CSFaaS

Retrieve a saved prompt snapshot and optional explicit task context for a user-requested prompt workflow. Defaults to the current validated snapshot. This read does not execute the returned content or change assistant settings.

run_prompt

Search record names and codes across supported GRC modules in the authorized workspace. Results are bounded matches, not a complete inventory. Integration resources are outside this search.

search

Remove a relationship between authorized records. from/to use type:idOrCode; typed junction identity attributes use attrs. This changes the saved relationship without deleting either record.

unlink_records

accept on demands. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

accept_demands

accept on policy versions. Approve a pending version or a pending request to reopen an approved version. Only a live eligible approver with an outstanding request can decide an enforced cycle. Accepting a reversion makes the version Draft and invalidates its old approval only after all required votes. dry_run validates without applying the operation.

accept_policy_versions

add comment on authored tasks. Add task comment. Exact live source Read required; comment edits/removals require its author. Full old/new history retained. dry_run validates without applying the operation.

add_comment_authored_tasks

add evidence link on authored tasks. Add task evidence. Exact live source Read required; comment edits/removals require its author. Full old/new history retained. dry_run validates without applying the operation.

add_evidence_link_authored_tasks

add field on profile. Add a field to a section or one of its groups (types: text, multiline, date, select, multiselect, country); the field id is server-generated. dry_run validates without applying the operation.

add_field_profile

add group on profile. Add a group inside a section (section addressed by title or id); the group id is server-generated. dry_run validates without applying the operation.

add_group_profile

add section on profile. Add a new top-level profile section; its id is server-generated. dry_run validates without applying the operation.

add_section_profile

Copy a questionnaire template’s questions into a form using a template UUID or code. Requires an in-progress form with zero elements and zero submissions. dry_run validates without applying the operation.

apply_template_forms

approve on frameworks. Approve a pending version: pending → approved (stamps approval_finalized_at; optional comment). When the workspace enforces a version approval workflow, only its designated approvers approve, in the app (409 approval_workflow_unavailable). dry_run validates without applying the operation.

approve_frameworks

assign assessment on assets. Link a COMPLETED demand as this system's current security assessment (demand takes a uuid or RAD code). Optional periodicity (Annually | Half-Yearly | Quarterly | Bi-Monthly | Monthly | Weekly | Daily) schedules the next review; the review date is computed server-side. Fails with assessment_exists while a current assessment is in place. dry_run validates without applying the operation.

assign_assessment_assets

assign assessment on third parties. Link a COMPLETED demand as this third party's current security assessment (demand takes a uuid or RAD code). Optional periodicity (Annually | Half-Yearly | Quarterly | Bi-Monthly | Monthly | Weekly | Daily) schedules the next review; the review date is computed server-side. Fails with assessment_exists while a current assessment is in place. dry_run validates without applying the operation.

assign_assessment_third_parties

assurance validate on demands. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

assurance_validate_demands

attach file on authored tasks. Attach a file to this exact task (10 MiB maximum). Source Read and enabled evidence storage required. Provide exactly one canonical base64 body or public HTTPS download URL; MIME/content validation applies. Keep the same idempotency key after an uncertain outcome. dry_run validates without applying the operation.

attach_file_authored_tasks

cancel approval on frameworks. Cancel a pending approval round: pending → in_progress (the approval columns are cleared). dry_run validates without applying the operation.

cancel_approval_frameworks

cancel on authored tasks. Cancel the task while retaining its complete history. Assignee, requester or Account Manager with live source Read. dry_run validates without applying the operation.

cancel_authored_tasks

cancel on demands. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

cancel_demands

cancel on policy versions. Cancel a pending version approval round and return the version to Draft. A request to reopen an approved version must be declined by its approver instead. dry_run validates without applying the operation.

cancel_policy_versions

cancel response round on demands. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

cancel_response_round_demands

Cancel a pending submission by changing its status to expired. The respondent’s link stops working. Completed submissions cannot be cancelled and cancelled submissions cannot be reopened. dry_run validates without applying the operation.

cancel_submissions

change assessment periodicity on assets. Change the review periodicity of this system's current security assessment (Annually | Half-Yearly | Quarterly | Bi-Monthly | Monthly | Weekly | Daily, or null to clear the schedule). The next review date is recomputed server-side. 404 when there is no current assessment. dry_run validates without applying the operation.

change_assessment_periodicity_assets

change assessment periodicity on third parties. Change the review periodicity of this third party's current security assessment (Annually | Half-Yearly | Quarterly | Bi-Monthly | Monthly | Weekly | Daily, or null to clear the schedule). The next review date is recomputed server-side. 404 when there is no current assessment. dry_run validates without applying the operation.

change_assessment_periodicity_third_parties

change due date on demands. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

change_due_date_demands

change due date on remediations. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

change_due_date_remediations

close on audit actions. Close the action — stamps completed_at/completed_by and recomputes the parent recommendation’s completion (set when ALL its actions are Closed). dry_run validates without applying the operation.

close_audit_actions

close on authored tasks. Close the task. Assignee, requester or Account Manager with live source Read; confirmation recommended. dry_run validates without applying the operation.

close_authored_tasks

close on risks. Close a risk. With Assurance review enforced, an open risk first moves to pending_validation (Risk Analyst or Risk Owner) and Assurance then completes the closure; otherwise it closes directly. Every remediation plan on the risk must have a responsible assigned, or pass force=true. An optional justification is recorded as a risk comment. dry_run validates without applying the operation.

close_risks

complete on audits. Mark the audit completed. Stamps end_date (defaults to now). dry_run validates without applying the operation.

complete_audits

complete on demands. Change the saved workflow state; live permissions and allowed source states apply. dry_run validates without applying the operation.

complete_demands

complete on remediations. Mark an open remediation plan complete — risk managers only (cumulative permission model). Moves to "pending validation" when an Analyst/Assurance review step is enforced, else directly to "completed". dry_run validates without applying the operation.

complete_remediations

confirm completion on remediations. Confirm a remediation plan pending validation as completed — Assurance only while Assurance review is enforced. dry_run validates without applying the operation.

confirm_completion_remediations

Confirm a residual-risk review. Requires Risk Read/Update and the analyst role. The supplied residual revision and matrix/quantification configuration are checked atomically. Supporting risk evidence or evidence from selected same-risk mitigations is required. Mitigation associations are optional and every supplied relationship is validated. A dry run performs locked validation without inserting history. dry_run validates without applying the operation.

confirm_residual_review_risks

Create assets. Live caller permissions apply. dry_run validates without writing. Responses retain created_id and warnings; idempotency keys identify retries of the same operation.

create_assets

Create audit actions. Live caller permissions apply. dry_run validates without writing. Responses retain created_id and warnings; idempotency keys identify retries of the same operation.

create_audit_actions

Create audit clarifications. Live caller permissions apply. dry_run validates without writing. Responses retain created_id and warnings; idempotency keys identify retries of the same operation.

create_audit_clarifications

Create audit findings. Live caller permissions apply. dry_run validates without writing. Responses retain created_id and warnings; idempotency keys identify retries of the same operation.

create_audit_findings

Create audit observations. Live caller permissions apply. dry_run validates without writing. Responses retain created_id and warnings; idempotency keys identify retries of the same operation.

create_audit_observations

Create audit questions. Live caller permissions apply. dry_run validates without writing. Responses retain created_id and warnings; idempotency keys identify retries of the same operation.

create_audit_questions