Identity Watchlist

Implementation Status

What the page does

Capability boundary (CCP-036)

Evidence composes the disabled entry source and alert publisher and registers no monitor, so no signer identity is evaluated against the definitions and no match is recorded. Evidence maps no alert-history route; the former fixed-empty GET /api/evidence/v1/watchlist/alerts handler was withdrawn. Accordingly the page:

Mission Control > Alerts carries no watchlist card. A durable monitor and alert-history store are separate, unselected work.

Read outcomes

The definition read has four distinct outcomes, and none is rendered as another:

OutcomeRendering
Denied (401/403)“not readable with this session” (requires trust:read); no rows, no empty-watchlist message
Failed (other error)“could not be loaded” with Retry; metric cards show the error state
Empty (200, no items)“No watchlist definitions are stored” with a create action; definition statistics show unavailable, not 0%
Loadeddefinition rows; a scope or filter with no matches shows a separate filtered-empty message

The same outcomes apply on the Tuning tab: its average dedup window summary reads “Loading definitions”, “Definition read denied” or “Definition read failed” until a read succeeds, and “No rules in this scope” only after a loaded read with no definitions in the selected scope.

Verification

Source Inputs