Skip to content

Preview Publish federated analysis definition (dry-run)

POST
/v1/actions/hospitality.action.publish_federated_analysis_definition/preview
curl --request POST \
--url https://api.aerandil.com/v1/actions/hospitality.action.publish_federated_analysis_definition/preview \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{ "branch": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "params": { "aggregation_method": "plain_aggregate_reviewed", "algorithm_family": "secure_sum", "analysis_kind": "federated_analytics", "cohort_policy": {}, "composition_group": "example", "contribution_bounds": {}, "datasheet_template_ref": "example", "definition_api_name": "example", "delta_per_run": "example", "dpia_reference": "example", "epsilon_per_run": "example", "forbidden_field_classes": [ "example" ], "input_field_allowlist": [ "example" ], "input_object_types": [ "example" ], "local_code_digest": "example", "local_code_reference": "example", "local_execution_requirements": {}, "local_feature_contract": {}, "minimum_local_runner_version": "example", "model_card_template_ref": "example", "objective": "example", "output_review_required": true, "output_schema": {}, "privacy_mechanisms": [ "cohort_threshold" ], "publish_status": "draft", "recommended_local_runner_version": "example", "threat_model_ref": "example", "version": "example", "weighting_method": "unweighted" }, "return_modified": false, "target": { "id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "object_type": "hospitality.federated_intelligence_program" } }'

Scenario preview of apply_hospitality_action_publish_federated_analysis_definition — runs the action exactly as apply would (validation, handler dispatch, modified-object projection, commit-time cross-link validation) then rolls the transaction back. Returns the modified_objects / modified_links / warnings the apply would have produced without persisting anything or firing any outward effect. Requires the same actions:hospitality.action.publish_federated_analysis_definition:apply scope as apply. No Idempotency-Key.

Media typeapplication/json
object
branch

Apply against an open branch’s overlay view instead of the canonical (main) plane. The action’s writes land in the branch’s copy-on-first-write overlay, its events in the branch’s own stream, and the invocation is journaled for merge-by-replay. Branch writes are action-only, so this is the write-side entry point to a branch (POST /v1/branches forks one).

string format: uuid
params
required
object
aggregation_method
required
Aggregation method
string
Allowed values: plain_aggregate_reviewed secure_sum noisy_count noisy_sum noisy_mean noisy_histogram noisy_quantile trimmed_mean weighted_average fedavg external_clean_room reviewed_custom
algorithm_family
required
Algorithm family
string
Allowed values: secure_sum count_rate histogram quantile calibration_curve outcome_decay fedavg fedxgb reviewed_custom
analysis_kind
required
Analysis kind
string
Allowed values: federated_analytics federated_learning private_set_intersection clean_room_query benchmark_export
cohort_policy
required
Minimums and suppression rules; may inherit from program (JSON)
object
key
additional properties
any
composition_group
Groups related definitions for privacy-budget composition
string
contribution_bounds
required
Min / max / clipping norms / per-participant caps (JSON)
object
key
additional properties
any
datasheet_template_ref
Required for benchmark exports and model artifacts
string
definition_api_name
required
Stable slug within program
string
delta_per_run
Required for approximate DP mechanisms
string format: decimal
dpia_reference
Required when program or definition is high-risk
string
epsilon_per_run
Required if DP applies
string format: decimal
forbidden_field_classes
required
Defaults applied if empty
Array<string>
input_field_allowlist
required
Fully qualified field paths or named derived features
Array<string>
input_object_types
required
Aerandil object types eligible for local reads
Array<string>
local_code_digest
Required when local_code_reference is set
string
local_code_reference
Optional code package / container / runner ref
string
local_execution_requirements
required
Runner version, memory / timeout bounds, offline mode, network policy (JSON)
object
key
additional properties
any
local_feature_contract
required
Bounded schema for local features and aggregate vectors (JSON)
object
key
additional properties
any
minimum_local_runner_version
Optional per-definition hard floor; effective floor is max of program-pin and this value (semver)
string
model_card_template_ref
Required for model artifacts
string
objective
required
What question the run answers
string
output_review_required
required
True by default for cross-tenant and model outputs
boolean
output_schema
required
Bounded output shape (JSON)
object
key
additional properties
any
privacy_mechanisms
required
Required; at least cohort_threshold for cross-tenant outputs
Array<string>
Allowed values: cohort_threshold contribution_bounding differential_privacy secure_aggregation secure_multiparty_computation homomorphic_encryption private_set_intersection trusted_execution_environment manual_statistical_disclosure_control none_internal_portfolio_only
publish_status
draft (default) or reviewing
string
Allowed values: draft reviewing approved deprecated revoked
recommended_local_runner_version
Optional per-definition soft baseline; effective baseline is max of program-pin and this value (semver)
string
threat_model_ref
Required for cross-tenant programs
string
version
required
Semver-like
string
weighting_method
required
Weighting method
string
Allowed values: unweighted room_nights available_rooms eligible_events revenue reviewed_custom
return_modified

When true, the response carries modified_objects and modified_links projections — the engine reads the event log inside the same transaction so the projection observes the handler’s own writes.

boolean
target
required
object
id
required
string format: uuid
object_type
required
Allowed value: hospitality.federated_intelligence_program

Preview computed and rolled back. modified_objects and modified_links carry the effect set the apply would produce; preview is always true.

Media typeapplication/json
ApplyActionResponse

Envelope returned by the Aerandil action engine. correlation_id ties every event emitted by this invocation; modified_objects and modified_links project the events the handler emitted (per the action’s declared effects); warnings carries any non-blocking soft-validator observations.

object
correlation_id
required

Per-invocation correlation id; matches events.correlation_id for every event this action appended.

string format: uuid
modified_links
required

Links established or removed by this invocation. Empty when the caller did not request return_modified.

Array<object>
object
from_id
required
string format: uuid
from_type
required
string
kind
required
Allowed values: linked
link_type
required
Allowed values: hospitality.link.federated_program_has_definition
to_id
required
string format: uuid
to_type
required
string
modified_objects
required

Objects created, modified, or soft-deleted by this invocation. Empty when the caller did not request return_modified.

Array<object>
object
id
required
string format: uuid
kind
required
Allowed values: created
object_type
required
Allowed values: hospitality.federated_analysis_definition
warnings

Non-blocking soft-validator observations emitted during this invocation (e.g. comp-authority over-limit, recipe pour-cost over sell-price). Absent when no warnings were emitted.

Array<object>
object
message
required

Human-readable summary, suitable for logging or operator-UI surfacing.

string
object_type
required

Object type the warning was raised against.

string
property

Property the warning anchors to, when a single field is the locus. Absent for multi-field rules.

string
rule
required

Stable kebab-case rule identifier (e.g. comp-authority-over-limit).

string
Example
{
"modified_links": [
{
"kind": "linked",
"link_type": "hospitality.link.federated_program_has_definition"
}
],
"modified_objects": [
{
"kind": "created",
"object_type": "hospitality.federated_analysis_definition"
}
]
}
Cache-Control
string
Allowed value: no-store

Always no-store — uncommitted live data.

Conflict — concurrent modification or unique constraint violation the apply would hit.

Validation error — the apply would be rejected.