> ## Documentation Index > Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Get red team release evidence > Requires scopes: red_team:read ## OpenAPI ````yaml /api-reference/openapi.json get /api/red-team/runs/{id}/release-evidence openapi: 3.1.2 info: title: EvalGate API version: 5.1.0 description: EvalGate API. See docs/api-contract.md for stability commitments. servers: - url: https://evalgate.com description: Production - url: http://localhost:3000 description: Local security: [] paths: /api/red-team/runs/{id}/release-evidence: get: tags: - red team summary: Get red team release evidence description: 'Requires scopes: red_team:read' operationId: get_red_team_runs_id_release_evidence parameters: - name: id in: path required: true schema: type: string format: uuid responses: '200': description: Successful response content: application/json: schema: $ref: >- #/components/schemas/GetApiRedTeamRunsIdReleaseEvidenceResponse200ApplicationJson '400': $ref: '#/components/responses/ValidationError' '401': $ref: '#/components/responses/Unauthorized' '403': $ref: '#/components/responses/Forbidden' '404': $ref: '#/components/responses/NotFound' '409': $ref: '#/components/responses/Conflict' '429': $ref: '#/components/responses/RateLimited' '500': $ref: '#/components/responses/InternalError' '503': $ref: '#/components/responses/ServiceUnavailable' security: - bearerAuth: [] components: schemas: GetApiRedTeamRunsIdReleaseEvidenceResponse200ApplicationJson: type: object properties: schemaVersion: type: number enum: - 1 organizationId: $ref: '#/components/schemas/OrganizationId' target: type: object properties: artifactId: type: string versionId: type: string contentHash: type: string additionalProperties: false required: - artifactId - versionId - contentHash campaign: type: object properties: campaignId: type: string campaignVersionId: type: string snapshotHash: type: string runId: type: string completedAt: type: string additionalProperties: false required: - campaignId - campaignVersionId - snapshotHash - runId evidenceIdentity: type: object properties: evidenceHash: type: string policyVersion: type: string generatedAt: type: string additionalProperties: false required: - evidenceHash - policyVersion - generatedAt execution: type: object properties: status: oneOf: - type: string enum: - failed - type: string enum: - queued - type: string enum: - completed - type: string enum: - cancelled - type: string enum: - running - type: string enum: - incomplete - type: string enum: - not_assessed providerState: oneOf: - type: string enum: - unknown - type: string enum: - cancelled - type: string enum: - policy_blocked - type: string enum: - timed_out - type: string enum: - executed - type: string enum: - cache_reused - type: string enum: - rate_limited - type: string enum: - provider_unavailable - type: string enum: - model_retired - type: string enum: - authentication_failed - type: string enum: - malformed_response - type: string enum: - not_executed totalCases: type: number attemptedCases: type: number completedCases: type: number adversarialCases: type: number benignUtilityCases: type: number costAttributed: oneOf: - type: boolean enum: - false - type: boolean enum: - true additionalProperties: false required: - status - totalCases - attemptedCases - completedCases - adversarialCases - benignUtilityCases findings: type: object properties: criticalOpen: type: number highOpen: type: number mediumOpen: type: number lowOpen: type: number acceptedRiskCritical: type: number acceptedRiskHigh: type: number acceptedRiskGoverned: oneOf: - type: boolean enum: - false - type: boolean enum: - true unresolvedFingerprints: type: array items: type: string additionalProperties: false required: - criticalOpen - highOpen - mediumOpen - lowOpen - acceptedRiskCritical - acceptedRiskHigh - unresolvedFingerprints attackResistance: type: object properties: evaluated: type: boolean successfulAttacks: type: number attackSuccessRate: type: number additionalProperties: false required: - evaluated - successfulAttacks benignUtility: type: object properties: evaluated: type: boolean passed: type: number failed: type: number passRate: type: number additionalProperties: false required: - evaluated remediation: type: object properties: baselineRunId: type: string candidateRunId: type: string comparisonId: type: string resolvedFingerprints: type: array items: type: string introducedFingerprints: type: array items: type: string persistingFingerprints: type: array items: type: string regressionState: oneOf: - type: string enum: - inconclusive - type: string enum: - unchanged - type: string enum: - improved - type: string enum: - regressed additionalProperties: false coverage: type: object properties: activeGoldenCaseIds: type: array items: type: string promotedFindingIds: type: array items: type: string additionalProperties: false signedReport: type: object properties: reportId: type: string evidenceHash: type: string sourceReportHash: type: string keyVersion: type: string signedAt: type: string targetContentHash: type: string additionalProperties: false required: - reportId - evidenceHash - signedAt attestation: type: object properties: algorithm: type: string enum: - Ed25519 keyId: type: string publicKey: type: string publicKeySha256: type: string signature: type: string additionalProperties: false required: - algorithm - keyId - publicKey - publicKeySha256 - signature frameworkReferences: type: array items: type: object properties: framework: type: string controlId: type: string referenceHash: type: string status: oneOf: - type: string enum: - not_applicable - type: string enum: - missing_evidence - type: string enum: - planned - type: string enum: - partial_evidence - type: string enum: - not_assessed - type: string enum: - passed_for_target - type: string enum: - failed_for_target additionalProperties: false required: - framework - controlId - status completeness: type: object properties: complete: type: boolean missingEvidence: type: array items: type: string additionalProperties: false required: - complete - missingEvidence additionalProperties: false required: - schemaVersion - target - campaign - evidenceIdentity - execution - findings - attackResistance - benignUtility - completeness OrganizationId: type: string format: uuid ApiError: type: object properties: error: type: object properties: code: type: string enum: - UNAUTHORIZED - FORBIDDEN - NOT_FOUND - INVALID_REFERENCE - VALIDATION_ERROR - RATE_LIMITED - CONFLICT - INTERNAL_ERROR - SERVICE_UNAVAILABLE - QUOTA_EXCEEDED - FEATURE_LIMIT_REACHED - NO_ORG_MEMBERSHIP - SHARE_REVOKED - SHARE_EXPIRED - SHARE_UNAVAILABLE - PROVIDER_KEY_MISSING - PROVIDER_KEY_EXPIRED - PROVIDER_RATE_LIMITED - PROVIDER_UNAUTHORIZED - PROVIDER_UNAVAILABLE - AGENT_HANDOFF_INVALID - AGENT_HANDOFF_EXPIRED - AGENT_HANDOFF_DENIED - AGENT_HANDOFF_CONSUMED - PAYLOAD_TOO_LARGE - METHOD_NOT_ALLOWED message: type: string details: {} requestId: type: string format: uuid redaction: type: object properties: applied: type: boolean enum: - true fieldCount: type: integer minimum: 0 secretCount: type: integer minimum: 0 required: - applied - fieldCount - secretCount required: - code - message required: - error responses: ValidationError: description: Validation error content: application/json: schema: $ref: '#/components/schemas/ApiError' Unauthorized: description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: WWW-Authenticate: description: >- Bearer challenge. Agent-facing routes include the RFC 9728 resource_metadata URL. schema: type: string Forbidden: description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ApiError' NotFound: description: Resource not found content: application/json: schema: $ref: '#/components/schemas/ApiError' Conflict: description: Conflict content: application/json: schema: $ref: '#/components/schemas/ApiError' RateLimited: description: Rate limit exceeded content: application/json: schema: $ref: '#/components/schemas/ApiError' headers: Retry-After: description: Delay in seconds before retrying when present. schema: type: integer minimum: 1 RateLimit-Policy: description: IETF HTTPAPI structured quota policy (work in progress). schema: type: string RateLimit: description: >- IETF HTTPAPI structured remaining quota and reset delay (work in progress). schema: type: string InternalError: description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ApiError' ServiceUnavailable: description: Service unavailable content: application/json: schema: $ref: '#/components/schemas/ApiError' securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: EvalGate API key description: >- Organization-scoped EvalGate API key. Discover the supported agent scopes at /.well-known/oauth-protected-resource. Per-operation grants are listed in x-evalgate-required-scopes; OpenAPI bearer security requirement arrays remain empty as required for non-OAuth schemes. x-evalgate-scopes-supported: - eval:read - eval:write - objectives:read - objectives:write - runs:read - runs:write - traces:read - traces:write - exports:download - reports:write - prompt:publish - scorer:publish - red_team:read - red_team:run - red_team:approve - docs:read - agent:read - agent:execute - admin:keys - admin:org x-evalgate-protected-resource-metadata: https://www.evalgate.com/.well-known/oauth-protected-resource ````