Verify a HarnessProfile against a SandboxProfile and model

Opens a ConformanceReport for this HarnessProfile against the logical sandbox_profile_key and model_routing_profile_key keys you choose, guarded by expected_version. Callers never supply trusted digests or policy hashes: Checkfu resolves the credential-free RunSpec itself. Accepted with 202 and an open report — poll listHarnessConformance for the settled verdict, realized HarnessCapabilitySet, and derived tier. Verification consumes a bounded Runner lease and model dispatch budget; send Idempotency-Key so a retry does not open a second report.

Checkfu support posture: alpha; hosted. Required evidence journey: harness-registry. Deployment-specific readiness and the latest proven release are available from GET /v1/support/capabilities.

POST /v1/harness-profiles/{id}/verifications

Verify a HarnessProfile against a SandboxProfile and model

cURL

curl --request POST \
  --url https://api.checkfu.com/v1/harness-profiles/{id}/verifications \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'checkfu-version: <checkfu-version>' \
  --data '
{
  "expected_version": 1,
  "sandbox_profile_key": "<string>",
  "model_routing_profile_key": "<string>",
  "prove_platform_mcp": true
}
'

202

{
  "id": "<string>",
  "workspace_id": "<string>",
  "harness_profile_id": "<string>",
  "harness_profile_revision_number": 1,
  "release_digest": "<string>",
  "driver_version": "<string>",
  "sandbox_profile_id": "<string>",
  "sandbox_profile_revision_number": 1,
  "sandbox_image_digest": "<string>",
  "model_routing_profile_id": "<string>",
  "model_routing_profile_revision_number": 1,
  "plane_policy_hash": "<string>",
  "suite_revision": "<string>",
  "run_spec": {
    "run": "<string>",
    "session": "<string>",
    "context": {
      "event_cursor": 1,
      "continuation": "rebuild_only",
      "instructions": "<string>",
      "tools": [
        {
          "kind": "catalog",
          "name": "<string>",
          "connection_id": "<string>"
        }
      ],
      "skills": [
        "<string>"
      ],
      "output_schema": "<unknown>",
      "history": [
        {
          "role": "user",
          "content": "<string>"
        }
      ],
      "attachment_refs": [
        "<string>"
      ],
      "compaction": {
        "trigger_percent": 50,
        "strategy_ladder": [
          "native"
        ],
        "preserve": [
          "<string>"
        ],
        "summarizer_model_routing_profile_key": "<string>"
      },
      "model_context_window_tokens": 1,
      "model_context_window_source": "industry_floor_default",
      "builtin_tools": [
        "bash"
      ]
    },
    "input": {
      "type": "user.message",
      "content": "<string>",
      "attachments": [
        "<string>"
      ],
      "continuation": {
        "kind": "custom_tool",
        "tool_use_id": "<string>",
        "result": "<unknown>"
      }
    },
    "execution_pins": {
      "agent_id": "<string>",
      "agent_release_number": 1,
      "harness_profile_id": "<string>",
      "harness_profile_revision_number": 1,
      "harness_release_digest": "<string>",
      "harness_driver_version": "<string>",
      "sandbox_profile_id": "<string>",
      "sandbox_profile_revision_number": 1,
      "sandbox_image_digest": "<string>",
      "model_routing_profile_id": "<string>",
      "model_routing_profile_revision_number": 1,
      "plane_policy_hash": "<string>",
      "selected_skills": [
        "<string>"
      ],
      "selected_tools": [
        "<string>"
      ],
      "instructions_sha256": "<string>"
    },
    "harness": {
      "kind": "trusted",
      "protocol": "mock",
      "configuration": {}
    },
    "sandbox": {
      "release": {
        "sandbox_profile_id": "<string>",
        "key": "<string>",
        "revision_number": 1,
        "template": {
          "tier": "container",
          "base_image": {
            "reference": "<string>",
            "digest": "<string>"
          },
          "packages": [
            {
              "manager": "apt",
              "name": "<string>",
              "version": "<string>"
            }
          ],
          "network_policy": {
            "mode": "none",
            "allowed_hosts": [
              "<string>"
            ],
            "required_egress_certification": "advisory_filter",
            "egress_presets": {
              "version": 1,
              "presets": [
                "package_managers"
              ]
            }
          },
          "resource_limits": {
            "cpu_millis": 1,
            "memory_mib": 1,
            "disk_mib": 1,
            "max_duration_seconds": 1
          },
          "retention_mode": "durable"
        },
        "derived_image_digest": "<string>"
      },
      "platform": {
        "os": "linux",
        "architecture": "amd64"
      },
      "root_image": "<string>"
    },
    "model": {
      "model_routing_profile_id": "<string>",
      "model_routing_profile_revision_number": 1,
      "tier": "default",
      "provider": "<string>",
      "model": "<string>",
      "reason": "cheapest_sufficient",
      "access": "harness_owned",
      "access_source": {
        "kind": "workspace_credential",
        "provider": "<string>",
        "model_credential_id": "<string>",
        "model_credential_generation_id": "<string>"
      }
    },
    "session_thread_id": "<string>",
    "requires_session_sandbox": true,
    "capability_set": {
      "event_fidelity": "native",
      "continuation": "in_flight",
      "checkpoint": "process_and_disk",
      "approval_delivery": "park",
      "interrupt": "cooperative",
      "mid_run_input": "native",
      "model_control": "platform_enforced",
      "usage_authority": "platform_observed",
      "multiagent_shared_environment": true,
      "subagents": "observed"
    },
    "materialization_target": "sandbox_staging",
    "runner_pool": "<string>",
    "conformance_target": {
      "provider_id": "<string>",
      "provider_revision": "<string>",
      "materialization_revision": "<string>",
      "placement": "local",
      "runtime_assurances": {
        "compute_accounting": true,
        "network_isolation": true,
        "bounded_start": true,
        "bounded_cancel": true,
        "teardown": true
      }
    },
    "runtime_qualification": {
      "topology": "colocated",
      "continuation": "rebuild",
      "capabilities": {
        "input": {
          "text": "realized",
          "structured": "realized",
          "files": "realized",
          "attachments": "realized"
        },
        "observation": {
          "user_message": "realized",
          "progress": "realized",
          "tool_activity": "realized",
          "subagents": "realized",
          "diagnostics": "realized"
        },
        "control": {
          "steer": "realized",
          "interrupt": "realized",
          "question_yield": "realized",
          "action_approval_continuation": "realized",
          "custom_tool_declaration": "realized",
          "custom_tool_continuation": "realized",
          "thread_spawn": "realized",
          "thread_message": "realized"
        },
        "resources": {
          "filesystem": "realized",
          "project_memory_mounts": "realized",
          "artifacts": "realized"
        },
        "gateways": {
          "platform_model": "realized",
          "platform_tools": "realized",
          "credential_proxy": "realized"
        },
        "continuity": {
          "checkpoint_export": "realized",
          "checkpoint_import": "realized"
        },
        "accounting": {
          "model_usage": "realized",
          "tool_usage": "realized",
          "compute_usage": "realized"
        },
        "isolation": {
          "network": "realized",
          "zdr": "realized"
        },
        "lifecycle": {
          "bounded_start": "realized",
          "cancel": "realized",
          "teardown": "realized",
          "orphan_recovery": "realized"
        }
      }
    },
    "lifecycle_hooks": [
      {
        "phase": "post_materialize",
        "commands": [
          {
            "argv": [
              "<string>"
            ],
            "working_directory": "<string>",
            "timeout_seconds": 900,
            "on_failure": "abort",
            "environment_slots": [
              "<string>"
            ]
          }
        ]
      }
    ],
    "platform_connections": [
      {
        "connection": "<string>",
        "provider": "<string>"
      }
    ]
  },
  "status": "pending",
  "checks": [
    {
      "name": "<string>",
      "status": "passed",
      "detail": "<string>"
    }
  ],
  "tier": "certified",
  "runner_placement": "local",
  "evidence_authority": "platform_observed",
  "evidence_manifest_revision": "<string>",
  "evidence_manifest_hash": "<string>",
  "execution_target": {
    "provider_id": "<string>",
    "provider_revision": "<string>",
    "materialization_revision": "<string>",
    "placement": "local",
    "runner_pool": "<string>",
    "runtime_assurances": {
      "compute_accounting": true,
      "network_isolation": true,
      "bounded_start": true,
      "bounded_cancel": true,
      "teardown": true
    }
  },
  "created_at": "<string>",
  "completed_at": "<string>",
  "expires_at": "<string>",
  "evidence_signature_status": "not_applicable",
  "capability_set": {
    "event_fidelity": "native",
    "continuation": "in_flight",
    "checkpoint": "process_and_disk",
    "approval_delivery": "park",
    "interrupt": "cooperative",
    "mid_run_input": "native",
    "model_control": "platform_enforced",
    "usage_authority": "platform_observed",
    "multiagent_shared_environment": true,
    "subagents": "observed"
  },
  "evidence_signature": {
    "algorithm": "hmac-sha256",
    "key_id": "<string>",
    "digest": "<string>"
  },
  "conformance_identity": {
    "request": {
      "suite_revision": "<string>",
      "case_set_revision": "checkfu:harness-conformance-case-set@1",
      "case_ids": [
        "ready_handshake"
      ],
      "case_set_digest": "<string>",
      "fingerprint": "<string>",
      "case_contract_digest": "<string>"
    },
    "evidence": {
      "revision": "checkfu:harness-conformance-evidence-identity@1",
      "request_fingerprint": "<string>",
      "target": {
        "provider_id": "<string>",
        "provider_revision": "<string>",
        "materialization_revision": "<string>",
        "placement": "local",
        "runtime_assurances": {
          "compute_accounting": true,
          "network_isolation": true,
          "bounded_start": true,
          "bounded_cancel": true,
          "teardown": true
        }
      },
      "fingerprint": "<string>"
    }
  },
  "qualification": {
    "topology": "colocated",
    "continuation": "rebuild",
    "capabilities": {
      "input": {
        "text": "realized",
        "structured": "realized",
        "files": "realized",
        "attachments": "realized"
      },
      "observation": {
        "user_message": "realized",
        "progress": "realized",
        "tool_activity": "realized",
        "subagents": "realized",
        "diagnostics": "realized"
      },
      "control": {
        "steer": "realized",
        "interrupt": "realized",
        "question_yield": "realized",
        "action_approval_continuation": "realized",
        "custom_tool_declaration": "realized",
        "custom_tool_continuation": "realized",
        "thread_spawn": "realized",
        "thread_message": "realized"
      },
      "resources": {
        "filesystem": "realized",
        "project_memory_mounts": "realized",
        "artifacts": "realized"
      },
      "gateways": {
        "platform_model": "realized",
        "platform_tools": "realized",
        "credential_proxy": "realized"
      },
      "continuity": {
        "checkpoint_export": "realized",
        "checkpoint_import": "realized"
      },
      "accounting": {
        "model_usage": "realized",
        "tool_usage": "realized",
        "compute_usage": "realized"
      },
      "isolation": {
        "network": "realized",
        "zdr": "realized"
      },
      "lifecycle": {
        "bounded_start": "realized",
        "cancel": "realized",
        "teardown": "realized",
        "orphan_recovery": "realized"
      }
    }
  }
}

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

checkfu-version · enum<string> · required

Available options: 2026-08-24

idempotency-key · string

Maximum string length: 255

Path Parameters

id · string · required

Pattern: ^hprof_[0-9a-f]{32}$

Body

application/json

expected_version · integer · required

Required range: x > 0

sandbox_profile_key · string · required

Pattern: ^[a-z0-9](?:[a-z0-9._-]{0,93})$

model_routing_profile_key · string · required

Pattern: ^[a-z0-9](?:[a-z0-9._-]{0,93})$

prove_platform_mcp · boolean

Response

202

application/json

Success

id · string · required

Pattern: ^conf_[0-9a-f]{32}$

workspace_id · string · required

Pattern: ^wrkspc_[0-9a-f]{32}$

harness_profile_id · string · required

Pattern: ^hprof_[0-9a-f]{32}$

harness_profile_revision_number · integer · required

Required range: x > 0

release_digest · string · required

Pattern: ^sha256:[0-9a-f]{64}$

driver_version · string · required

Minimum string length: 1

sandbox_profile_id · string · required

Pattern: ^sprof_[0-9a-f]{32}$

sandbox_profile_revision_number · integer · required

Required range: x > 0

sandbox_image_digest · string · required

Pattern: ^sha256:[0-9a-f]{64}$

model_routing_profile_id · string · required

Pattern: ^mrp_[0-9a-f]{32}$

model_routing_profile_revision_number · integer · required

Required range: x > 0

plane_policy_hash · string · required

Pattern: ^sha256:[0-9a-f]{64}$

suite_revision · string · required

Minimum string length: 1

run_spec · object · required

Show child attributes

status · enum<string> · required

Available options: pending, passed, failed

checks · object[] · required

Maximum array length: 64

Show child attributes

tier · enum<string> · required

Available options: certified, beta, experimental

runner_placement · enum<string> | null · required

Available options: local, hosted, byoc

evidence_authority · enum<string> | null · required

Available options: platform_observed, customer_asserted, mixed

evidence_manifest_revision · string | null · required

Minimum string length: 1

evidence_manifest_hash · string | null · required

Pattern: ^sha256:[0-9a-f]{64}$

execution_target · object | null · required

Show child attributes

created_at · string · required

completed_at · string | null · required

expires_at · string | null · required

evidence_signature_status · enum<string> · required

Available options: not_applicable, verified, revoked

capability_set · object

Show child attributes

evidence_signature · object | null

Show child attributes

conformance_identity · object

Show child attributes

qualification · object | null

Show child attributes