detection.runModule 07Turn contention between agents into a filed case with the evidence attached, instead of an alert nobody can answer.
detection.run runs one named detector over the plane's live state or over events you send. Ten detectors are pure functions, four more reason deterministically and one is a model screen. A hit becomes a conflict citing its evidence, filed at rung 0 of the ladder.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuse
Plane module
idlease-overlap, oscillation or effect-divergence.eventsid, kind, , , and an optional . An event with no or is dropped./docs/detection-runAPI referenceRoutes, bodies and status codes./docs/detection-runOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/detectionStart freeCreate a workspace and admit your first intent./auth/signup
atactorDidresourcebodyidkindtuningoscillationFlips, stampedeWaiters, windowMs, evasionIdentities, fanOut, starvationMs and collusionMatches. Filing uses the tenant's own.hitsdetector:resource:parties.conflictsevidence holds ledger event or lease ids, and severity is flag or block.filedconflictId and caseId.suppressedconflictId and caseId.filedOnsent events received and how many of them the ledger holds (held). Only held events are filed.fileErrorforceInlinesemantic-intent: run the model in the request instead of queueing it.Ten pure detectors answer in the request. lease-overlap, deadlock and the live half of stampede read leases and waiters now; the rest read the events you send, under thresholds you may override with tuning.
mandate-contradiction, goal-forecast, epistemic-risk and case-file compute their answers in the request. No queue, no workflow and no model is involved. Only mandate-contradiction files cases.
semantic-intent sends text to a model. A bound workflow or queue takes it first unless forceInline is set. Its labels return as hypotheses and are never filed.
Post id to POST /api/v1/acp/detection/run. An unknown id is refused with 404, and GET /api/v1/acp/detection/catalog lists every id with the last stored runs.
Live detectors read the plane's leases and waiters at that moment. Stream detectors read the events you send, each with an id, a kind, an actor and a resource.
Each hit is a conflict object with detector, , , , and . A detector that cannot cite at least one event or lease id builds no hit.
world stands in for your workspace; nothing leaves this page. detection.run docs
Press Run (or ⌘/Ctrl + Enter) to decide the request on the left.
It runs in this browser: the plane’s own kernel, with no key, no account and no network call. Change an agent, a lease or a rule on the left and run it again to see the verdict move.
A request in the shape the API accepts, and an example response in the shape the module returns.
POST /api/v1/acp/detection/run Authorization: Bearer av_workspace_•••• Content-Type: application/json { "id": "lease-overlap", "forceInline": true } → 200 { detector, hits, conflicts, llm, filed, suppressed, filedOn }
{
"detector": {
"id": "lease-overlap",
"path": "near",
"llm": false
},
"hits": [
"lease-overlap:repo:payments/main:did:web:acme.example:agent:deps,did:web:acme.example:agent:release"
],
"conflicts": [
{
"detector": "lease-overlap",
"resource": "repo:payments/main",
"parties": [
"did:web:acme.example:agent:deps",
"did:web:acme.example:agent:release"
],
"why": "2 unexpired exclusive leases are held on repo:payments/main at once – by did:web:acme.example:agent:deps, did:web:acme.example:agent:release",
"evidence": [
"lease_41",
"lease_42"
],
"severity":
}
],
: ,
: [
{
: ,
:
}
],
: [],
: {
: ,
:
}
}A migration leaves two unexpired leases on repo:payments/main. lease-overlap names both holders, cites both lease ids and opens a case.
Two agents keep reverting each other's config. oscillation fires only when the writers alternate, and cites the writes that put the content back.
effect-divergence compares what an agent declared with what the ledger shows, and keeps undeclared effects apart from over-claims.
mandate-contradiction reads the mandates in force. A pair becomes a finding only once both principals act on the same resource.
coordination.admit.arbitration.arbiter and courts.file.events you send and the plane's live leases and waiters.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
suppressed, not dropped.collusion reports flag only, whatever the tuning. It cannot block.semantic-intent label is true. It is a model's unconfirmed hypotheses entry with no ledger citation.lease-overlap, deadlock, stampede, camouflage, evasion and self-replication report block. oscillation, starvation and collusion report flag. effect-divergence reports block for an undeclared effect and flag for an over-claim.
Defaults: two flips, eight stampede waiters, a window of 60,000 ms, three evasion identities, a fan-out of five, 300,000 ms of starvation and three collusion matches. The workspace's stampedeMaxWaiters replaces the stampede default.
One agent churning its own draft is not oscillation, fifty retries from one caller is not a stampede, and an agent that declared nothing has nothing to diverge from. The detectors guard against each.
A newly filed effect-divergence hit also records a trust signal for the accused agent: effect.undeclared for a block and effect.overclaim for a flag.
Every run except case-file is stored per workspace. The catalogue route returns the detectors with lastRuns.
semantic-intent run is queued first when a workflow or queue is bound. The response then carries queued and workflowId.id, its hits and a timestamp. It carries no pack version.tuning in the request.Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/detection/runRun one detector and file what it finds./api/v1/acp/detection/catalogList the detectors and their last stored runs.coordination.detection.runRun one detector as an MCP action.coordination.detection.catalogList the detectors as an MCP action.coordination.lease02Resource leases and queuesHold a resource for one agent at a time, with a lease that lapses on its own and a queue for the agents that have to wait.arbitration.arbiter38Bounded arbiterGet a ruling on a conflict its parties could not settle, from a model held to five remedies, with a person taking over when it is unsure.conflict-audit.latest33Conflict audit reportRead the latest conflict audit: where agents contended, how well the record backs it, and which resources are ready to move from observe to enforce.drills.counterfactual34Counterfactual simulationAsk what a policy change would do before you make it: re-run chosen requests with grants dropped or added, and see each answer change.drills.frt35Turf-war drillsCheck on demand, or on a cadence you set, that the kernel's core guarantees still hold, and keep a scorecard of every run.watchdog.check36Issuance watchdogCatch a plane that is issuing leases or credentials too fast, or has gone quiet, by reading the ledger instead of asking the plane.resourcepartieswhyevidenceseverityEvery hit opens a case at rung 0 whatever its severity. While a case for the same detector, resource and parties is open, later hits come back as suppressed.
If arbitration or the ledger cannot be reached, the hits are still computed, stored and returned, and fileError says why nothing was filed.
conformity.sweep37