AuditTrailEventSummary

Flattened, stable view of the event. Counts and changes_summary are always present; the remaining keys appear only when the event carries them. Raw evaluation payloads, blueprint snapshots, and evidence values are deliberately not exposed here — use GET /scenarios/{scenario_id}/results for current violation detail.

policies_evaluatedinteger

Example: 3

policies_passedinteger

Example: 2

policies_failedinteger

Example: 1

overall_resultstring | nullnullable

Example: improved

notesstring

Example: Auto-remediation applied

changes_summarystring

Example: 1 policy improved (SEC-5: fail → pass)

compliance_transition object

fromstring

Example: non_compliant

tostring

Example: compliant

became_compliantboolean

Example: true

policy_codestring

Example: SEC-5

target_typestring

Example: blueprint

scenario_idstring

Example: 4729318

results_summary object

Per-status counts for an evaluation event.

property name*integer

compliance_beforestring

Example: non_compliant

compliance_afterstring

Example: compliant

AuditTrailEventSummary

{
  "policies_evaluated": 3,
  "policies_passed": 2,
  "policies_failed": 1,
  "overall_result": "improved",
  "notes": "Auto-remediation applied",
  "changes_summary": "1 policy improved (SEC-5: fail → pass)",
  "compliance_transition": {
    "from": "non_compliant",
    "to": "compliant",
    "became_compliant": true
  },
  "policy_code": "SEC-5",
  "target_type": "blueprint",
  "scenario_id": "4729318",
  "results_summary": {
    "pass": 2,
    "fail": 1,
    "warn": 0,
    "n_a": 0
  },
  "compliance_before": "non_compliant",
  "compliance_after": "compliant"
}