Four calls, one guarantee

GET /api/runs/run_9c2f5e10

200 OK
{
  "run_id":  "run_9c2f5e10",
  "status":  "rolled_back",
  "terminal": true,
  "risk":     { "level": "high", "score": 64 },
  "tests":    [ { "name": "shadow-apply", "status": "passed", "duration_ms": 8412, "output": [ "…" ] } ],
  "monitors": [ { "metric": "pg_p95_ms", "baseline": "31ms", "observed": "940ms", "status": "breached" } ],
  "rollback": { "trigger": "monitor_breach", "…": "…" },
  "timeline": [ { "at": "…", "phase": "checkpoint", "detail": "…", "level": "success" } ]
}

import { setTimeout as sleep } from 'node:timers/promises'

const API = 'https://safecommit.dev/api'
const headers = {
  Authorization: `Bearer ${process.env.SAFECOMMIT_TOKEN}`,
  'Content-Type': 'application/json',
}

export async function protectedChange(change) {
  // 1. Price it. Nothing is applied and nothing is charged.
  const quote = await fetch(`${API}/quote`, {
    method: 'POST', headers, body: JSON.stringify(change),
  }).then((r) => r.json())

  if (quote.error) throw new Error(quote.error.message)

  // 2. Decide. The risk assessment is a rule table, not a model;
  //    the same input always produces the same score.
  if (quote.risk.level === 'critical') {
    return { skipped: true, reason: 'critical risk', risk: quote.risk }
  }

  // 3. Authorize. Returns once the run has reached a terminal state.
  const run = await fetch(`${API}/execute`, {
    method: 'POST',
    headers,
    body: JSON.stringify({
      run_id: quote.run_id,
      max_price_cents: quote.quote.total_cents,
    }),
  }).then((r) => r.json())

  if (run.status === 'rolled_back') {
    // The change went out and came back. Read why, then try something else.
    return { reverted: true, reason: run.rollback.reason }
  }

  if (run.status === 'failed') {
    // A gate caught it before apply. The logs say which one.
    const detail = await fetch(`${API}/runs/${run.run_id}`).then((r) => r.json())
    return { blocked: true, tests: detail.tests.filter((t) => t.status === 'failed') }
  }

  return { committed: true, checkpoint: run.checkpoint.id }
}