Artifact records - Soteris Developer Docs

An artifact record describes something Soteris produces during an engagement: a draft, a finding set, a classification, or a deliverable candidate. An artifact carries a status of its own, separate from the engagement lifecycle, so a work-in-progress draft is never confused with a released deliverable.

Status values

Status	Meaning
`draft`	Being prepared. Not for external reliance.
`ready_for_review`	Complete enough to enter review.
`released`	Authorized and made available within access.
`superseded`	Replaced by a newer version.

Shape

An artifact record identifies its engagement, its kind, its status, and its version. A minimal, synthetic example:

artifact-record.json

{
  "schemaVersion": "0",
  "artifactId": "art_7b31",
  "engagementId": "eng_9f2c",
  "kind": "finding_set",
  "status": "ready_for_review",
  "version": 2,
  "updatedAt": "2026-01-16T09:20:00Z"
}

Only a released artifact is externally reliable, and only through its release record and receipt. A draft or ready_for_review artifact is internal working state: it exists, but it is not official.