noresponse 4.0.1 → 5.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fa139d0d85091fddabfe4d07a2c8694222f9ed5c5be76cc716f8ca7f1ed7e0f3
-  data.tar.gz: 3164ac403c8fcd1f7a54658ea6e8a86c66a620c66b3c20f789349d07d006790d
+  metadata.gz: a5cc779fba02d556d64cfc5380616093dcef3728b81aaff1c695bc21b5fc7304
+  data.tar.gz: c0a927bcd4495917a0e7ada33c1846952b9050962b54f201991bcd2eb76cdd03
 SHA512:
-  metadata.gz: 4413543c0d01ac1eb9a9e72f32dfff5390d9f0992a76c3e865c331ab5039585ced60f1128c99421ec2c514e495183ad931317b14d07d31616c535c217a600590
-  data.tar.gz: 4421d7d84256867b1420d72c10e1bb29a7dfbbb63169f12b3ce38344de8c1e61fe185d13cf6e1b2a82a8caf9fcad02ea1849ed218803e2bbbacbca0bb0f9d7ff
+  metadata.gz: f49f16f788ae91a0c7519fe3afa6ec25c28565cee60a9825341b4dc1f81f3887d0ec896828c8674c3df14b321eb29a1dfd5cdf26f67b9ed7fbea4569b4bb0503
+  data.tar.gz: 770c20e277eb10ad7dee955495ae925147c0142743582a1ad638a47efafd3f7c6e7c0684d5710b13f71fb4c455290cd83dc19f2a2736fecec7367af1c1e9ae1f

data/lib/no_response/accounts.rb

@@ -636,7 +636,7 @@ module NoResponse
       http_headers: nil
     )
       # list_assessments - Page through one account's unexpired assessments.
-      # The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your tenant and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.
+      # The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.
       request = Models::Operations::ListAccountAssessmentsRequest.new(
         account_id: account_id,
         limit: limit,

data/lib/no_response/assessments.rb

@@ -16,7 +16,7 @@ module NoResponse
   class Assessments
     extend T::Sig
 
-    # Signup and gateway assessments.
+    # Assessments of account creation, login and purchase.
 
     sig { params(sdk_config: SDKConfiguration).void }
     def initialize(sdk_config)
@@ -50,7 +50,7 @@ module NoResponse
     }
     def create(body:, idempotency_key: nil, retries: nil, timeout_ms: nil, http_headers: nil)
       # create - Assess identifiers for a signup or gateway decision.
-      # Assesses one signup, login or purchase (flow) and answers with the account's one current risk: account.risk.decision is the decision for this flow (allow, step_up, review or block, where block means your block threshold was reached), and detail holds this assessment's own facts. depth sets how long the answer waits for sources: quick waits only for the fast ones (500 ms), full for the whole budget (3000 ms at most); it defaults to full for signup and purchase and quick for login. 200 carries complete or partial, 202 carries pending with Location and Retry-After. While the account's first assessment is pending, account is absent: apply your own fallback for that, 429, 503 or a timeout. NoResponse blocks nothing itself; you decide. Requires the assess scope. Idempotency-Key is optional in the SDK and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+      # Assesses one account creation, login or purchase (flow) and answers with the account's one current risk: account.risk.decision is the decision for this flow (allow, step_up, review or block, where block means your block threshold was reached), and detail holds this assessment's own facts. depth sets how long the answer waits for sources: quick waits only for the fast ones (500 ms), full for the whole budget (3000 ms at most); it defaults to full for account_creation and purchase and quick for login. 200 carries complete or partial, 202 carries pending with Location and Retry-After. While the account's first assessment is pending, account is absent: apply your own fallback for that, 429, 503 or a timeout. NoResponse blocks nothing itself; you decide. Requires the assess scope. Idempotency-Key is optional in the SDK and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
       request = Models::Operations::CreateAssessmentRequest.new(
         body: body,
         idempotency_key: idempotency_key
@@ -348,7 +348,7 @@ module NoResponse
     }
     def get(assessment_id:, response_mode: nil, retries: nil, timeout_ms: nil, http_headers: nil)
       # get - Poll the authoritative assessment of one assessment.
-      # Returns the highest assessment_version, with the account's current risk. Requires the assess or history scope. While status is pending, or partial with a source still running, the response carries Retry-After; poll no faster than it says. Another tenant's assessment, an unknown or expired assessment and a malformed assessment_id all answer 404 not_found. response_mode=detailed needs the detailed scope.
+      # Returns the highest assessment_version, with the account's current risk. Requires the assess or history scope. While status is pending, or partial with a source still running, the response carries Retry-After; poll no faster than it says. Another workspace's assessment, an unknown or expired assessment and a malformed assessment_id all answer 404 not_found. response_mode=detailed needs the detailed scope.
       request = Models::Operations::GetAssessmentRequest.new(
         assessment_id: assessment_id,
         response_mode: response_mode
@@ -1232,7 +1232,7 @@ module NoResponse
     }
     def query(request:, retries: nil, timeout_ms: nil, http_headers: nil)
       # query - Page through one account's unexpired assessments.
-      # History is a POST with account_id in the body so an account identifier stays out of URLs and access logs. Requires the history scope. Read-only and safe to retry. Newest first, each at its latest assessment_version. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your tenant and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope.
+      # History is a POST with account_id in the body so an account identifier stays out of URLs and access logs. Requires the history scope. Read-only and safe to retry. Newest first, each at its latest assessment_version. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
       url = "#{base_url}/v1/assessments/query"

data/lib/no_response/integrations.rb

@@ -324,7 +324,7 @@ module NoResponse
         .returns(Models::Operations::ListIntegrationsResponse)
     }
     def list(retries: nil, timeout_ms: nil, http_headers: nil)
-      # list - List the tenant's integrations.
+      # list - List the workspace's integrations.
       # Every integration, oldest first. Listings carry no secrets. Requires the integrations scope.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)

data/lib/no_response/issued_credential.rb

@@ -1,7 +1,7 @@
 # typed: true
 # frozen_string_literal: true
 
-# Hash an API key your signup gate issued. Hand-written beside the generated client.
+# Hash an API key your platform issued. Hand-written beside the generated client.
 
 require 'digest'
 

data/lib/no_response/keyusage.rb

@@ -46,8 +46,8 @@ module NoResponse
         .returns(Models::Operations::RecordKeyUsageResponse)
     }
     def record(body:, idempotency_key: nil, retries: nil, timeout_ms: nil, http_headers: nil)
-      # record - Report requests made with API keys your signup gate issued.
-      # Records requests made with API keys your signup gate issued to your accounts, one event per request: the key's SHA-256 (the issued_credential.sha256 the account's assessment carried), the client IP, the time and optionally the user agent, model and token counts. Most callers use the SDK's usage buffer, which batches events and sends them in the background. Sampling is allowed: sample_rate weights an event's request and token counts. Requires the assess scope. Idempotency-Key is optional in the SDK and handled as on POST /v1/assessments: a retry with the same key and body answers the same record with Idempotent-Replayed: true and counts nothing again; a different body answers 409. A batch holds 1 to 500 events and at most 256 KiB. No raw event is kept: usage is aggregated per key, and IPs, user agents and models are kept only as keyed digests, with the IP's country, for 24 hours. When one key is used from 20 or more IP addresses, or 3 or more countries, within 24 hours, every account whose assessment carried that key gets the shared_api_key reason for 30 days.
+      # record - Report requests made with API keys your platform issued.
+      # Records requests made with API keys your platform issued to your accounts, one event per request: the key's SHA-256 (the issued_credential.sha256 the account's assessment carried), the client IP, the time and optionally the user agent, model and token counts. Most callers use the SDK's usage buffer, which batches events and sends them in the background. Sampling is allowed: sample_rate weights an event's request and token counts. Requires the assess scope. Idempotency-Key is optional in the SDK and handled as on POST /v1/assessments: a retry with the same key and body answers the same record with Idempotent-Replayed: true and counts nothing again; a different body answers 409. A batch holds 1 to 500 events and at most 256 KiB. No raw event is kept: usage is aggregated per key, and IPs, user agents and models are kept only as keyed digests, with the IP's country, for 24 hours. When one key is used from 20 or more IP addresses, or 3 or more countries, within 24 hours, every account whose assessment carried that key gets the shared_api_key reason for 30 days.
       request = Models::Operations::RecordKeyUsageRequest.new(
         body: body,
         idempotency_key: idempotency_key

data/lib/no_response/late_results.rb

@@ -3,7 +3,7 @@
 
 # Late-result handlers. Hand-written beside the generated client.
 #
-# An assessment can be revised after the signup was allowed: a slow source
+# An assessment can be revised after the account creation was allowed: a slow source
 # settles and the account's decision rises. NoResponse sends the new version as a
 # signed assessment.updated webhook. LateResults.handle verifies that delivery
 # with Webhooks.construct_event, picks an action from your policy, and acts

data/lib/no_response/models/operations/createassessment_request.rb

@@ -10,7 +10,7 @@ module NoResponse
         include Crystalline::MetadataFields
 
         field :body, Models::Shared::AssessmentRequest, {'request': {'media_type': "application/json"}}
-        # Opaque client key, 16 to 128 characters of [A-Za-z0-9._:-] (a UUID or ULID fits). Scoped to the tenant principal and bound to the canonical body for 24 hours. Optional: the SDK generates a UUID when you omit it and sends the same key on every retry of the call.
+        # Opaque client key, 16 to 128 characters of [A-Za-z0-9._:-] (a UUID or ULID fits). Scoped to the workspace principal and bound to the canonical body for 24 hours. Optional: the SDK generates a UUID when you omit it and sends the same key on every retry of the call.
         field(
           :idempotency_key,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/operations/deleteaccount_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The account_id the tenant sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request.
+        # The account_id the workspace sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request.
         field :account_id, ::String, {'path_param': {'field_name': "account_id", 'style': "simple", 'explode': false}}
 
         sig { params(account_id: ::String).void }

data/lib/no_response/models/operations/deleteintegration_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Path segment, matched case-sensitively. A value that does not match the integration_id shape, or another tenant's id, answers 404.
+        # Path segment, matched case-sensitively. A value that does not match the integration_id shape, or another workspace's id, answers 404.
         field(
           :integration_id,
           ::String,

data/lib/no_response/models/operations/deletewebhookendpoint_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        # The endpoint's whe_ id. An id that is unknown, malformed or another workspace's answers 404.
         field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
 
         sig { params(endpoint_id: ::String).void }

data/lib/no_response/models/operations/getaccount_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The account_id the tenant sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request.
+        # The account_id the workspace sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request.
         field :account_id, ::String, {'path_param': {'field_name': "account_id", 'style': "simple", 'explode': false}}
 
         sig { params(account_id: ::String).void }

data/lib/no_response/models/operations/listaccountassessments_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The account_id the tenant sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request.
+        # The account_id the workspace sends with its assessments, as one path segment (percent-encode '|' and ':' if the client requires it). A value that does not match the account_id shape answers 400 invalid_request.
         field :account_id, ::String, {'path_param': {'field_name': "account_id", 'style': "simple", 'explode': false}}
         # next_cursor from the previous page, unchanged.
         field(

data/lib/no_response/models/operations/listwebhookdeliveries_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        # The endpoint's whe_ id. An id that is unknown, malformed or another workspace's answers 404.
         field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
         # next_cursor from the previous page, unchanged.
         field(

data/lib/no_response/models/operations/recordassessmentoutcome_request.rb

@@ -17,7 +17,7 @@ module NoResponse
         )
 
         field :body, Models::Shared::AssessmentOutcomeRequest, {'request': {'media_type': "application/json"}}
-        # Opaque client key, 16 to 128 characters of [A-Za-z0-9._:-] (a UUID or ULID fits). Scoped to the tenant principal and bound to the canonical body for 24 hours. Optional: the SDK generates a UUID when you omit it and sends the same key on every retry of the call.
+        # Opaque client key, 16 to 128 characters of [A-Za-z0-9._:-] (a UUID or ULID fits). Scoped to the workspace principal and bound to the canonical body for 24 hours. Optional: the SDK generates a UUID when you omit it and sends the same key on every retry of the call.
         field(
           :idempotency_key,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/operations/recordkeyusage_request.rb

@@ -10,7 +10,7 @@ module NoResponse
         include Crystalline::MetadataFields
 
         field :body, Models::Shared::KeyUsageBatchRequest, {'request': {'media_type': "application/json"}}
-        # Opaque client key, 16 to 128 characters of [A-Za-z0-9._:-] (a UUID or ULID fits). Scoped to the tenant principal and bound to the canonical body for 24 hours. Optional: the SDK generates a UUID when you omit it and sends the same key on every retry of the call.
+        # Opaque client key, 16 to 128 characters of [A-Za-z0-9._:-] (a UUID or ULID fits). Scoped to the workspace principal and bound to the canonical body for 24 hours. Optional: the SDK generates a UUID when you omit it and sends the same key on every retry of the call.
         field(
           :idempotency_key,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/operations/replaywebhookdelivery_request.rb

@@ -9,9 +9,9 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        # The endpoint's whe_ id. An id that is unknown, malformed or another workspace's answers 404.
         field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
-        # The evt_ id of a delivery the endpoint's log holds, as GET /v1/webhooks/{endpoint_id}/deliveries lists it. An id that is malformed, not sent to this endpoint, past the log's retention or another tenant's answers 404.
+        # The evt_ id of a delivery the endpoint's log holds, as GET /v1/webhooks/{endpoint_id}/deliveries lists it. An id that is malformed, not sent to this endpoint, past the log's retention or another workspace's answers 404.
         field :event_id, ::String, {'path_param': {'field_name': "event_id", 'style': "simple", 'explode': false}}
 
         field :body, Models::Shared::WebhookReplayRequest, {'request': {'media_type': "application/json"}}

data/lib/no_response/models/operations/rotateintegrationsecret_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Path segment, matched case-sensitively. A value that does not match the integration_id shape, or another tenant's id, answers 404.
+        # Path segment, matched case-sensitively. A value that does not match the integration_id shape, or another workspace's id, answers 404.
         field(
           :integration_id,
           ::String,

data/lib/no_response/models/operations/rotatewebhooksigningkey_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        # The endpoint's whe_ id. An id that is unknown, malformed or another workspace's answers 404.
         field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
 
         field :body, Models::Shared::WebhookKeyRotationRequest, {'request': {'media_type': "application/json"}}

data/lib/no_response/models/operations/sendwebhooktestevent_request.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The endpoint's whe_ id. An id that is unknown, malformed or another tenant's answers 404.
+        # The endpoint's whe_ id. An id that is unknown, malformed or another workspace's answers 404.
         field :endpoint_id, ::String, {'path_param': {'field_name': "endpoint_id", 'style': "simple", 'explode': false}}
 
         field :body, Models::Shared::WebhookTestRequest, {'request': {'media_type': "application/json"}}

data/lib/no_response/models/shared/account.rb

@@ -4,12 +4,12 @@
 module NoResponse
   module Models
     module Shared
-      # Body of the 200 answer to GET /v1/accounts/{account_id}: the one current risk of one of the calling tenant's accounts. It is the risk of the account's latest assessment that has a decision (status complete or partial), by created_at and then assessment_id, scored exactly as GET /v1/assessments/{assessment_id} scores that assessment, plus the account's own reason shared_api_key when a key issued to the account was used from many IP addresses or countries (POST /v1/key_usage/batches). Its assessments are the account's history (GET /v1/accounts/{account_id}/assessments).
+      # Body of the 200 answer to GET /v1/accounts/{account_id}: the one current risk of one of the calling workspace's accounts. It is the risk of the account's latest assessment that has a decision (status complete or partial), by created_at and then assessment_id, scored exactly as GET /v1/assessments/{assessment_id} scores that assessment, plus the account's own reason shared_api_key when a key issued to the account was used from many IP addresses or countries (POST /v1/key_usage/batches). Its assessments are the account's history (GET /v1/accounts/{account_id}/assessments).
       class Account
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # The account_id the tenant sends with its assessments.
+        # The account_id the workspace sends with its assessments.
         field :id, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("id"), required: true}}
 
         field(
@@ -17,7 +17,7 @@ module NoResponse
           Models::Shared::AccountRisk,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("risk"), required: true}}
         )
-        # The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its signup thresholds, so the flows differ only where it set them.
+        # The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
         field(
           :decisions_by_flow,
           Models::Shared::AccountDecisionsByFlow,

data/lib/no_response/models/shared/accountdecisionsbyflow.rb

@@ -4,18 +4,18 @@
 module NoResponse
   module Models
     module Shared
-      # The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its signup thresholds, so the flows differ only where it set them.
+      # The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
       class AccountDecisionsByFlow
         extend T::Sig
         include Crystalline::MetadataFields
 
         # block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
         field(
-          :signup,
+          :account_creation,
           Models::Shared::AccountDecision,
           {
             'format_json': {
-              'letter_case': ::NoResponse::Utils.field_name("signup"),
+              'letter_case': ::NoResponse::Utils.field_name("account_creation"),
               required: true,
               'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::AccountDecision, false)
             }
@@ -48,14 +48,14 @@ module NoResponse
 
         sig {
           params(
-            signup: Models::Shared::AccountDecision,
+            account_creation: Models::Shared::AccountDecision,
             login: Models::Shared::AccountDecision,
             purchase: Models::Shared::AccountDecision
           )
             .void
         }
-        def initialize(signup:, login:, purchase:)
-          @signup = signup
+        def initialize(account_creation:, login:, purchase:)
+          @account_creation = account_creation
           @login = login
           @purchase = purchase
         end
@@ -63,7 +63,7 @@ module NoResponse
         sig { params(other: T.untyped).returns(T::Boolean) }
         def ==(other)
           return false unless other.is_a?(self.class)
-          return false unless @signup == other.signup
+          return false unless @account_creation == other.account_creation
           return false unless @login == other.login
           return false unless @purchase == other.purchase
           true

data/lib/no_response/models/shared/accountdecisionsbyflow.rbi

@@ -6,10 +6,10 @@ class NoResponse::Models::Shared::AccountDecisionsByFlow
 end
 
 class NoResponse::Models::Shared::AccountDecisionsByFlow
-  def signup
+  def account_creation
   end
 
-  def signup=(str_)
+  def account_creation=(str_)
   end
 
   def login

data/lib/no_response/models/shared/accountdeletion.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Body of the 200 answer to DELETE /v1/accounts/{account_id}: the calling tenant's account was erased in the environment of the calling key. Every assessment of the account went, with its revisions, evidence, outcomes and the identity-graph marks its outcomes set, and an assessment that was still running when the call arrived is stopped. Afterwards GET /v1/accounts/{account_id} and GET /v1/assessments/{assessment_id} of each erased assessment answer 404, and the history page is empty. The call is idempotent: a repeat, or an account with nothing to erase, answers 200 with assessments_deleted 0. The account_id can be assessed again later, as a new account.
+      # Body of the 200 answer to DELETE /v1/accounts/{account_id}: the calling workspace's account was erased in the environment of the calling key. Every assessment of the account went, with its revisions, evidence, outcomes and the identity-graph marks its outcomes set, and an assessment that was still running when the call arrived is stopped. Afterwards GET /v1/accounts/{account_id} and GET /v1/assessments/{assessment_id} of each erased assessment answer 404, and the history page is empty. The call is idempotent: a repeat, or an account with nothing to erase, answers 200 with assessments_deleted 0. The account_id can be assessed again later, as a new account.
       class AccountDeletion
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/assessment.rb

@@ -23,7 +23,7 @@ module NoResponse
             }
           }
         )
-        # The customer event an assessment is made for: signup (a new account), login (a returning sign-in) or purchase (a payment or credit grant). The account's risk is reported with the decision for this flow.
+        # The event an assessment is made for: account_creation (a user creates an account), login (a user returns to an existing account) or purchase (a payment or a credit grant). The account's risk is reported with the decision for this flow.
         field(
           :flow,
           Models::Shared::Flow,
@@ -59,7 +59,7 @@ module NoResponse
           ::String,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("schema_version"), required: true}}
         )
-        # Body of the 200 answer to GET /v1/accounts/{account_id}: the one current risk of one of the calling tenant's accounts. It is the risk of the account's latest assessment that has a decision (status complete or partial), by created_at and then assessment_id, scored exactly as GET /v1/assessments/{assessment_id} scores that assessment, plus the account's own reason shared_api_key when a key issued to the account was used from many IP addresses or countries (POST /v1/key_usage/batches). Its assessments are the account's history (GET /v1/accounts/{account_id}/assessments).
+        # Body of the 200 answer to GET /v1/accounts/{account_id}: the one current risk of one of the calling workspace's accounts. It is the risk of the account's latest assessment that has a decision (status complete or partial), by created_at and then assessment_id, scored exactly as GET /v1/assessments/{assessment_id} scores that assessment, plus the account's own reason shared_api_key when a key issued to the account was used from many IP addresses or countries (POST /v1/key_usage/batches). Its assessments are the account's history (GET /v1/accounts/{account_id}/assessments).
         field(
           :account,
           Crystalline::Nilable.new(Models::Shared::Account),

data/lib/no_response/models/shared/assessmentdeletion.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Body of the 200 answer to DELETE /v1/assessments/{assessment_id}: one of the calling tenant's assessments was deleted, with its versions, evidence, outcomes and the identity-graph marks its outcomes set. Afterwards GET /v1/assessments/{assessment_id} answers 404 and the assessment leaves the account's history. The account is scored again from what remains: account.current_assessment_id names the assessment GET /v1/accounts/{account_id} now serves its risk from, and is absent when the account has no assessment with a decision left. Deleting an assessment that is already gone answers 404.
+      # Body of the 200 answer to DELETE /v1/assessments/{assessment_id}: one of the calling workspace's assessments was deleted, with its versions, evidence, outcomes and the identity-graph marks its outcomes set. Afterwards GET /v1/assessments/{assessment_id} answers 404 and the assessment leaves the account's history. The account is scored again from what remains: account.current_assessment_id names the assessment GET /v1/accounts/{account_id} now serves its risk from, and is absent when the account has no assessment with a decision left. Deleting an assessment that is already gone answers 404.
       class AssessmentDeletion
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/assessmentdetail.rb

@@ -9,13 +9,13 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the tenant; another tenant's assessment id answers 404.
+        # Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404.
         field(
           :assessment_id,
           ::String,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assessment_id"), required: true}}
         )
-        # Your own opaque identifier for the account being checked, scoped to your tenant. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
+        # Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
         field(
           :account_id,
           ::String,
@@ -51,7 +51,7 @@ module NoResponse
           Crystalline::Array.new(Models::Shared::IncompleteSource),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("incomplete_sources"), required: true}}
         )
-        # Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A tenant threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
+        # Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A workspace threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
         field(
           :policy_version,
           ::String,
@@ -134,7 +134,7 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assessment_url")}}
         )
-        # The identity fields of the auth context the assessment was made with, echoed for the tenant's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
+        # The identity fields of the auth context the assessment was made with, echoed for the workspace's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
         field(
           :auth_context,
           Crystalline::Nilable.new(Models::Shared::AssessmentDetailAuthContext),

data/lib/no_response/models/shared/assessmentdetailauthcontext.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # The identity fields of the auth context the assessment was made with, echoed for the tenant's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
+      # The identity fields of the auth context the assessment was made with, echoed for the workspace's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
       class AssessmentDetailAuthContext
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/assessmentlist.rb

@@ -4,12 +4,12 @@
 module NoResponse
   module Models
     module Shared
-      # Body of the 200 answer to POST /v1/assessments/query: one page of the calling tenant's unexpired assessments for one account, newest first, each at its latest assessment_version, as its detail; the account's current risk is GET /v1/accounts/{account_id}. Every item's account_id equals the page's. An assessment past its expires_at is not listed. next_cursor is present only when another page exists.
+      # Body of the 200 answer to POST /v1/assessments/query: one page of the calling workspace's unexpired assessments for one account, newest first, each at its latest assessment_version, as its detail; the account's current risk is GET /v1/accounts/{account_id}. Every item's account_id equals the page's. An assessment past its expires_at is not listed. next_cursor is present only when another page exists.
       class AssessmentList
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Your own opaque identifier for the account being checked, scoped to your tenant. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
+        # Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
         field(
           :account_id,
           ::String,
@@ -27,7 +27,7 @@ module NoResponse
           ::String,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("schema_version"), required: true}}
         )
-        # Opaque cursor for the next page, bound to your tenant and the account_id it was issued for. Pass it back unchanged in the next query; a tampered, foreign or expired cursor answers 400 invalid_cursor.
+        # Opaque cursor for the next page, bound to your workspace and the account_id it was issued for. Pass it back unchanged in the next query; a tampered, foreign or expired cursor answers 400 invalid_cursor.
         field(
           :next_cursor,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/assessmentoutcome.rb

@@ -9,15 +9,15 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Opaque, server-assigned id of one recorded outcome: 'out_' and a 26-character Crockford base32 ULID. Unique within the tenant.
+        # Opaque, server-assigned id of one recorded outcome: 'out_' and a 26-character Crockford base32 ULID. Unique within the workspace.
         field :id, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("id"), required: true}}
-        # Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the tenant; another tenant's assessment id answers 404.
+        # Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404.
         field(
           :assessment_id,
           ::String,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assessment_id"), required: true}}
         )
-        # What the provider later learned about the assessed account. confirmed_abuse, account_takeover and chargeback report abuse; false_positive and legitimate withdraw an earlier abuse report of this tenant for the assessment; unknown is recorded only. Outcomes are append-only and the latest one recorded for an assessment wins.
+        # What the provider later learned about the assessed account. confirmed_abuse, account_takeover and chargeback report abuse; false_positive and legitimate withdraw an earlier abuse report of this workspace for the assessment; unknown is recorded only. Outcomes are append-only and the latest one recorded for an assessment wins.
         field(
           :outcome,
           Models::Shared::Outcome,

data/lib/no_response/models/shared/assessmentoutcomerequest.rb

@@ -4,12 +4,12 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/assessments/{assessment_id}/outcomes body: what the provider later learned about the account it assessed. The assessment is named by the path and the tenant by the API key, so neither is a body member. Idempotency-Key is required and binds the body as it does on POST /v1/assessments.
+      # POST /v1/assessments/{assessment_id}/outcomes body: what the provider later learned about the account it assessed. The assessment is named by the path and the workspace by the API key, so neither is a body member. Idempotency-Key is required and binds the body as it does on POST /v1/assessments.
       class AssessmentOutcomeRequest
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # What the provider later learned about the assessed account. confirmed_abuse, account_takeover and chargeback report abuse; false_positive and legitimate withdraw an earlier abuse report of this tenant for the assessment; unknown is recorded only. Outcomes are append-only and the latest one recorded for an assessment wins.
+        # What the provider later learned about the assessed account. confirmed_abuse, account_takeover and chargeback report abuse; false_positive and legitimate withdraw an earlier abuse report of this workspace for the assessment; unknown is recorded only. Outcomes are append-only and the latest one recorded for an assessment wins.
         field(
           :outcome,
           Models::Shared::Outcome,

data/lib/no_response/models/shared/assessmentquery.rb

@@ -9,13 +9,13 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Your own opaque identifier for the account being checked, scoped to your tenant. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
+        # Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
         field(
           :account_id,
           ::String,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("account_id"), required: true}}
         )
-        # next_cursor from the previous page, unchanged. Opaque, MAC'd and bound to the tenant and account_id.
+        # next_cursor from the previous page, unchanged. Opaque, MAC'd and bound to the workspace and account_id.
         field(
           :cursor,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/assessmentrequest.rb

@@ -4,18 +4,18 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/assessments body. At least one of email, username or phone is required; name and ip only refine an assessment. No field carries a password, hash, token or breach value, and unknown members are refused. The email local part is kept as received and only the domain is lower-cased; the username is compared case-insensitively; the phone is strict E.164 and is assessed asynchronously. The whole body is capped at 32768 bytes. client_context holds bounded hints from the signup client; auth_context holds normalised claims from a session your backend has verified. Raw tokens are refused.
+      # POST /v1/assessments body. At least one of email, username or phone is required; name and ip only refine an assessment. No field carries a password, hash, token or breach value, and unknown members are refused. The email local part is kept as received and only the domain is lower-cased; the username is compared case-insensitively; the phone is strict E.164 and is assessed asynchronously. The whole body is capped at 32768 bytes. client_context holds bounded hints from the client of the user; auth_context holds normalised claims from a session your backend has verified. Raw tokens are refused.
       class AssessmentRequest
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Your own opaque identifier for the account being checked, scoped to your tenant. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
+        # Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
         field(
           :account_id,
           ::String,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("account_id"), required: true}}
         )
-        # The customer event an assessment is made for: signup (a new account), login (a returning sign-in) or purchase (a payment or credit grant). The account's risk is reported with the decision for this flow.
+        # The event an assessment is made for: account_creation (a user creates an account), login (a user returns to an existing account) or purchase (a payment or a credit grant). The account's risk is reported with the decision for this flow.
         field(
           :flow,
           Models::Shared::Flow,
@@ -73,7 +73,7 @@ module NoResponse
             }
           }
         )
-        # Optional context observed by your signup client. The server parses these hints into coarse features, leaves raw user_agent and opaque ids out of every answer, and weighs a mismatch with the other evidence.
+        # Optional context observed by the client of the user. The server parses these hints into coarse features, leaves raw user_agent and opaque ids out of every answer, and weighs a mismatch with the other evidence.
         field(
           :client_context,
           Crystalline::Nilable.new(Models::Shared::AssessmentRequestClientContext),
@@ -85,7 +85,7 @@ module NoResponse
           Crystalline::Nilable.new(Models::Shared::AuthContext),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("auth_context")}}
         )
-        # Optional. When the signup gate issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
+        # Optional. When your platform issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
         field(
           :issued_credential,
           Crystalline::Nilable.new(Models::Shared::AssessmentRequestIssuedCredential),

data/lib/no_response/models/shared/assessmentrequestclientcontext.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Optional context observed by your signup client. The server parses these hints into coarse features, leaves raw user_agent and opaque ids out of every answer, and weighs a mismatch with the other evidence.
+      # Optional context observed by the client of the user. The server parses these hints into coarse features, leaves raw user_agent and opaque ids out of every answer, and weighs a mismatch with the other evidence.
       class AssessmentRequestClientContext
         extend T::Sig
         include Crystalline::MetadataFields
@@ -38,19 +38,19 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("app_version")}}
         )
-        # The raw User-Agent header of the signup request, at most 512 characters. It is parsed into coarse features and left out of every answer.
+        # The raw User-Agent header of the request that the user sent, at most 512 characters. It is parsed into coarse features and left out of every answer.
         field(
           :user_agent,
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("user_agent")}}
         )
-        # Tenant-scoped opaque identifier your application mints and rotates when the account or device changes. Send an id of your own, not a hardware fingerprint.
+        # Workspace-scoped opaque identifier your application mints and rotates when the account or device changes. Send an id of your own, not a hardware fingerprint.
         field(
           :device_id,
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("device_id")}}
         )
-        # Opaque signup session identifier. It is used for tenant-scoped velocity and replay checks only.
+        # Opaque signup session identifier. It is used for workspace-scoped velocity and replay checks only.
         field(
           :session_id,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/assessmentrequestidentifiers.rb

@@ -33,7 +33,7 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("name")}}
         )
-        # The signup's client IP address: an IPv4 dotted quad without leading zeros, or an IPv6 address in its RFC 5952 text form (lower case, no leading zeros, the longest zero run compressed). Send an IPv4 client as a dotted quad, not IPv4-mapped. No zone, port or prefix. The server refuses a non-canonical IPv6 spelling, and every private, loopback, link-local, multicast, documentation or otherwise reserved address (the IANA special-purpose registries), with 400: only a public address says anything about a signup.
+        # The account_creation's client IP address: an IPv4 dotted quad without leading zeros, or an IPv6 address in its RFC 5952 text form (lower case, no leading zeros, the longest zero run compressed). Send an IPv4 client as a dotted quad, not IPv4-mapped. No zone, port or prefix. The server refuses a non-canonical IPv6 spelling, and every private, loopback, link-local, multicast, documentation or otherwise reserved address (the IANA special-purpose registries), with 400: only a public address says anything about a signup.
         field(
           :ip,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/assessmentrequestissuedcredential.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Optional. When the signup gate issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
+      # Optional. When your platform issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
       class AssessmentRequestIssuedCredential
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/assessmentrequestpolicycontext.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # ISO 3166-1 alpha-2 region of the signup, as the provider determines it.
+        # ISO 3166-1 alpha-2 region of the user, as the provider determines it.
         field(
           :region,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/authcontext.rb

@@ -57,7 +57,7 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("organization_id")}}
         )
-        # The provider tenant identifier, when distinct from organization_id.
+        # The provider workspace identifier, when distinct from organization_id.
         field(
           :tenant_id,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/flow.rb

@@ -4,11 +4,11 @@
 module NoResponse
   module Models
     module Shared
-      # Flow - The customer event an assessment is made for: signup (a new account), login (a returning sign-in) or purchase (a payment or credit grant). The account's risk is reported with the decision for this flow.
+      # Flow - The event an assessment is made for: account_creation (a user creates an account), login (a user returns to an existing account) or purchase (a payment or a credit grant). The account's risk is reported with the decision for this flow.
       class Flow
         include ::Crystalline::Enum
         enums do
-          SIGNUP = new("signup")
+          ACCOUNT_CREATION = new("account_creation")
           LOGIN = new("login")
           PURCHASE = new("purchase")
         end

data/lib/no_response/models/shared/integration.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # Opaque, server-assigned integration id: int_ and a 26-character Crockford base32 ULID. Another tenant's integration id answers 404.
+        # Opaque, server-assigned integration id: int_ and a 26-character Crockford base32 ULID. Another workspace's integration id answers 404.
         field(
           :integration_id,
           ::String,

data/lib/no_response/models/shared/integrationlist.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # GET /v1/integrations: every integration of the tenant, oldest first, at most 10. No secret is ever listed.
+      # GET /v1/integrations: every integration of the workspace, oldest first, at most 10. No secret is ever listed.
       class IntegrationList
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/integrationrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/integrations body. Registers a hosted endpoint for one authentication provider. The tenant is the API key that signs the request, so the body has no tenant field and refuses one like any other unknown member. A WorkOS integration needs signing_secret, the Actions secret shown in the WorkOS dashboard, which NoResponse uses to verify each Action request and to sign its answer. An Auth0 integration sends no signing_secret: NoResponse generates the shared secret and returns it once.
+      # POST /v1/integrations body. Registers a hosted endpoint for one authentication provider. The workspace is the API key that signs the request, so the body has no workspace field and refuses one like any other unknown member. A WorkOS integration needs signing_secret, the Actions secret shown in the WorkOS dashboard, which NoResponse uses to verify each Action request and to sign its answer. An Auth0 integration sends no signing_secret: NoResponse generates the shared secret and returns it once.
       class IntegrationRequest
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/ipsummary.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Facts about the submitted IP from the offline database and this tenant's own recent assessments. Every member is optional; absent makes no claim.
+      # Facts about the submitted IP from the offline database and this workspace's own recent assessments. Every member is optional; absent makes no claim.
       class IpSummary
         extend T::Sig
         include Crystalline::MetadataFields
@@ -26,25 +26,25 @@ module NoResponse
             }
           }
         )
-        # Assessments in this tenant with the same IP in the last 24 hours, this one included. A count only.
+        # Assessments in this workspace with the same IP in the last 24 hours, this one included. A count only.
         field(
-          :seen_in_tenant,
+          :seen_in_workspace,
           Crystalline::Nilable.new(::Integer),
-          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("seen_in_tenant")}}
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("seen_in_workspace")}}
         )
 
         sig {
           params(
             country: T.nilable(::String),
             type: T.nilable(Models::Shared::IpSummaryType),
-            seen_in_tenant: T.nilable(::Integer)
+            seen_in_workspace: T.nilable(::Integer)
           )
             .void
         }
-        def initialize(country: nil, type: nil, seen_in_tenant: nil)
+        def initialize(country: nil, type: nil, seen_in_workspace: nil)
           @country = country
           @type = type
-          @seen_in_tenant = seen_in_tenant
+          @seen_in_workspace = seen_in_workspace
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -52,7 +52,7 @@ module NoResponse
           return false unless other.is_a?(self.class)
           return false unless @country == other.country
           return false unless @type == other.type
-          return false unless @seen_in_tenant == other.seen_in_tenant
+          return false unless @seen_in_workspace == other.seen_in_workspace
           true
         end
       end

data/lib/no_response/models/shared/ipsummary.rbi

@@ -18,9 +18,9 @@ class NoResponse::Models::Shared::IpSummary
   def type=(str_)
   end
 
-  def seen_in_tenant
+  def seen_in_workspace
   end
 
-  def seen_in_tenant=(str_)
+  def seen_in_workspace=(str_)
   end
 end

data/lib/no_response/models/shared/keyrotationrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/keys/rotate body. The tenant and the key being rotated are the API key that signs the request, so neither is a body member. An empty object takes the default overlap.
+      # POST /v1/keys/rotate body. The workspace and the key being rotated are the API key that signs the request, so neither is a body member. An empty object takes the default overlap.
       class KeyRotationRequest
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/keyusagebatchrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/key_usage/batches body: facts about requests made with API keys your signup gate issued to your accounts, one event per request. Each event names the key by the SHA-256 that the assessment's issued_credential.sha256 carried, not the key itself. The SDKs buffer events and send them in the background. A batch holds 1 to 500 events and at most 256 KiB. Idempotency-Key is required and binds the body as on POST /v1/assessments, so a retried batch is counted once.
+      # POST /v1/key_usage/batches body: facts about requests made with API keys your platform issued to your accounts, one event per request. Each event names the key by the SHA-256 that the assessment's issued_credential.sha256 carried, not the key itself. The SDKs buffer events and send them in the background. A batch holds 1 to 500 events and at most 256 KiB. Idempotency-Key is required and binds the body as on POST /v1/assessments, so a retried batch is counted once.
       class KeyUsageBatchRequest
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/outcome.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Outcome - What the provider later learned about the assessed account. confirmed_abuse, account_takeover and chargeback report abuse; false_positive and legitimate withdraw an earlier abuse report of this tenant for the assessment; unknown is recorded only. Outcomes are append-only and the latest one recorded for an assessment wins.
+      # Outcome - What the provider later learned about the assessed account. confirmed_abuse, account_takeover and chargeback report abuse; false_positive and legitimate withdraw an earlier abuse report of this workspace for the assessment; unknown is recorded only. Outcomes are append-only and the latest one recorded for an assessment wins.
       class Outcome
         include ::Crystalline::Enum
         enums do

data/lib/no_response/models/shared/permissiondeniederrorcode.rb

@@ -8,7 +8,7 @@ module NoResponse
       class PermissionDeniedErrorCode
         include ::Crystalline::Enum
         enums do
-          TENANT_FORBIDDEN = new("tenant_forbidden")
+          WORKSPACE_FORBIDDEN = new("workspace_forbidden")
         end
 
         open!

data/lib/no_response/models/shared/reasoncode.rb

@@ -19,7 +19,7 @@ module NoResponse
           PROXY_IP = new("proxy_ip")
           SEEN_BEFORE = new("seen_before")
           SHARED_IP = new("shared_ip")
-          MANY_RECENT_SIGNUPS = new("many_recent_signups")
+          MANY_RECENT_ACCOUNTS = new("many_recent_accounts")
           ESTABLISHED_ACCOUNTS = new("established_accounts")
           AGED_IDENTITY = new("aged_identity")
           BREACH_NAME_MATCH = new("breach_name_match")

data/lib/no_response/models/shared/risk.rb

@@ -50,7 +50,7 @@ module NoResponse
             }
           }
         )
-        # Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A tenant threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
+        # Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A workspace threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
         field(
           :policy_version,
           ::String,
@@ -68,13 +68,13 @@ module NoResponse
           Models::Shared::RiskCoverage,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("coverage"), required: true}}
         )
-        # true when the tenant's block threshold is set and score reached it. A provider hook can deny the signup on it; the provider decides and enforces. It does not change recommendation. It is false while blocking is off, the default, and a body from before the flag existed omits it: read absent as false.
+        # true when the workspace's block threshold is set and score reached it. A provider hook can deny the account creation on it; the provider decides and enforces. It does not change recommendation. It is false while blocking is off, the default, and a body from before the flag existed omits it: read absent as false.
         field(
           :block,
           Crystalline::Nilable.new(Crystalline::Boolean.new),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("block")}}
         )
-        # The block threshold this answer used: block is true exactly when score is at least this value. Absent while blocking is off. NoResponse sets it per tenant on request, at or above the review threshold.
+        # The block threshold this answer used: block is true exactly when score is at least this value. Absent while blocking is off. NoResponse sets it per workspace on request, at or above the review threshold.
         field(
           :block_threshold,
           Crystalline::Nilable.new(::Integer),

data/lib/no_response/models/shared/risksummary.rb

@@ -26,7 +26,7 @@ module NoResponse
           Crystalline::Nilable.new(Models::Shared::RiskSummaryUsername),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("username")}}
         )
-        # Facts about the submitted IP from the offline database and this tenant's own recent assessments. Every member is optional; absent makes no claim.
+        # Facts about the submitted IP from the offline database and this workspace's own recent assessments. Every member is optional; absent makes no claim.
         field(
           :ip,
           Crystalline::Nilable.new(Models::Shared::IpSummary),

data/lib/no_response/models/shared/signal.rb

@@ -35,7 +35,7 @@ module NoResponse
             }
           }
         )
-        # Opaque, tenant-scoped projection of the source that produced a signal. It stays stable for your tenant while the projection key is unchanged and reveals no upstream provider, feed, breach table or source record.
+        # Opaque, workspace-scoped projection of the source that produced a signal. It stays stable for your workspace while the projection key is unchanged and reveals no upstream provider, feed, breach table or source record.
         field(
           :source_id,
           ::String,

data/lib/no_response/models/shared/webhookdeliverylist.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # The 200 answer of GET /v1/webhooks/{endpoint_id}/deliveries: one page of the endpoint's delivery attempts, newest first. Each item is one POST to the endpoint. Attempts are kept for 30 days, or the tenant's retention_days when that is shorter, and are deleted with the assessment they carried. next_cursor is present only when another page exists.
+      # The 200 answer of GET /v1/webhooks/{endpoint_id}/deliveries: one page of the endpoint's delivery attempts, newest first. Each item is one POST to the endpoint. Attempts are kept for 30 days, or the workspace's retention_days when that is shorter, and are deleted with the assessment they carried. next_cursor is present only when another page exists.
       class WebhookDeliveryList
         extend T::Sig
         include Crystalline::MetadataFields
@@ -21,7 +21,7 @@ module NoResponse
           Crystalline::Array.new(Models::Shared::WebhookDeliveryAttempt),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("items"), required: true}}
         )
-        # Opaque cursor for the next page, MAC'd by the server and bound to the tenant and endpoint it was issued for. Pass it back unchanged as cursor; a tampered, foreign or expired cursor answers 400 invalid_cursor.
+        # Opaque cursor for the next page, MAC'd by the server and bound to the workspace and endpoint it was issued for. Pass it back unchanged as cursor; a tampered, foreign or expired cursor answers 400 invalid_cursor.
         field(
           :next_cursor,
           Crystalline::Nilable.new(::String),

data/lib/no_response/models/shared/webhookendpoint.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # One of the tenant's registered webhook endpoints. Signing secrets are not part of it: a secret is shown once, when it is issued (POST /v1/webhooks and POST /v1/webhooks/{endpoint_id}/rotate).
+      # One of the workspace's registered webhook endpoints. Signing secrets are not part of it: a secret is shown once, when it is issued (POST /v1/webhooks and POST /v1/webhooks/{endpoint_id}/rotate).
       class WebhookEndpoint
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/webhookendpointcreated.rb

@@ -9,7 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
-        # One of the tenant's registered webhook endpoints. Signing secrets are not part of it: a secret is shown once, when it is issued (POST /v1/webhooks and POST /v1/webhooks/{endpoint_id}/rotate).
+        # One of the workspace's registered webhook endpoints. Signing secrets are not part of it: a secret is shown once, when it is issued (POST /v1/webhooks and POST /v1/webhooks/{endpoint_id}/rotate).
         field(
           :endpoint,
           Models::Shared::WebhookEndpoint,

data/lib/no_response/models/shared/webhookendpointlist.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # GET /v1/webhooks answer: every endpoint of the calling tenant, in every state, ordered by endpoint_id. A tenant holds at most 5, so there is no page.
+      # GET /v1/webhooks answer: every endpoint of the calling workspace, in every state, ordered by endpoint_id. A workspace holds at most 5, so there is no page.
       class WebhookEndpointList
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/models/shared/webhookendpointrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # POST /v1/webhooks body. The tenant is the API key that signs the request, so it is not a body member. The URL must be https on port 443 or 8443 with a DNS name, not an IP literal, and every address the name resolves to must be public.
+      # POST /v1/webhooks body. The workspace is the API key that signs the request, so it is not a body member. The URL must be https on port 443 or 8443 with a DNS name, not an IP literal, and every address the name resolves to must be public.
       class WebhookEndpointRequest
         extend T::Sig
         include Crystalline::MetadataFields

data/lib/no_response/sdkconfiguration.rb

@@ -95,9 +95,9 @@ module NoResponse
 
       @language = "ruby"
       @openapi_doc_version = "1"
-      @sdk_version = "4.0.1"
+      @sdk_version = "5.0.0"
       @gen_version = "internal"
-      @user_agent = "noresponse-sdk/ruby 4.0.1 internal 1 noresponse"
+      @user_agent = "noresponse-sdk/ruby 5.0.0 internal 1 noresponse"
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

data/lib/no_response/webhookendpoints.rb

@@ -47,7 +47,7 @@ module NoResponse
         .returns(Models::Operations::ListWebhookEndpointsResponse)
     }
     def list(retries: nil, timeout_ms: nil, http_headers: nil)
-      # list - List the tenant's webhook endpoints.
+      # list - List the workspace's webhook endpoints.
       # Lists your webhook endpoints in every state, ordered by endpoint_id, with the ids of their signing keys and without secrets. Requires the webhooks scope.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
@@ -1455,7 +1455,7 @@ module NoResponse
     }
     def list_deliveries(endpoint_id:, limit: nil, cursor: nil, retries: nil, timeout_ms: nil, http_headers: nil)
       # list_deliveries - List an endpoint's delivery attempts.
-      # Every POST the endpoint received, newest first: the event id and type, which attempt it was, whether it was a replay, delivered or failed, the response code, why it failed and how long it took. Attempts are kept for 30 days, or your retention_days when that is shorter, and are deleted with the assessment they carried. Requires the webhooks scope. Read-only and safe to retry. The cursor is opaque and bound to your tenant and the endpoint; a tampered or expired cursor answers 400 invalid_cursor.
+      # Every POST the endpoint received, newest first: the event id and type, which attempt it was, whether it was a replay, delivered or failed, the response code, why it failed and how long it took. Attempts are kept for 30 days, or your retention_days when that is shorter, and are deleted with the assessment they carried. Requires the webhooks scope. Read-only and safe to retry. The cursor is opaque and bound to your workspace and the endpoint; a tampered or expired cursor answers 400 invalid_cursor.
       request = Models::Operations::ListWebhookDeliveriesRequest.new(
         endpoint_id: endpoint_id,
         limit: limit,

data/lib/no_response/webhooks.rb

@@ -53,7 +53,7 @@ module NoResponse
 
     # The workspace was deleted. Sent once per environment ("live" or "test")
     # before its endpoints are torn down: the last event this endpoint receives.
-    TenantDeleted = Struct.new(:workspace_id, :environment, :deleted_at, keyword_init: true)
+    WorkspaceDeleted = Struct.new(:workspace_id, :environment, :deleted_at, keyword_init: true)
 
     # Another endpoint of this environment was disabled after failing
     # continuously for 72 hours, since failing_since. It receives nothing more
@@ -72,7 +72,7 @@ module NoResponse
     # assessments.get returns it) or an AssessmentExpired for type
     # "assessment.updated", an EndpointVerification for
     # "endpoint.verification", an AccountDeleted for "account.deleted", a
-    # TenantDeleted for "tenant.deleted", an EndpointDisabled for
+    # WorkspaceDeleted for "workspace.deleted", an EndpointDisabled for
     # "webhook_endpoint.disabled" and an AccountRiskChanged for
     # "account.risk_changed". Deliveries are at least once and unordered:
     # deduplicate on id and keep the highest detail.assessment_version.
@@ -183,8 +183,8 @@ module NoResponse
           end
         when 'account.deleted'
           account_deleted(data)
-        when 'tenant.deleted'
-          tenant_deleted(data)
+        when 'workspace.deleted'
+          workspace_deleted(data)
         when 'webhook_endpoint.disabled'
           endpoint_disabled(data)
         when 'account.risk_changed'
@@ -216,15 +216,15 @@ module NoResponse
                            deleted_at: data['deleted_at'])
       end
 
-      def tenant_deleted(data)
+      def workspace_deleted(data)
         unless data['workspace_id'].is_a?(String) && WORKSPACE_ID.match?(data['workspace_id']) &&
                %w[live test].include?(data['environment']) &&
                data['deleted_at'].is_a?(String) && valid_datetime?(data['deleted_at'])
-          raise VerificationError.new(:invalid_payload, 'Tenant deleted event is malformed')
+          raise VerificationError.new(:invalid_payload, 'Workspace deleted event is malformed')
         end
 
-        TenantDeleted.new(workspace_id: data['workspace_id'], environment: data['environment'],
-                          deleted_at: data['deleted_at'])
+        WorkspaceDeleted.new(workspace_id: data['workspace_id'], environment: data['environment'],
+                             deleted_at: data['deleted_at'])
       end
 
       def endpoint_disabled(data)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: noresponse
 version: !ruby/object:Gem::Version
-  version: 4.0.1
+  version: 5.0.0
 platform: ruby
 authors:
 - NoResponse