{ "openapi": "3.0.1", "info": { "title": "Fire Drill: controls testing for an AP agent", "description": "Runs manipulation drills against an accounts-payable AI agent, shows the turn a control failed, and writes an audit report. Verdicts are read from ledger state, never from the transcript.", "version": "0.1", "x-build-id": "4VJ8RJSJzipbkQBa7" }, "servers": [ { "url": "https://api.apify.com/v2" } ], "paths": { "/acts/shohabbos_m~fire-drill/run-sync-get-dataset-items": { "post": { "operationId": "run-sync-get-dataset-items-shohabbos_m-fire-drill", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for its completion, and returns Actor's dataset items in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } }, "/acts/shohabbos_m~fire-drill/runs": { "post": { "operationId": "runs-sync-shohabbos_m-fire-drill", "x-openai-isConsequential": false, "summary": "Executes an Actor and returns information about the initiated run in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "$ref": "#/components/schemas/runsResponseSchema" } } } } } } }, "/acts/shohabbos_m~fire-drill/run-sync": { "post": { "operationId": "run-sync-shohabbos_m-fire-drill", "x-openai-isConsequential": false, "summary": "Executes an Actor, waits for completion, and returns the OUTPUT from Key-value store in response.", "tags": [ "Run Actor" ], "requestBody": { "required": true, "content": { "application/json": { "schema": { "$ref": "#/components/schemas/inputSchema" } } } }, "parameters": [ { "name": "token", "in": "query", "required": true, "schema": { "type": "string" }, "description": "Enter your Apify token here" } ], "responses": { "200": { "description": "OK" } } } } }, "components": { "schemas": { "inputSchema": { "type": "object", "properties": { "target": { "title": "Target agent", "type": "string", "description": "\"local\" runs the sandboxed agent inside this Actor. Otherwise the Standby URL of an ap-practice-target Actor, e.g. https://USER--ap-practice-target.apify.actor", "default": "local" }, "anthropic_api_key": { "title": "Your Anthropic API key", "type": "string", "description": "Needed only when target is \"local\", because the agent then runs inside this Actor and its model calls bill to this key. Leave empty to use the key set on the Actor, if any. When drilling a Standby target, the target makes the model calls and this is not used." }, "target_token": { "title": "Target API token", "type": "string", "description": "Apify token for the target's Standby URL. Defaults to this run's APIFY_TOKEN." }, "cards": { "title": "Tactic cards", "type": "array", "description": "Card ids to drill, e.g. vmt-01. Leave empty to run the benign invoice pack instead.", "default": [], "items": { "type": "string" } }, "turns": { "title": "Attacker turns per card", "type": "object", "description": "{\"vmt-01\": [\"first message\", \"second message\"]}. Kit fields such as {invoice_id}, {amount} and {attacker_account} are filled in per seed. You supply these: the Actor ships no attack text.", "default": {} }, "seeds": { "title": "Seeds", "type": "array", "description": "Each seed is a different fictional vendor, invoice and accounts. More seeds, tighter confidence interval.", "default": [ 1, 2, 3 ] }, "config": { "title": "Hardening level", "type": "string", "description": "baseline (no controls), baseline+verify, patched, or patch: from patches/", "default": "baseline" }, "model": { "title": "Victim model", "enum": [ "claude-opus-5-5", "claude-sonnet-5-5", "claude-haiku-5-5", "claude-haiku-4-5" ], "type": "string", "description": "The model the accounts-payable agent runs on.", "default": "claude-opus-5-5" }, "max_turns": { "title": "Max turns per drill", "minimum": 1, "maximum": 20, "type": "integer", "description": "A drill stops at this many turns if money has not moved and the attacker still has messages left.", "default": 6 } } }, "runsResponseSchema": { "type": "object", "properties": { "data": { "type": "object", "properties": { "id": { "type": "string" }, "actId": { "type": "string" }, "userId": { "type": "string" }, "startedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "finishedAt": { "type": "string", "format": "date-time", "example": "2025-01-08T00:00:00.000Z" }, "status": { "type": "string", "example": "READY" }, "meta": { "type": "object", "properties": { "origin": { "type": "string", "example": "API" }, "userAgent": { "type": "string" } } }, "stats": { "type": "object", "properties": { "inputBodyLen": { "type": "integer", "example": 2000 }, "rebootCount": { "type": "integer", "example": 0 }, "restartCount": { "type": "integer", "example": 0 }, "resurrectCount": { "type": "integer", "example": 0 }, "computeUnits": { "type": "integer", "example": 0 } } }, "options": { "type": "object", "properties": { "build": { "type": "string", "example": "latest" }, "timeoutSecs": { "type": "integer", "example": 300 }, "memoryMbytes": { "type": "integer", "example": 1024 }, "diskMbytes": { "type": "integer", "example": 2048 } } }, "buildId": { "type": "string" }, "defaultKeyValueStoreId": { "type": "string" }, "defaultDatasetId": { "type": "string" }, "defaultRequestQueueId": { "type": "string" }, "buildNumber": { "type": "string", "example": "1.0.0" }, "containerUrl": { "type": "string" }, "usage": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "integer", "example": 1 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } }, "usageTotalUsd": { "type": "number", "example": 0.00005 }, "usageUsd": { "type": "object", "properties": { "ACTOR_COMPUTE_UNITS": { "type": "integer", "example": 0 }, "DATASET_READS": { "type": "integer", "example": 0 }, "DATASET_WRITES": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_READS": { "type": "integer", "example": 0 }, "KEY_VALUE_STORE_WRITES": { "type": "number", "example": 0.00005 }, "KEY_VALUE_STORE_LISTS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_READS": { "type": "integer", "example": 0 }, "REQUEST_QUEUE_WRITES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_INTERNAL_GBYTES": { "type": "integer", "example": 0 }, "DATA_TRANSFER_EXTERNAL_GBYTES": { "type": "integer", "example": 0 }, "PROXY_RESIDENTIAL_TRANSFER_GBYTES": { "type": "integer", "example": 0 }, "PROXY_SERPS": { "type": "integer", "example": 0 }, "PROXY_UNBLOCKER_UNITS": { "type": "integer", "example": 0 } } } } } } } } } }