Skip to content

Latest commit

 

History

History
70 lines (44 loc) · 2.27 KB

File metadata and controls

70 lines (44 loc) · 2.27 KB

Operation Semantics Reference

This document defines the fields and rules for structured operation semantics.

Note: This schema is used by both x-intentops-semantics (preferred) and x-intent (legacy) extensions.

ver

The ver field contains the major version number as a string. Schema path /v1/ matches ver: "1".

Documents declare their schema version so validators can select the correct schema. Breaking changes increment the major version.

operation_class

A stable semantic identifier for the API action. Use dot-separated naming:

billing.invoice.get_status
comms.email.create_draft_refund_notice
billing.refund.create_payout

effects

Declarative, policy-relevant semantic effects of invoking this operation.

  • Cumulative and unordered. The array represents all declared effects; order has no meaning.
  • Not an execution trace. Effects describe semantic intent, not an exhaustive log of runtime behavior.

effect.kind

Generic categories that apply across domains:

Kind Meaning
read Retrieves data
mutate Creates or updates a resource
delete Removes a resource
notify Sends a notification
external_call Invokes an external service
financial_transfer Moves money
provision Allocates infrastructure or capacity
compute Executes significant computation

Kinds are intentionally generic so policies can reason about effect categories without enumerating every possible operation.

effect.target

A semantic boundary identifying the resource domain—not a runtime scope, IAM resource, or specific object ID.

  • Use stable identifiers like billing.invoice, payment.processor, crm.customer
  • Not per-request instance IDs. Target identifies the resource type or domain, not a specific record.
  • Not IAM resources. Target is for policy reasoning, not access control binding.

Optional Fields

effect.risk

Classifies potential impact: low, medium, high.

Useful for policies that enforce risk ceilings or require approval for high-risk operations.

effect.data

Describes data sensitivity:

  • data.class: public, internal, confidential, restricted
  • data.pii: boolean

Useful for policies that restrict access to sensitive or PII data.