Statuses

Decisions

Decision	Meaning
Allow	Forwarded to the upstream server.
Require Approval	Held in the Approval Queue until a reviewer decides.
Block	Stopped at Aethis. No upstream execution is attempted.

When you use Evaluate policy, the preview reads Allowed, Approval required, Blocked, or Unresolved when Aethis can’t evaluate the action yet.

Approval requests

State	Meaning
Pending	Waiting for a reviewer.
Escalated	Waiting, and escalated because the response target passed.
Approved, awaiting execution	Approved once; the Agent hasn’t made the matching call yet.
Approved and executed	The matching call used the single-use approval. The Action Record’s outcome shows the execution result.
Denied	A reviewer denied it. The action doesn’t run through this request.
Expired	Not decided before the deadline. The action doesn’t run.
Cancelled	Withdrawn before a decision.

A single-use approval is Issued, Consumed (used by the matching call), Expired or Revoked.

Action outcomes

Outcome	Meaning
Approval pending	Held for approval. Execution hasn’t been attempted.
Approved, awaiting execution	A reviewer approved it once. The Agent hasn’t made the matching call yet.
Allowed, awaiting execution	Policy allowed it. It hasn’t been dispatched upstream yet.
Execution in progress	Dispatched to the upstream server. No result yet.
Execution succeeded	The upstream server completed the call.
Execution failed	The call failed, and it is known that the side effect didn’t happen.
Outcome unknown	The call may have been dispatched, but the response was lost, for example to a timeout. It may or may not have taken effect.
Blocked, not executed	Policy blocked it at Aethis. Nothing reached upstream.

Each decision follows its own lifecycle:

• Allow: Allowed, awaiting execution, then Execution in progress, then Execution succeeded.
• Require Approval: Approval pending, then Approved, awaiting execution, then Execution in progress, then Execution succeeded.
• Block: Blocked, not executed.

An allowed or approved action can end in Execution failed or Outcome unknown instead of Execution succeeded.

Outcome unknown is not a failure

Aethis never reports Outcome unknown as Execution failed. A timeout or a lost response only becomes Execution failed when it is known that the side effect didn’t happen. Before you retry an action with an unknown outcome, check the upstream system to see whether it ran.

Execution state on its own is Not attempted, Executing, Succeeded, Failed or Outcome unknown.

Action Record integrity

These statuses describe a record’s consistency and integrity state: whether the expected evidence and chain links are present and checked.

Status	Meaning
Intact	All expected integrity and link metadata is available, and the checks completed successfully.
Delayed	Some expected evidence or link metadata hasn’t arrived yet. There is no confirmed permanent gap; Aethis is waiting for it.
Degraded	The record exists, but the normal level of integrity assurance couldn’t be provided for part of it. Assurance is reduced.
Gap	An expected event, link or durable result is confirmed missing. Investigation is required.
Unverified	Integrity verification hasn’t completed, or hasn’t been run.

See Action Records.

Tools and Connections

Tool trust state

State	Meaning
Trusted	The definition matches the one you accepted.
New	Discovered for the first time; not accepted yet.
Changed	The server returned a different definition. Needs review.
Removed	No longer offered by the server.
Stale	The last discovery is out of date.

Tool access on an Agent: Conditional (policy evaluates each call), Blocked, or Unresolved (can’t be evaluated yet; the reason is shown).

MCP Connection status

Status	Next step
Connect account	Authorize the server’s account.
Refresh tools	Run discovery to confirm the catalogue.
Review changes	Tool changes are paused until the catalogue is reviewed.
Review tool meaning	The catalogue is current; some tools’ effect or amount format needs review.
Unavailable	Check the connection.
Ready	The catalogue is current and available for policy checks.

Model Route status: Ready, Degraded, Unavailable, or Verify route (check the route and its workspace allocation).

Execution boundary: Governed or Frozen.

Health

Health	Meaning
Healthy	The last check succeeded.
Degraded	Reachable, with problems.
Unavailable	Not reachable.
Unknown	Not checked yet.

Coverage

Coverage	Meaning
Governed	Calls on this path are evaluated by policy.
Partial	Some tools or calls on this path can’t be evaluated yet.
Uncovered	No policy evaluation on this path.
Changed	Tool definitions changed and need review.
Unverified	Coverage hasn’t been confirmed.

Policies

Status	Meaning
Active	Published and enforced.
Draft	Not published.
Disabled	Published, not enforced.
Archived	Retired.
Conflict	A reference no longer resolves. Create a draft to fix it.

On an Agent, a Policy can also show Needs review. Its assignment is Direct, Inherited or Required.

Agents

Status	Meaning
Active	Available. Governed paths operate normally.
Degraded	Still operates, but a dependency needs attention: a degraded provider, a partially available Connection, discovery drift, or delayed evidence.
Paused	A temporary stop that a user started. Governed routes stop and the configuration remains. Resume Route restores it.
Suspended	A protective stop enforced by Aethis, because of a hard safety boundary, a security condition, an invalid authority state, or a required dependency failure. The triggering condition must be resolved before normal operation resumes.
Disabled	Turned off administratively. The Agent stays registered and configured, but is unavailable until it is explicitly re-enabled.

Alerts

Severity: Critical, High, Medium.

State	Meaning	Next
Open	Nobody has responded yet.	Acknowledge or Start investigation
Acknowledged	Someone has it.	Start investigation, or resolve
Investigating	Someone is working on the cause.	Resolve
Resolved	Closed.	Reopen if it returns

A Capability Drift alert can’t be resolved until its tool change is accepted or rejected.