Scores

Risk scoring for events

Risk Scoring

Every event captured by the Quint daemon carries a risk score from 0 to 100. This score is a corroborating behavioral signal from the shadow-mode layer, not the enforcement mechanism — enforcement is deterministic scope evaluation, where only scope:out_of_scope_sensitive is block-capable. The score is computed from action type, tool invoked, target sensitivity, and behavioral context, and is useful for triage and filtering.

Risk scores are included as fields on events and can be filtered via the Events API:

# Get events with risk score above 50
curl "https://api.quintai.dev/v1/events?min_risk=50" \
  -H "Authorization: Bearer qt_deploy_YOUR_TOKEN"

Score Bands

Score	Risk Level	Color
0-10	None	Green
11-30	Low	Blue
31-55	Medium	Yellow
56-80	High	Orange
81-100	Critical	Red

Aggregate Statistics

The GET /v1/events/stats endpoint provides 24-hour aggregates including event counts and risk distribution:

curl https://api.quintai.dev/v1/events/stats \
  -H "Authorization: Bearer qt_deploy_YOUR_TOKEN"

Session Risk Summary

Each session includes a risk summary when retrieved via GET /v1/sessions/{id}, showing total events, maximum risk score, and average risk across all events in the session.