Readonlyclosedtrue once the source has closed and retains nothing.
Optional ReadonlycoverageWhy the inspector cannot explain enforcement, when unsupported.
ReadonlydecisionsFrozen decisions with sequence numbers greater than the requested cursor.
ReadonlydroppedDecisions dropped for an unapproved rule alias (saturating).
ReadonlyinstanceThe instance UUID the batch was read for; equals the requested one.
ReadonlylostRing sequences evicted between the requested cursor and the first returned decision.
ReadonlynextLast returned sequence, or the requested cursor when nothing was returned.
ReadonlystateThe inspector's availability state.
ReadonlyversionContract version.
One page of authorization decision explanations from the authorization inspector (M98h), read non-destructively.
after/next/lostfollow the M98a cursor contract ofDiagnosticsBatchexactly:afteris exclusive, a cursor older than the oldest retained decision returns the oldest retained decisions with the skipped sequences reported inlost(per batch, never cumulative), andnextis the last returned sequence — or the requested cursor when nothing was returned, so polling an idle application re-sends the same cursor.droppedUnapprovedcounts decisions dropped BEFORE buffering because a requested rule lacked an approved alias (saturating) — an unapproved GRANTING role never drops a decision, it is only omitted as aviaRoleAlias; those consume no sequence, so they appear in neitherlostnor the ring. No absolute time is carried:ageMsdescribes arrival at this process only.Since
0.8.0