ADR Endpoints
| Method | Path | Description |
|---|---|---|
| GET | /console/adr/stats | ADR statistics (events, alerts, quarantined) |
| GET | /console/adr/alerts | List threat alerts (filter by identity_did) |
| GET | /console/adr/profile/{did} | Get behavioral profile for an identity |
| GET | /console/adr/quarantine | List quarantined identities |
| POST | /console/adr/quarantine | Manually quarantine an identity |
| DELETE | /console/adr/quarantine/{did} | Remove from quarantine |
| GET | /console/adr/incidents | List incident records |
| POST | /console/adr/incidents/{id}/resolve | Resolve an incident |
Quarantine Identity
POST /console/adr/quarantine
{
"identity_did": "did:trusthub:acme:abc123",
"reason": "Suspicious data exfiltration pattern"
}