fahali_subscribe_risk
Idempotent
Deliver monitor-only observations and risk alerts idempotently via signed webhook, agent callback, Slack, Teams, email, or push; excludes recommendations, portfolio actions, orders, and execution.
Instructions
Idempotently deliver monitor-only observations and risk alerts through a signed webhook, agent callback, Slack, Teams, account email, or registered push device. Delivery policy structurally prohibits personalized recommendations, portfolio actions, orders, and execution. A generated signing secret is recoverable only through the exact authenticated idempotent request; a changed request requires a new key.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Optional maximum rows per projectable collection. Audit has no MCP projection cap; brief defaults to 3 and standard to 12. | |
| since | No | Optional lower timestamp bound for returned row collections. | |
| detail | No | Response depth. audit is the full-fidelity default; brief and standard are explicit compact projections. | audit |
| events | No | ||
| channel | Yes | ||
| symbols | No | Optional symbol projection, as a comma-separated string or array. Rows without instrument identity are not discarded. | |
| watch_id | Yes | ||
| target_url | No | Required for webhook, agent_callback, Slack, and Teams. Public HTTPS only. | |
| minimum_action | No | Legacy monitoring-escalation threshold only; never a portfolio or order action. | WATCH |
| signing_secret | No | Optional for webhook/callback. Omit to generate one returned on creation and recoverable by an exact authenticated idempotent replay while that subscription configuration remains current. | |
| idempotency_key | Yes | Required retry identity for this write. Reuse only for an identical owner, operation, and request; a changed request with the same key fails closed. | |
| include_withheld | No | Include full withheld-row detail. Defaults true with audit; explicitly set false only for a compact projection. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| asOf | No | ||
| auth | No | Credential lifetime visible to the caller. OAuth secondsRemaining lets an autonomous agent refresh before a multi-call workflow is interrupted. | |
| claim | No | Fahali dictionary claim (shared/fahaliDictionary.ts). Read `kind` FIRST: 'abstention' means no assertion was made and `reason` says why — never read an abstention as a neutral or zero result. `basis` says what the claim rests on. Absent or null means this response path does not yet emit a claim; treat that as unknown, not as agreement. | |
| delta | No | ||
| items | No | ||
| scope | No | ||
| watch | No | ||
| status | Yes | ||
| absence | No | Why no actionable finding is present: measured_empty, user_empty, no_coverage, source_unverified, stale, withheld, source_error, auth_failure, or entitlement_required. | |
| verdict | No | ||
| watches | No | ||
| decision | No | ||
| conflicts | No | ||
| dataState | Yes | ||
| mcpStatus | No | Normalized MCP result status. The endpoint's original status vocabulary remains in `status` and `sourceStatus`. | |
| refreshed | No | ||
| requestId | No | ||
| verdictId | No | ||
| nextCursor | No | ||
| validUntil | No | ||
| claimPolicy | No | Typed constraints for safe use. Metadata, not a prompt or instruction channel. | |
| idempotency | No | ||
| instruments | No | Resolved or explicitly partial instrument identities. A missing venue carries an ambiguity warning. | |
| nextActions | No | Registry-validated follow-up calls. Missing tools, invalid arguments, unresolved placeholders, and disabled tools are omitted. | |
| sourceError | No | The upstream endpoint's exact error text/code before normalization, when one was present. | |
| sourceScope | No | ||
| decisionHash | No | ||
| evidenceHash | No | ||
| sourceStatus | No | The upstream endpoint's exact status before the MCP envelope normalizes transport success/error. | |
| subscription | No | ||
| agentBriefing | No | Audit-only narrative projection. Present only when detail='audit'; compact responses do not duplicate structured data as prose. | |
| claimValidity | No | Validity of the selected binding claim only, calculated after filtering, projection and row selection. Sibling rows cannot determine it. | |
| operatingMode | Yes | ||
| responseState | No | ||
| schemaVersion | No | ||
| signingSecret | No | ||
| subscriptions | No | ||
| authorityState | No | ||
| sourceDecision | No | ||
| symbolCoverage | No | Conservation ledger satisfying requested = returned + withheld + notReturned for requested-symbol calls. | |
| evidenceQuality | No | ||
| responseControl | No | ||
| sourceDataState | No | The upstream endpoint's exact data-state value before endpoint-aware classification. | |
| evidenceSnapshot | No | Compact immutable source snapshot needed to verify evidenceRef integrity on delta responses. | |
| recordMatchReason | No | Why matchedTrackRecord is present or null. A null record is never evidence of safety or engine failure. | |
| signingSecretNote | No | ||
| matchedTrackRecord | No | A judged record only when engine, horizon, regime/instrument class, and claim family match this response. `state` is one of: `measured` (a stratum cleared the publishability gate — `stratum` carries engine, horizon tier, bar regime, recall, precision, base rate, base-rate lift, median lead hours, effective sample, warned events and the measurement date); `withheld` (the gate ran and refused — `reason` says why, in words); `unavailable` (the record could not be read at all — an infrastructure failure that says nothing about the record). It is ONE stratum selected by recall, never a platform-wide accuracy. Null means no exact record match; read recordMatchReason. | |
| methodologyVersion | No | ||
| confidenceSemantics | No | Every confidence-bearing value with its score type, scale, calibration status, and probability flag. | |
| decisionEligibility | No | Fail-closed binding-authority policy. WITHHELD means source evidence remains available for audit while normalized direction, actionability and execution fields are revoked. | |
| directionEligibility | No | Current market-direction eligibility. Direction is authorized only by an exact, eligible producer stratum (canonical_verdict, canonical_symbol_verdict, committee_verdict) — read bindingAuthority to see which one bound. Widening WHO may bind did not weaken WHAT binding requires: the named producer must still hold a matching horizon/class/family record on a verified-only judged population, so an authority without a record still cannot bind. | |
| executionEligibility | No | Fail-closed execution boundary. Portfolio monitoring tools always return WITHHELD with MONITOR_ONLY_NO_EXECUTION_AUTHORITY while Fahali has no capital path. | |
| legacyFieldSemantics | Yes | ||
| outputClassification | Yes | ||
| monitoringEligibility | No | Current portfolio-monitoring validity based on captured identity, freshness, integrity, and the caller-supplied monitoring policy. ELIGIBLE authorizes observation/delivery only, never financial action. | |
| sourceEvidenceQuality | No | ||
| currentActionEligibility | No | Current eligibility of an immutable historical portfolio verdict. It never mutates the stored judgment being replayed. | |
| sourceConfidenceSemantics | No |