limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INTEGRATIONS_IN_FLIGHT_DELIVERY_QUOTA_EXCEEDEDIntegrations
MeaningThe request exceeded a bounded integrations limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INTEGRATIONS_ISSUE_EXPORT_JOB_QUOTA_EXCEEDEDIntegrations
MeaningThe request exceeded a bounded integrations limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
NOTIFICATION_DELIVERY_FAILEDIntegrations
MeaningA required integrations dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WEBHOOK_DELIVERY_FAILEDIntegrations
MeaningA required integrations dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ISSUE_EXPORT_FAILEDIntegrations
MeaningA required integrations dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ISSUE_EXPORT_INVALID_REQUESTIntegrations
MeaningThe integrations contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ISSUE_EXPORT_IDEMPOTENCY_KEY_REQUIREDIntegrations
MeaningClusterPilot rejected the request at the integrations boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ISSUE_EXPORT_DUPLICATE_REQUESTIntegrations
MeaningClusterPilot rejected the request at the integrations boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ISSUE_EXPORT_IDEMPOTENCY_PAYLOAD_MISMATCHIntegrations
MeaningThe integrations contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ISSUE_EXPORT_RUN_STATUS_INVALIDIntegrations
MeaningThe integrations contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_INVALID_REQUESTSecrets
MeaningThe secrets contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_NOT_FOUNDSecrets
MeaningA required secrets resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_CONFLICTSecrets
MeaningThe request conflicts with current secrets state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_RATE_LIMITEDSecrets
MeaningThe request exceeded a bounded secrets limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_IDEMPOTENCY_KEY_REQUIREDSecrets
MeaningClusterPilot rejected the request at the secrets boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_DUPLICATE_REQUESTSecrets
MeaningClusterPilot rejected the request at the secrets boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_IDEMPOTENCY_PAYLOAD_MISMATCHSecrets
MeaningThe secrets contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_REFERENCE_INVALIDSecrets
MeaningThe secrets contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRETS_ACCESS_DENIEDSecrets
MeaningThe actor, key or session is not authorized for this secrets action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_ROTATION_IN_PROGRESSSecrets
MeaningThe request conflicts with current secrets state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SECRET_DECRYPTION_FAILEDSecrets
MeaningA required secrets dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_INVALID_REQUESTAudit
MeaningThe audit contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_EXPORT_LIMIT_EXCEEDEDAudit
MeaningClusterPilot rejected the request at the audit boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_RATE_LIMITEDAudit
MeaningThe request exceeded a bounded audit limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_EXPORT_OVERLAPAudit
MeaningClusterPilot rejected the request at the audit boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_IDEMPOTENCY_KEY_REQUIREDAudit
MeaningClusterPilot rejected the request at the audit boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_DUPLICATE_REQUESTAudit
MeaningClusterPilot rejected the request at the audit boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AUDIT_IDEMPOTENCY_PAYLOAD_MISMATCHAudit
MeaningThe audit contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INVENTORY_INVALID_REQUESTAPI & validation
MeaningThe api & validation contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INVENTORY_SNAPSHOT_NOT_FOUNDAPI & validation
MeaningA required api & validation resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INVENTORY_PROBE_JOB_NOT_FOUNDAPI & validation
MeaningA required api & validation resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
REPOSCAN_INVALID_REQUESTAPI & validation
MeaningThe api & validation contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
REPOSCAN_FETCH_INDEX_FAILEDAPI & validation
MeaningA required api & validation dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
REPOSCAN_CONFLICTAPI & validation
MeaningThe request conflicts with current api & validation state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_INVALID_IDRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_NOT_FOUNDRuns & evidence
MeaningA required runs & evidence resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUN_NOT_FOUNDRuns & evidence
MeaningA required runs & evidence resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUN_ALREADY_TERMINALRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_INVALID_TRANSITIONRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_CANCEL_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_NOT_ALLOWEDRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_CONFLICTRuns & evidence
MeaningThe requested retry conflicts with current run state, ownership or another retry.
Safe next actionRefresh run detail; retry only the classified failed step after the active transition completes.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_IDEMPOTENCY_KEY_REQUIREDRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ADMISSION_IDEMPOTENCY_KEY_REQUIREDRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ADMISSION_DUPLICATE_REQUESTRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ADMISSION_IDEMPOTENCY_PAYLOAD_MISMATCHRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUN_HOST_QUOTA_EXCEEDEDRuns & evidence
MeaningThe request exceeded a bounded runs & evidence limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUN_COMMAND_QUOTA_EXCEEDEDRuns & evidence
MeaningThe request exceeded a bounded runs & evidence limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUN_ADMISSION_PAYLOAD_OVERSIZEDRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_RATE_LIMITEDRuns & evidence
MeaningThe request exceeded a bounded runs & evidence limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_KILL_SWITCH_ACTIVERuns & evidence
MeaningThe request conflicts with current runs & evidence state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_UNAUTHORIZEDRuns & evidence
MeaningThe actor, key or session is not authorized for this runs & evidence action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FORBIDDENRuns & evidence
MeaningThe actor, key or session is not authorized for this runs & evidence action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_DISABLEDRuns & evidence
MeaningThe runs & evidence capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_RUN_STATUS_INVALIDRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_NO_FAILED_STEPSRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_BLOCKEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_REPLAY_REQUIREDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_RETRY_FAILED_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_EVENTS_INVALID_PAYLOADRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_EVENTS_INVALID_STATERuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_EVENTS_INGEST_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_STREAM_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_STREAM_INVALID_CURSORRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_STREAM_STALE_CURSORRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_STREAM_QUERY_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_INVALID_CURSORRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_STALE_CURSORRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_RETENTION_GAPRuns & evidence
MeaningThe requested cursor points to log data that has already left the retained window.
Safe next actionUse retained artifacts or exports; do not assume the missing interval was empty.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_QUERY_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_SEGMENT_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_LOGS_SEGMENT_QUERY_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_READ_UNAUTHORIZEDRuns & evidence
MeaningThe actor, key or session is not authorized for this runs & evidence action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_READ_FORBIDDENRuns & evidence
MeaningThe actor, key or session is not authorized for this runs & evidence action.
Safe next actionVerify identity, workspace, role, permission and resource scope; never widen access solely to clear an error.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_READ_RATE_LIMITEDRuns & evidence
MeaningThe request exceeded a bounded runs & evidence limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_COMMANDS_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_COMMANDS_QUERY_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_DIFF_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_DIFF_NOT_FOUNDRuns & evidence
MeaningA required runs & evidence resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_DIFF_UNAVAILABLERuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_DIFF_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_EXPORT_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_EXPORT_UNAVAILABLERuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_PLAN_EXPORT_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_INVALID_REQUESTRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_UPLOAD_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_QUERY_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_BUNDLE_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACT_NOT_FOUNDRuns & evidence
MeaningA required runs & evidence resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_BLOB_MISSINGSupply chain
MeaningA required supply chain resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
ARTIFACT_INTEGRITY_FAILEDSupply chain
MeaningThe stored evidence checksum does not match its recorded identity.
Safe next actionTreat the evidence as unusable, preserve diagnostics, repair storage, and rerun the operation if safe.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_PENDINGRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_EXPIREDRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_CORRUPTRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_STORAGE_UNAVAILABLERuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_CHECKSUM_MISMATCHRuns & evidence
MeaningThe runs & evidence contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_SNIPPET_UNAVAILABLERuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_EXPORT_TOO_LARGERuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_EXPORT_RESULT_EXPIREDRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_EXPORT_NOT_READYRuns & evidence
MeaningClusterPilot rejected the request at the runs & evidence boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_EXPORT_FAILEDRuns & evidence
MeaningA required runs & evidence dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_QUOTA_EXCEEDEDRuns & evidence
MeaningThe request exceeded a bounded runs & evidence limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
RUNS_ARTIFACTS_RATE_LIMITEDRuns & evidence
MeaningThe request exceeded a bounded runs & evidence limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SCHEMA_VALIDATION_FAILEDAPI & validation
MeaningA required api & validation dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
SCHEMA_VERSION_SUNSETAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_ALREADY_RUNNINGInspector
MeaningClusterPilot rejected the request at the inspector boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_DUPLICATE_REQUESTInspector
MeaningClusterPilot rejected the request at the inspector boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_OLLAMA_UNAVAILABLEInspector
MeaningA required inspector dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_EVIDENCE_TOO_LARGEInspector
MeaningClusterPilot rejected the request at the inspector boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_PARSE_FAILEDInspector
MeaningA required inspector dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_CONFIG_INVALIDInspector
MeaningThe inspector contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_DISABLEDInspector
MeaningThe inspector capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
INSPECTOR_RATE_LIMITEDInspector
MeaningThe request exceeded a bounded inspector limit.
Safe next actionStop client-side retry loops, inspect Retry-After and quota extensions, reduce load or raise the reviewed limit.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_VALIDATION_INVALID_REQUESTWizard & discovery
MeaningThe wizard & discovery contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_VALIDATION_INVALID_DRAFTWizard & discovery
MeaningThe wizard & discovery contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_VALIDATION_SNAPSHOT_NOT_FOUNDWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_VALIDATION_PLAN_SNAPSHOT_MISMATCHWizard & discovery
MeaningThe wizard & discovery contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_CONNECTIVITY_CHECK_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_COMPATIBILITY_CHECK_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_CONNECTIVITY_POLICY_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_CONNECTIVITY_REPO_UNREACHABLEWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_CONNECTIVITY_AGENT_UNREACHABLEWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_CONNECTIVITY_REPO_AND_AGENT_UNREACHABLEWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_PROBES_START_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_PROBES_POLL_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_PROBES_SNAPSHOT_NOT_FOUNDWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_PROBES_JOB_NOT_FOUNDWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_PROBES_UNREACHABLE_HOSTSWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
PROBES_TIMEOUTWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
PROBES_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
PROBES_SNAPSHOT_NOT_FOUNDWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
PROBES_BLOCKED_HARD_FAILUREWizard & discovery
MeaningClusterPilot rejected the request at the wizard & discovery boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
PROBE_HOST_CONFLICTING_SSH_STATUSWizard & discovery
MeaningThe request conflicts with current wizard & discovery state.
Safe next actionRefresh current state, wait for the owning transition or resolve the ETag/idempotency conflict before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_TOPOLOGY_SUGGEST_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_TOPOLOGY_SNAPSHOT_NOT_FOUNDWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_TOPOLOGY_PROBE_JOB_NOT_FOUNDWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_TOPOLOGY_PROBE_SNAPSHOT_MISMATCHWizard & discovery
MeaningThe wizard & discovery contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_TOPOLOGY_MISSING_SELECTIONWizard & discovery
MeaningA required wizard & discovery resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_TOPOLOGY_INVALID_SELECTIONWizard & discovery
MeaningThe wizard & discovery contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_PREVIEW_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_RUN_CREATE_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_RULES_EVALUATION_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_RULES_UNSUPPORTED_PACK_VERSIONWizard & discovery
MeaningThe wizard & discovery capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
WIZ_RULES_POLICY_LOAD_FAILEDWizard & discovery
MeaningA required wizard & discovery dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_INVALID_REQUESTAgent
MeaningThe agent contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_VERSION_INCOMPATIBLEAgent
MeaningThe agent is outside the control plane N/N-1 compatibility boundary.
Safe next actionUpgrade or roll back the agent to a compatible digest, then repeat local verification and heartbeat.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_HANDSHAKE_POLICY_REJECTEDAgent
MeaningClusterPilot rejected the request at the agent boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_CLOCK_SKEW_EXCESSIVEAgent
MeaningAgent and control-plane clocks differ beyond the allowed execution window.
Safe next actionRepair NTP or the approved local time source; verify /health/clock before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_HEARTBEAT_FAILEDAgent
MeaningA required agent dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_WORK_POLL_FAILEDAgent
MeaningA required agent dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_AUTH_MISSING_TOKENAgent
MeaningA required agent resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_AUTH_INVALID_TOKENAgent
MeaningThe agent contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_AUTH_TOKEN_EXPIREDAgent
MeaningClusterPilot rejected the request at the agent boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_AUTH_SCOPE_MISMATCHAgent
MeaningThe agent contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_AUTH_RUN_MISMATCHAgent
MeaningThe agent contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
AGENT_AUTH_AGENT_MISMATCHAgent
MeaningThe agent contract rejected invalid or conflicting input.
Safe next actionUse the ProblemDetails field and nextAction extensions, correct the request, and submit with a new idempotency key only when the intent changed.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CLUSTER_ADDON_OPERATION_DISABLEDCluster operations
MeaningThe cluster operations capability is disabled or unsupported in this runtime.
Safe next actionCheck release status and feature gates. Do not enable a contract-only path or bypass startup validation.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CLUSTER_ADDON_OPERATION_NOT_IMPLEMENTEDCluster operations
MeaningThe v0.0.1 route is a contract stub and creates no OperationRun.
Safe next actionDo not script around it. Use an approved replacement/reapply plan or wait for a supported release.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CLUSTER_LIFECYCLE_CREATE_INFRASTRUCTURE_REQUIREDCluster operations
MeaningClusterPilot rejected the request at the cluster operations boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
GUARDRAIL_CONFIRM_REQUIREDCluster operations
MeaningA destructive operation was submitted without the explicit confirmation contract.
Safe next actionReview the plan and blast radius, then repeat with X-Confirm-Destructive only when approved.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
GUARDRAIL_MAINTENANCE_WINDOWCluster operations
MeaningClusterPilot rejected the request at the cluster operations boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
OPERATION_OBSERVED_STATE_NOT_FOUNDCluster operations
MeaningA required cluster operations resource or input is not available.
Safe next actionRefresh the current state, verify scope and identifiers, then restore or provide the missing dependency before retrying.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
KUBERNETES_HELM_RELEASE_OWNERSHIP_BLOCKEDCluster operations
MeaningClusterPilot rejected the request at the cluster operations boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CONFORMANCE_RAW_ARCHIVE_POLICY_DENIEDConformance
MeaningRaw Sonobuoy archive access is not permitted by the workspace policy.
Safe next actionUse the sanitized report or obtain explicit raw-evidence approval and permission.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
DASHBOARD_IDENTITY_BROKER_UNAVAILABLEDashboard
MeaningThe brokered dashboard identity adapter or hardening evidence is unavailable.
Safe next actionKeep brokered SSO disabled; use only an approved direct-public posture or repair every broker gate.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CLOUD_PROVIDER_INVALID_CREDENTIALSProviders
MeaningThe provider rejected the supplied write-only credential material.
Safe next actionRotate or re-enter the scoped credential, validate the account once, and avoid automated retry loops.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CUSTOM_ADDON_UPLOAD_TOO_LARGEAPI & validation
MeaningClusterPilot rejected the request at the api & validation boundary.
Safe next actionUse HTTP status, error_code, nextAction and correlation extensions together; inspect the owning run or dependency before changing state.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
CUSTOM_ADDON_UPLOAD_FAILEDAPI & validation
MeaningA required api & validation dependency or operation failed.
Safe next actionCapture correlation and run identifiers, inspect the owning dependency and retained evidence, then retry only when the failure is classified retryable.
Always captureHTTP status, UTC time, environment, release, run/step/cluster/agent identifiers, correlation ID and the complete secret-safe ProblemDetails body.
Escalation threshold
Escalate when an unknown code appears, documented next action is unsafe or ineffective, integrity fails, secret material may be exposed, the same exact retry diverges, or the release enters an undocumented state. Use the support handoff runbook.