> ## Documentation Index > Fetch the complete documentation index at: https://docs.getmillwork.dev/llms.txt > Use this file to discover all available pages before exploring further. # Download compliance export > Download the compliance export for a reporting period. ## OpenAPI ````yaml /openapi/solverapi.openapi.json get /v1/compliance-export openapi: 3.1.0 info: description: >- Run approved AI models under data, cost, and time limits. A cost limit can stop another provider call after recorded spend reaches the limit; it cannot reverse a call already in progress. Each finished run returns a receipt naming the selected model and provider without including the prompt or model output. Use the model catalog for what your organization can run now. Provider secrets never appear in API requests or responses. Retry a mutation with the same Idempotency-Key and the same request body. title: Millwork API version: 1.0.0 servers: - url: https://api.getmillwork.dev security: [] tags: - description: >- Submit work, check its status, cancel it, and read the result. The API calls each run an execution. name: Runs - description: A record of how a run was handled, without prompt or result content. name: Receipts - description: Models this organization can use now. name: Models - description: Providers and sign-in methods that can be connected. name: Available providers - description: Provider accounts connected to this organization. name: Provider connections - description: >- One-time browser steps for connecting a provider without sending its secret in an API request. name: Secure credential setup - description: Exact models and provider routes available through connected accounts. name: Provider models - description: Create, label, list, and revoke organization API keys. name: API keys - description: Organization members and invitations. name: Members - description: Metered usage and quota state. name: Usage - description: Account, plan and allowance snapshot. name: Account - description: Checkout, billing portal and billing profile. name: Billing - description: Webhook endpoints, deliveries and replay. name: Webhooks - description: Organization-scoped compliance export. name: Compliance export - description: >- Models, agents, and skills Millwork can choose for a run. The API calls each one an arm. name: Registered options - description: >- Checks that score output and can stop, retry, or choose another option within the request policy. name: Output checks - description: Routing proposals and their review lifecycle. name: Repair proposals - description: Aggregate evaluation trend and repair history. name: Evaluation - description: Publisher and release identity records for supported models. name: Model definitions - description: >- Protected provider-credential references. Secret material never appears in this API. name: Credential references - description: Dashboard browser sign-in, sign-up, session lookup, and sign-out. name: Browser access - description: Read-only demo session setup. name: Demo - description: Machine setup and the authenticated organization profile. name: Organizations paths: /v1/compliance-export: get: tags: - Compliance export summary: Download compliance export description: Download the compliance export for a reporting period. operationId: getComplianceExport parameters: - in: query name: period required: false schema: pattern: ^\d{4}-\d{2}$ type: string - in: query name: from required: false schema: minLength: 1 type: string - in: query name: to required: false schema: minLength: 1 type: string responses: '200': content: application/json: schema: additionalProperties: false properties: attestation: additionalProperties: false properties: algorithm: enum: - sha256 type: string digest: type: string required: - algorithm - digest type: object content_policy: additionalProperties: false properties: proposals: enum: - role_scoped_d8b type: string receipts: enum: - content_free type: string required: - receipts - proposals type: object decision_log: items: additionalProperties: false properties: acted_by: anyOf: - type: string - type: 'null' action: type: string at: format: date-time type: string decision_id: type: string kind: enum: - proposal_decision - execution_cancellation - api_key_revocation - registry_action type: string proposal: additionalProperties: false properties: arm_id: type: string created_at: format: date-time type: string decided_at: anyOf: - format: date-time type: string - type: 'null' decided_by: anyOf: - type: string - type: 'null' diff: items: additionalProperties: false properties: baseline_hash: type: string candidate_content: type: string candidate_hash: type: string region: type: string required: - region - baseline_hash - candidate_hash type: object type: array execution_id: type: string on_approve: additionalProperties: false properties: new_artifact_hash: type: string new_version: type: string required: - new_version - new_artifact_hash type: object proposal_id: type: string status: enum: - pending - approved - rejected - expired type: string verifier_evidence: additionalProperties: false properties: baseline: additionalProperties: false properties: anchor_results: additionalProperties: type: boolean type: object is_correct: type: boolean named_metrics: additionalProperties: type: number type: object quality_score: type: number required: - is_correct - quality_score type: object candidate: additionalProperties: false properties: anchor_results: additionalProperties: type: boolean type: object is_correct: type: boolean named_metrics: additionalProperties: type: number type: object quality_score: type: number required: - is_correct - quality_score type: object required: - candidate - baseline type: object required: - proposal_id - arm_id - execution_id - status - diff - verifier_evidence - created_at - decided_at - decided_by type: object resource: additionalProperties: false properties: id: type: string type: enum: - proposal - execution - api_key - arm - verifier type: string required: - type - id type: object required: - decision_id - kind - action - resource - acted_by - at type: object type: array period: additionalProperties: false properties: from: format: date-time type: string to: format: date-time type: string required: - from - to type: object receipts_ndjson: type: string schema_version: enum: - aud2.v1 type: string usage_totals: additionalProperties: false properties: calls: type: integer executions: type: integer input_tokens: type: integer output_tokens: type: integer passthrough_usd: type: number platform_usd: type: number slices: type: integer usd: type: number required: - executions - slices - input_tokens - output_tokens - calls - usd - platform_usd - passthrough_usd type: object required: - schema_version - period - content_policy - receipts_ndjson - usage_totals - decision_log - attestation type: object description: Default Response 4XX: content: application/problem+json: schema: $ref: '#/components/schemas/Problem' description: >- Request failure in RFC 7807 format. The `type` field identifies the reason. Validation errors list affected fields. Rate and quota errors include `retry_after_s` and the `Retry-After` header. 5XX: content: application/problem+json: schema: $ref: '#/components/schemas/Problem' description: >- Server failure in RFC 7807 format. The response does not include internal error details. security: - bearerAuth: [] - sessionCookie: [] components: schemas: Problem: additionalProperties: false properties: detail: description: Short, safe, occurrence-specific description. Never a stack trace. type: string errors: description: Per-field validation failures (validation_failed only). items: additionalProperties: false properties: field: type: string message: type: string required: - field - message type: object type: array instance: description: Unique id for this occurrence, safe to quote in support requests. format: uuid type: string retry_after_s: description: >- Seconds to wait before retrying (rate_limited and quota_exceeded only; mirrored as the Retry-After header). type: integer status: description: HTTP status code, duplicated in the body per RFC 7807. type: integer title: description: Human-readable summary of the problem type. type: string type: description: Stable URI that identifies the error type. format: uri type: string required: - type - title - status - instance type: object securitySchemes: bearerAuth: description: Organization API key for application requests. scheme: bearer type: http sessionCookie: description: Dashboard browser session. Do not use this credential in an application. in: cookie name: solverapi_session type: apiKey ````