OpenTelemetry Attributes

Complete reference for all span attributes and metrics emitted by the aip-otel-exporter. These attributes follow OpenTelemetry Semantic Conventions for span naming and attribute structure. All spans are SpanKind.INTERNAL, created as children of the currently active span. String attribute values longer than 4096 characters are truncated (suffixed [truncated]). An attribute whose value is undefined/null is omitted from the span entirely rather than sent as an empty value — so the presence/absence of an attribute is itself signal.

Span attributes

`aip.integrity_check` — 31 domain attributes + 2 GenAI SIG aliases + 3 GenAI SemConv / role attributes

The primary span for AIP integrity checkpoint results.

Attribute	Type	Source	Description
`aip.integrity.checkpoint_id`	string	checkpoint	Unique checkpoint identifier
`aip.integrity.verdict`	string	checkpoint	`clear`, `review_needed`, or `boundary_violation`
`aip.integrity.agent_id`	string	checkpoint	Agent identifier
`aip.integrity.card_id`	string	checkpoint	Alignment Card identifier
`aip.integrity.session_id`	string	checkpoint	Session identifier
`aip.integrity.thinking_hash`	string	checkpoint	SHA-256 hash of the thinking block
`aip.integrity.proceed`	boolean	signal	Whether the agent should proceed
`aip.integrity.recommended_action`	string	signal	`continue`, `log_and_continue`, `pause_for_review`, or `deny_and_escalate`
`aip.integrity.concerns_count`	int	signal	Number of concerns detected
`aip.integrity.analysis_model`	string	analysis_metadata	Model used for integrity analysis (the AIP verifier model, e.g. Haiku — distinct from `gen_ai.request.model` below)
`aip.integrity.analysis_duration_ms`	float	analysis_metadata	Analysis duration in milliseconds
`aip.integrity.thinking_tokens`	int	analysis_metadata	Token count of the thinking block
`aip.integrity.truncated`	boolean	analysis_metadata	Whether the thinking block was truncated
`aip.integrity.extraction_confidence`	float	analysis_metadata	Confidence in thinking block extraction
`aip.conscience.consultation_depth`	string	conscience_context	`standard` or `deep` conscience evaluation
`aip.conscience.values_checked_count`	int	conscience_context	Number of values evaluated
`aip.conscience.conflicts_count`	int	conscience_context	Number of value conflicts detected
`aip.attestation.input_commitment`	string	attestation	Commitment hash over the checkpoint’s input
`aip.attestation.chain_hash`	string	attestation	Hash-chain link to the prior checkpoint’s attestation
`aip.attestation.merkle_root`	string	attestation	Merkle root covering this checkpoint’s attestation batch
`aip.attestation.signature_verified`	boolean	attestation	Whether the attestation signature verified
`aip.attestation.certificate_id`	string	attestation	Linked integrity certificate identifier
`aip.attestation.zk_proven`	boolean	attestation	Whether a zero-knowledge proof was produced for this checkpoint
`aip.attestation.zk_proof_time_ms`	float	attestation	ZK proof generation time in milliseconds
`aip.window.size`	int	window_summary	Number of checkpoints in the rolling window
`aip.window.integrity_ratio`	float	window_summary	Ratio of `clear` verdicts (0.0-1.0)
`aip.window.drift_alert_active`	boolean	window_summary	Whether a drift alert is currently active
`aip.integrity.output_hash`	string	output_analysis	SHA-256 hash of the analyzed output block
`aip.integrity.output_tokens`	int	output_analysis	Token count of the analyzed output
`aip.integrity.output_truncated`	boolean	output_analysis	Whether the output block was truncated before analysis
`aip.integrity.analysis_scope`	string	output_analysis	What was analyzed (e.g. thinking-only vs. thinking+output)
`gen_ai.evaluation.verdict`	string	GenAI SIG alias	Forward-compatible alias for `aip.integrity.verdict`
`gen_ai.evaluation.score`	float	GenAI SIG alias	Forward-compatible alias for `aip.window.integrity_ratio`
`gen_ai.system`	string	checkpoint	Upstream LLM provider (`anthropic`/`openai`/`gemini`) whose response this checkpoint analyzed — distinct from `aip.integrity.analysis_model` (the verifier)
`gen_ai.request.model`	string	checkpoint	The customer’s upstream model name
`mnemom.span.role`	string	signal	`"customer"` (default), `"verifier"`, or `"harness"` — filter to `customer` for per-provider customer SLOs; verifier-internal and harness traffic also emit this span

Events emitted on this span:

aip.concern — One event per concern detected. Attributes: category, severity, description.
aip.drift_alert — Emitted (with no event attributes) when the window summary’s drift_alert_active is true. The drift detail lives on the separate aap.detect_drift span’s aap.drift_alert events (below), not on this one.

`aap.verify_trace` — 8 attributes

Span for AAP trace verification results.

Attribute	Type	Description
`aap.verification.result`	boolean	Whether the trace passed verification
`aap.verification.similarity_score`	float	Similarity score between trace and card
`aap.verification.violations_count`	int	Number of violations detected
`aap.verification.warnings_count`	int	Number of warnings detected
`aap.verification.trace_id`	string	AP-Trace identifier
`aap.verification.card_id`	string	Alignment Card identifier
`aap.verification.duration_ms`	float	Verification duration in milliseconds
`aap.verification.checks_performed`	string	Comma-separated list of checks performed

Events emitted on this span:

aap.violation — One event per violation. Attributes: type, severity, description.

`aap.check_coherence` — 5 attributes

Span for AAP value coherence check results (used in multi-agent coordination).

Attribute	Type	Description
`aap.coherence.compatible`	boolean	Whether the agents are value-compatible
`aap.coherence.score`	float	Coherence score (0.0-1.0)
`aap.coherence.proceed`	boolean	Whether coordination should proceed
`aap.coherence.matched_count`	int	Number of matched values
`aap.coherence.conflict_count`	int	Number of conflicting values

`aap.detect_drift` — 2 attributes

Span for AAP behavioral drift detection results.

Attribute	Type	Description
`aap.drift.alerts_count`	int	Number of drift alerts generated
`aap.drift.traces_analyzed`	int	Number of traces analyzed for drift

Events emitted on this span:

aap.drift_alert — One event per alert. Attributes (each present only when the underlying alert carries it): alert_type, agent_id, card_id, similarity_score, drift_direction, recommendation.

`policy.evaluate` — 13 attributes

Span for policy evaluation results. Created when the Policy Engine evaluates a request against the active policy.

Attribute	Type	Source	Description
`policy.agent_id`	string	input	Agent being evaluated
`policy.policy_id`	string	policy	Policy identifier
`policy.policy_version`	int	policy	Policy version number
`policy.verdict`	string	result	Evaluation verdict: `pass`, `warn`, `fail`
`policy.violations_count`	int	result	Number of violations detected
`policy.warnings_count`	int	result	Number of warnings detected
`policy.coverage_pct`	float	result	Percentage of card actions mapped by policy
`policy.context`	string	input	Evaluation context: `cicd`, `gateway`, `observer`
`policy.duration_ms`	float	measured	Evaluation duration in milliseconds
`policy.enforcement_mode`	string	policy	Active enforcement mode: `warn`, `enforce`, `off`
`gen_ai.system`	string	input	Upstream LLM provider, for per-provider SLO rollups
`gen_ai.request.model`	string	input	Upstream model name
`mnemom.span.role`	string	input	`"customer"` (default), `"verifier"`, or `"harness"`

Events emitted on this span:

policy.violation — One event per violation. Attributes: type (forbidden/capability_exceeded/unmapped_denied), severity, reason, and tool (present only when the violation names a specific tool).

`gen_ai.safety.reclassification` — 8 attributes

Span for violation reclassification. Created when a checkpoint is reclassified via the Reclassification API. Note the span (and every attribute on it) lives under the gen_ai.safety.reclassification.* namespace, not a reclassification.* one.

Attribute	Type	Description
`gen_ai.safety.reclassification.agent_id`	string	Agent whose violation is reclassified
`gen_ai.safety.reclassification.checkpoint_id`	string	Checkpoint being reclassified
`gen_ai.safety.reclassification.trace_id`	string	Associated AP-Trace identifier
`gen_ai.safety.reclassification.before_verdict`	string	The verdict/classification before reclassification
`gen_ai.safety.reclassification.after_classification`	string	New classification: `card_gap` or `behavior_gap`
`gen_ai.safety.reclassification.reason`	string	Human-provided reclassification reason
`gen_ai.safety.reclassification.score_before`	int	Agent score before reclassification
`gen_ai.safety.reclassification.score_after`	int	Agent score after recomputation

This span emits no events.

`safe_house.sideband.finding` — 3-6 attributes

Span for a sideband detector firing (coherence / fault-line / fleet cron sweeps). source, axis, and finding_count are always present (defaulting finding_count to 0); the rest are present only when the finding carries them.

Attribute	Type	Description
`safe_house.sideband.source`	string	Closed-but-extensible source value, e.g. `sideband.coherence`
`safe_house.sideband.axis`	string	The detector axis (defaults to the last dot-segment of `source`)
`safe_house.sideband.finding_count`	int	Number of rows the detector wrote on this firing
`safe_house.sideband.team_id`	string	Team the detector swept (absent for non-team-scoped sources)
`safe_house.sideband.severity`	string	`low \| medium \| high \| critical`
`safe_house.sideband.pattern_type`	string	Free-form discriminator for the firing condition within the axis

Events emitted on this span:

safe_house.sideband.finding — One event, mirroring the span’s own attributes (source, axis, and whichever of team_id/severity/pattern_type/finding_count are present).

Span hierarchy

Spans are created as children of the current active span via context.active():

your_application_span
  ├── aip.integrity_check
  │    ├── event: aip.concern (one per concern)
  │    └── event: aip.drift_alert (when window drift is active)
  ├── policy.evaluate
  │    └── event: policy.violation (one per violation)
  ├── gen_ai.safety.reclassification
  ├── aap.verify_trace
  │    └── event: aap.violation (one per violation)
  ├── aap.check_coherence
  ├── aap.detect_drift
  │    └── event: aap.drift_alert (one per alert)
  └── safe_house.sideband.finding
       └── event: safe_house.sideband.finding

Metrics

9 metric instruments for aggregate monitoring, created by createAIPMetrics(). There is no separate metrics API for policy evaluation, reclassification, or sideband findings today — those three are span/event-only (§Span attributes above); aggregate them from spans if you need counters.

AIP metrics

Metric	Type	Labels	Description
`aip.integrity_checks.total`	Counter	`verdict`, `agent_id`?	Total number of integrity checks performed
`aip.concerns.total`	Counter	`category`, `severity`, `verdict`, `agent_id`?	Total number of concerns detected
`aip.analysis.duration_ms`	Histogram	`verdict`, `agent_id`?	Distribution of analysis durations
`aip.window.integrity_ratio`	Histogram	`verdict`, `agent_id`?	Distribution of integrity ratios across windows
`aip.drift_alerts.total`	Counter	`verdict`, `agent_id`? (from the integrity-check path) or `drift_direction`, `agent_id` (from the AAP drift path)	Total number of drift alerts generated — this single counter is fed from two different recorders, so its label set depends on which one incremented it

AAP metrics

Metric	Type	Labels	Description
`aap.verifications.total`	Counter	`verified`, `card_id`?	Total number of trace verifications
`aap.violations.total`	Counter	`type`, `severity`	Total number of violations detected
`aap.verification.duration_ms`	Histogram	`verified`, `card_id`?	Distribution of verification durations
`aap.coherence.score`	Histogram	`compatible`	Distribution of coherence scores

? marks a label that is only attached when the underlying value is present.

GenAI SIG forward compatibility

The exporter includes forward-compatible aliases that track the emerging OTel GenAI SIG conventions for AI/ML observability:

GenAI SIG Attribute	Maps To	Description
`gen_ai.evaluation.verdict`	`aip.integrity.verdict`	Standardized evaluation verdict
`gen_ai.evaluation.score`	`aip.window.integrity_ratio`	Standardized evaluation score

These aliases are emitted alongside the aip.* attributes on every aip.integrity_check span, ensuring forward compatibility as the OTel GenAI SIG conventions stabilize.

Upstream-provider attribution and span role

Two further OTel GenAI SemConv attributes, plus one Mnemom-specific one, are emitted on aip.integrity_check and policy.evaluate spans:

Attribute	Description
`gen_ai.system`	The customer’s upstream LLM provider (`anthropic` / `openai` / `gemini`) whose response this span analyzed. Distinct from `aip.integrity.analysis_model`, which names the AIP verifier model (Haiku) — not the customer’s model.
`gen_ai.request.model`	The customer’s upstream model name.
`mnemom.span.role`	`"customer"` (default), `"verifier"`, or `"harness"`. The AIP verifier itself emits `aip.integrity_check` spans, tagged with the verifier’s `gen_ai.system` if you don’t filter — so per-provider customer SLOs must filter on `mnemom.span.role = "customer"` to exclude verifier-internal and harness traffic.

Dashboard templates

Pre-built Grafana and Datadog dashboards that consume these attributes and metrics are available in the aip-otel-exporter repository:

grafana-aip-overview.json — Fleet-wide integrity monitoring using aip.integrity_checks.total, aip.concerns.total, and aip.window.integrity_ratio
grafana-aip-detail.json — Per-agent deep-dive using all aip.integrity.* span attributes
datadog-aip-overview.json — Datadog importable dashboard

Overview

Identity & Cards

Posture & Policy

Detection & Safe House

AEGIS

Reputation & Risk

Lifecycle

Gateway

Pricing

Policy

Specifications

Changelog

OpenTelemetry Attributes

Span attributes

`aip.integrity_check` — 31 domain attributes + 2 GenAI SIG aliases + 3 GenAI SemConv / role attributes

`aap.verify_trace` — 8 attributes

`aap.check_coherence` — 5 attributes

`aap.detect_drift` — 2 attributes

`policy.evaluate` — 13 attributes

`gen_ai.safety.reclassification` — 8 attributes

`safe_house.sideband.finding` — 3-6 attributes

Span hierarchy

Metrics

AIP metrics

AAP metrics

GenAI SIG forward compatibility

Upstream-provider attribution and span role

Dashboard templates

See also

​Span attributes

​aip.integrity_check — 31 domain attributes + 2 GenAI SIG aliases + 3 GenAI SemConv / role attributes

​aap.verify_trace — 8 attributes

​aap.check_coherence — 5 attributes

​aap.detect_drift — 2 attributes

​policy.evaluate — 13 attributes

​gen_ai.safety.reclassification — 8 attributes

​safe_house.sideband.finding — 3-6 attributes

​Span hierarchy

​Metrics

​AIP metrics

​AAP metrics

​GenAI SIG forward compatibility

​Upstream-provider attribution and span role

​Dashboard templates

​See also

Span attributes

`aip.integrity_check` — 31 domain attributes + 2 GenAI SIG aliases + 3 GenAI SemConv / role attributes

`aap.verify_trace` — 8 attributes

`aap.check_coherence` — 5 attributes

`aap.detect_drift` — 2 attributes

`policy.evaluate` — 13 attributes

`gen_ai.safety.reclassification` — 8 attributes

`safe_house.sideband.finding` — 3-6 attributes

Span hierarchy

Metrics

AIP metrics

AAP metrics

GenAI SIG forward compatibility

Upstream-provider attribution and span role

Dashboard templates

See also