What an Event Means
Each event is one checkpoint decision. A single model turn can produce several events:Fields to Check First
| Field | Why it matters |
|---|---|
| API key | Confirms which app, agent, or environment sent the request. |
| Policy | Shows which policy produced the decision. |
| Provider | Shows provider, operation, model, and streaming mode when available. |
| Checkpoint | Shows which lifecycle stage made the decision. |
| Decision | Shows allow, block, restrict_tools, or rewrite. The UI may display restrict tools. |
| Request context | Lets you search by conversationId, requestId, or traceId. |
| Time | Confirms whether the event came from the run you are debugging. |
| Tool details | Shows blocked tools or checked tool identity when available. |
| Reasons | Explains why a decision happened when policy returns reason data. |
Investigation Order
- Filter to the time range around your test run.
- Filter by API key prefix or environment.
- Search for
conversationId,requestId, ortraceId. - Narrow by checkpoint if you know where the failure happened.
- Inspect
block,restrict_tools, andrewritedecisions first.
Decision Meanings
| Decision | What happened |
|---|---|
allow | The checkpoint allowed execution to continue. |
block | The checkpoint stopped execution at that stage. |
restrict_tools | The request continued, but one or more tools were removed before the provider call. |
rewrite | Output policy requested a safer final answer. |
restrict_tools, inspect blocked tool names and then review the attached tool exposure policy.
Empty Events Checklist
If you expected events and the table is empty:- confirm your app uses a wrapped client or calls
POST /v1/decide - confirm
AVERTA_API_KEYis set in the same process that calls the provider - confirm the key is not revoked
- confirm the key has an attached policy
- confirm your app sends traffic to
https://api.averta.ioor the intendedAVERTA_BASE_URL - confirm you are looking at the right organization and time range
- add
onDecisionlogging to prove the SDK is receiving decisions
Correlate with SDK Logs
AddonDecision while debugging:
conversationId, requestId, or traceId.
Common Investigations
| Symptom | What to inspect |
|---|---|
| No event appears | API key, wrapper usage, base URL, organization, time range. |
| Request blocked | Request checkpoint reason and attached policy threshold. |
| Tool disappeared | Request event blockedTools and tool exposure rules. |
| Tool execution never starts | Tool-call checkpoint decision. |
| Tool result blocked | Tool output content as untrusted input. |
| Output blocked or rewritten | Output checkpoint decision and rewrite category. |
| Event is hard to map to logs | requestContext and API key naming. |
Next Steps
Checkpoints
Understand the lifecycle stage behind each event.
API keys
Confirm which key and policy produced the event.