> ## Documentation Index
> Fetch the complete documentation index at: https://docs.firedrill.run/llms.txt
> Use this file to discover all available pages before exploring further.

# Verify uploaded bytes before binding them to a run for an active CI claim

> Requires the exact active CI suite, case, claim, interaction and run revision. CI credentials never gain general project run or evidence access. Upload before completing the claim. Byte and checksum limits match native run attachments.



## OpenAPI

````yaml /api-reference/openapi.json post /v1/ci/suites/{ciSuiteId}/cases/{ciCaseId}/claims/{ciClaimId}/attachments/{attachmentId}/complete
openapi: 3.1.0
info:
  title: Firedrill Control API
  version: 1.0.0
  description: >-
    The control plane for drills, drill runs, and the worlds they run in. Errors
    always carry the canonical envelope; unsafe operations require an
    Idempotency-Key; long work returns an operation resource.
servers:
  - url: https://api.firedrill.run
security:
  - controlCredential: []
tags:
  - name: authentication
    description: Sessions, CLI exchange, credentials, and verification keys.
    x-group: Authentication
  - name: organizations
    description: Organization members, billing, usage, retention, audit, and exports.
    x-group: Organizations
  - name: projects
    description: Project lifecycle, access, grants, and repository bindings.
    x-group: Projects
  - name: builds
    description: Immutable builds, uploads, source drafts, and world definitions.
    x-group: Builds and source
  - name: tools
    description: Project Tool discovery, approval, source, and revocation.
    x-group: Tool library
  - name: worlds
    description: >-
      Managed environments, world sessions, state, time, reset, faults, forks,
      and snapshots.
    x-group: Environments and sessions
  - name: runs
    description: >-
      Hosted runs, comparisons, attachments, reports, evidence bundles, sharing,
      and exports.
    x-group: Runs and evidence
  - name: browser
    description: Managed browser tests, runs, messages, streams, frames, and artifacts.
    x-group: Browser testing
  - name: callbacks
    description: Callback receiver approval, revocation, and signing material.
    x-group: Callbacks
  - name: github-ci
    description: >-
      GitHub installations, repository automation, CI suites, cases, evidence,
      and checks.
    x-group: GitHub and CI
  - name: authoring
    description: Authoring sessions, proposals, turns, and scenario proposals.
    x-group: Cloud authoring
paths:
  /v1/ci/suites/{ciSuiteId}/cases/{ciCaseId}/claims/{ciClaimId}/attachments/{attachmentId}/complete:
    post:
      tags:
        - github-ci
      summary: >-
        Verify uploaded bytes before binding them to a run for an active CI
        claim
      description: >-
        Requires the exact active CI suite, case, claim, interaction and run
        revision. CI credentials never gain general project run or evidence
        access. Upload before completing the claim. Byte and checksum limits
        match native run attachments.
      operationId: ciAttachments.complete
      parameters:
        - name: ciSuiteId
          in: path
          required: true
          schema:
            type: string
            pattern: ^cisuite_[0-9a-z]{12,32}$
        - name: ciCaseId
          in: path
          required: true
          schema:
            type: string
            pattern: ^cicase_[0-9a-z]{12,32}$
        - name: ciClaimId
          in: path
          required: true
          schema:
            type: string
            pattern: ^ciclaim_[0-9a-z]{12,32}$
        - name: attachmentId
          in: path
          required: true
          schema:
            type: string
            pattern: ^ratt_[a-f0-9]{32}$
        - name: Idempotency-Key
          in: header
          required: true
          schema:
            type: string
            minLength: 8
            maxLength: 128
            pattern: ^[A-Za-z0-9._:-]+$
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CompleteRunAttachmentRequest'
      responses:
        '200':
          description: Verified attachment available for interaction completion
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RunAttachmentResponse'
        default:
          description: Canonical error envelope
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
components:
  schemas:
    CompleteRunAttachmentRequest:
      type: object
      properties:
        interactionId:
          type: string
          minLength: 1
          maxLength: 96
          pattern: ^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$
        expectedRevision:
          type: integer
          minimum: 0
          exclusiveMinimum: true
          maximum: 9007199254740991
        digest:
          type: string
          pattern: ^sha256:[0-9a-f]{64}$
      required:
        - interactionId
        - expectedRevision
        - digest
      additionalProperties: false
    RunAttachmentResponse:
      type: object
      properties:
        attachment:
          type: object
          properties:
            attachmentId:
              type: string
              pattern: ^ratt_[a-f0-9]{32}$
            projectId:
              type: string
              pattern: ^prj_[0-9a-z]{12,32}$
            hostedRunId:
              type: string
              pattern: ^hrun_[0-9a-z]{12,32}$
            interactionId:
              type: string
              minLength: 1
              maxLength: 96
              pattern: ^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$
            expectedRevision:
              type: integer
              minimum: 0
              exclusiveMinimum: true
              maximum: 9007199254740991
            attachment:
              type: object
              properties:
                schemaVersion:
                  type: number
                  enum:
                    - 1
                kind:
                  type: string
                  enum:
                    - file
                id:
                  type: string
                  minLength: 1
                  maxLength: 96
                  pattern: ^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$
                name:
                  type: string
                  minLength: 1
                  maxLength: 128
                  pattern: ^[A-Za-z0-9][A-Za-z0-9._-]*$
                mediaType:
                  type: string
                  minLength: 1
                  maxLength: 200
                bytes:
                  type: integer
                  minimum: 0
                  maximum: 67108864
                hash:
                  type: string
                  pattern: ^sha256:[0-9a-f]{64}$
                redaction:
                  type: object
                  properties:
                    status:
                      type: string
                      enum:
                        - not_applied
                        - applied_by_caller
                    note:
                      default: null
                      nullable: true
                      type: string
                      minLength: 1
                      maxLength: 500
                  required:
                    - status
                    - note
                  additionalProperties: false
              required:
                - schemaVersion
                - kind
                - id
                - name
                - mediaType
                - bytes
                - hash
                - redaction
              additionalProperties: false
            capture:
              type: object
              properties:
                kind:
                  type: string
                  enum:
                    - log
                    - screenshot
                    - video
                    - file
                policy:
                  type: string
                  enum:
                    - always
                    - retain-on-failure
              required:
                - kind
                - policy
              additionalProperties: false
            state:
              type: string
              enum:
                - awaiting_upload
                - uploaded
                - available
                - bound
                - deleted
            expiresAtMs:
              type: integer
              minimum: -9007199254740991
              maximum: 9007199254740991
          required:
            - attachmentId
            - projectId
            - hostedRunId
            - interactionId
            - expectedRevision
            - attachment
            - state
            - expiresAtMs
          additionalProperties: false
        upload:
          type: object
          properties:
            method:
              type: string
              enum:
                - PUT
            uploadUrl:
              type: string
              format: uri
            headers:
              type: object
              additionalProperties:
                type: string
            authentication:
              type: string
              enum:
                - control
            expiresAtMs:
              type: integer
              minimum: -9007199254740991
              maximum: 9007199254740991
          required:
            - method
            - uploadUrl
            - headers
            - authentication
            - expiresAtMs
          additionalProperties: false
      required:
        - attachment
      additionalProperties: false
    ErrorEnvelope:
      type: object
      properties:
        code:
          type: string
          pattern: ^(control|world)\.[A-Z][A-Z0-9]*(_[A-Z0-9]+)*$
        message:
          type: string
          minLength: 1
        correlationId:
          type: string
          minLength: 1
        retryable:
          type: boolean
        retryAfterMs:
          type: integer
          exclusiveMinimum: 0
          maximum: 9007199254740991
        operationId:
          type: string
        source:
          type: string
          enum:
            - platform
            - simulated_provider
        issues:
          type: array
          items:
            type: object
            properties:
              path:
                type: string
              code:
                type: string
              message:
                type: string
            required:
              - path
              - code
              - message
            additionalProperties: false
        details:
          type: object
          propertyNames:
            type: string
          additionalProperties: {}
        evidence:
          type: object
          properties:
            sessionId:
              type: string
            runId:
              type: string
            journalSeq:
              type: integer
              minimum: 0
              maximum: 9007199254740991
            buildHash:
              type: string
          additionalProperties: false
      required:
        - code
        - message
        - correlationId
        - retryable
        - source
      additionalProperties: true
  securitySchemes:
    controlCredential:
      type: http
      scheme: bearer
      description: Opaque control credential

````