User-visible messages
Every failure message the product can show, by surface, with the id to quote when you report it.
- Type: reference
Every failure message CID222 can show you. Each one is either mapped to the runbook that
resolves it or recorded as needing no action, and neither state is optional — a message that
is in neither fails the documentation build. Regenerate with make docs-generate.
Ids are stable across rewording of variables and across file moves, and change when the sentence changes. A changed sentence therefore needs a fresh mapping decision, by design.
| Surface | Messages | Harvested from |
|---|---|---|
| Gateway API (HTTP exceptions and validation) | 354 | gw-* |
| First-boot setup wizard | 15 | setup-* |
| Dashboard (English UI strings) | 222 | dash-* |
| ISO / OVA installer and first-boot scripts | 51 | iso-* |
| Host agent and offline updater | 28 | host-* |
Gateway API (HTTP exceptions and validation) (354)
| Id | Message |
|---|---|
gw-0181ec03 | EDL token required |
gw-01cd717e | Red-team model '${…}' is restricted to admin users |
gw-01ddb018 | Sync scope "${…}" is mapped to a CID tenant group (${…}) that no longer exists. Re-point the scope at an existing group, or clear the mapping, then sync again. |
gw-02e8c892 | The directory server could not be reached, so directory sign-in is temporarily unavailable. This is not a problem with your password. Local accounts are unaffected. |
gw-02fd9351 | Webhook payload too large |
gw-05d0d9cb | Failed to render simulator PDF: ${…} |
gw-075c3d18 | Analysis has no decision to reopen |
gw-07e3076a | Filter group with ID ${…} not found |
gw-081b2642 | Risk analysis ${…} not found |
gw-0876d4f1 | The renderer did not report which identifiers it laid out (X-Rendered-Ids), so the document was never compared against the record. An unchecked report is not a passed one. |
gw-08877c74 | Failed to render compliance scorecard PDF: ${…} |
gw-08db2b21 | Benchmark run not found |
gw-095f0a60 | EDL token with ID ${…} not found |
gw-098ac412 | Tenant group ${…} not found |
gw-09ea7dd9 | Endpoint resolves to a link-local or instance-metadata address, which is not a valid provider. |
gw-0a045cdb | No file uploaded (expected multipart field "file") |
gw-0a57903d | Clone URL must be ssh (git@host:org/repo.git), ssh://, git:// or https://. |
gw-0affbff4 | Invalid credentials |
gw-0b077532 | Member not found in this group |
gw-0bac0755 | Invalid expires_at: ${…} |
gw-0bd9c4fc | Review ${…} is ${…}; only a completed review holds an analysis to promote |
gw-0cda680c | Coverage floor for ${…} must be a percentage between 0 and 100 |
gw-0f6553b0 | Unknown detection id |
gw-10a3ffbb | Expected an object of governance policy settings. |
gw-11ceb778 | Failed to get benchmark status |
gw-138470c6 | tactic must be an ATLAS id such as AML.TA0002 |
gw-15ab4acb | header "${…}" must be a string of at most 2000 characters |
gw-161dbeee | Image size exceeds maximum allowed size of 10MB |
gw-18040453 | $property must be an ISO-8601 date, e.g. 2026-09-01 or 2026-09-01T13:45:00Z |
gw-1822a5a4 | New password must be at least 8 characters |
gw-183cfe76 | Unknown help setting(s): ${…}. Settable keys are: ${…}. |
gw-184a814d | license is already expired |
gw-1877389d | generic_git connector needs base_url set to the clone URL |
gw-19dc4211 | scope must be { type: 'tenant' | 'tenant_group', id: <uuid> } |
gw-19f44547 | due_date must be YYYY-MM-DD |
gw-1a4ff751 | This server has no persistent JWT_SECRET, so an authenticator secret stored now would be unreadable after a restart. Set JWT_SECRET and retry. |
gw-1b1621e0 | Attestation rejected |
gw-1c199965 | Document analysis service is not enabled |
gw-1ca75c72 | Sync scope "${…}" would assign the role "${…}", which cannot be granted from a directory scope. Set it to one of: ${…}. |
gw-1e77b396 | Endpoint is not a valid URL: ${…} |
gw-1edcb594 | Unlock request ${…} not found |
gw-1ee1cb2b | start_date must be before end_date |
gw-1f7b907e | incomplete upload: have ${…} of ${…} bytes |
gw-1fdb90c4 | Finding not found |
gw-2138c28a | Too many incorrect codes. Sign in again. |
gw-21c4a74e | The model returned a filter with no patterns. Try describing the format more concretely, e.g. "IDs look like PER-2024-12345". |
gw-22b07d8d | chain contains a certificate that does not parse |
gw-25038980 | config.host is required |
gw-26f9ef06 | That code is not right. Check your authenticator app and retry. |
gw-278ac6e7 | This installation requires two-factor sign-in for your account, so it cannot be turned off. |
gw-284ca799 | Risk analysis with ID ${…} not found |
gw-2a430b6b | Enforcing a ${…}-day window on SECURITY would delete detection evidence inside the six-month minimum the AI Act sets for deployers. Use 0 to disable the sweep for this category instead. |
gw-2ac93a44 | The document is ${…} characters; the maximum is ${…}. Trim it to the privacy/data-handling sections. |
gw-2c27e502 | Too many help requests, please try again in a few minutes. |
gw-2c992201 | the certificate has no subjectAltName; browsers reject certificates without one |
gw-2fcb3f09 | default_min_coverage_pct must be a percentage between 0 and 100 |
gw-304f956b | the private key does not match the certificate |
gw-30df93d5 | Failed to render impact PDF: ${…} |
gw-32d68e1f | Filter override ${…} not found |
gw-32e37ae0 | Input filter with nickname '${…}' not found |
gw-33b1898f | config.protocol must be one of ${…} |
gw-346014d5 | Invalid Anthropic API key |
gw-36367b7c | API key token quota exceeded |
gw-36457f49 | Fleet ${…} not found |
gw-36795c0f | deviceId is required |
gw-38e68b34 | Document rejected due to policy violation: ${…} |
gw-39c12f73 | This sign-in session has ended. Sign in again. |
gw-3aeba127 | The risk analyst service is not enabled on this deployment. |
gw-3ba7b3da | publicKeyJwk must be a P-256 EC public key without a private scalar |
gw-3ca8e06b | Failed to retrieve supported types |
gw-3dbd877e | Session not found |
gw-3e36d314 | Invalid API key |
gw-3eb7c37e | Could not generate a filter draft: ${…} |
gw-3f124695 | Cannot change the OCR engine while the OCR service is unreachable: ${…} |
gw-408d7069 | invalid request id |
gw-41c22b99 | '${…}' must be one of: ${…}. |
gw-41c95360 | ${…} is not an OWASP id (LLM01:2026, ASI01:2026, ASI.T1:1.1, ML01:2023, AIX.<slug> or LLM-CANDIDATE.<slug>:2026) |
gw-41df647c | A read-only demo account cannot download signed licence files. |
gw-41e514f1 | Knowledge entry ${…} already exists; give this promotion its own id |
gw-42a89eef | Chat provider '${…}' is not supported |
gw-42df70b3 | Pattern with ID ${…} not found |
gw-43461c45 | No analysis with that progress id |
gw-4354f242 | GitHub App connector needs both app_id and private_key_pem |
gw-4452b017 | None of the specified test case IDs match active test cases |
gw-44bf875b | Issued token carries no expiry |
gw-4572dd17 | Input filter '${…}' version '${…}' not found |
gw-4609385d | Knowledge entry ${…} already exists |
gw-465d9617 | Fleet policy is missing required fields (selectivity, failMode) |
gw-46c9d58e | API key with ID ${…} not found |
gw-477732cc | Page access was changed by someone else while this screen was open. Reload to see their change before saving yours. |
gw-4840a13e | not a PEM certificate |
gw-489aadde | Invalid or expired API key |
gw-4a3e0797 | names must be an array of hostnames or IPv4 addresses |
gw-4a8397a5 | This request is missing the CSRF token that pairs with the session cookie. |
gw-4b0c5988 | Provisioning is not configured |
gw-4b8b38a9 | No completed scan for this repository yet — check the event log |
gw-4d3e1b1a | Document processing failed: ${…} |
gw-4d5cf37d | Filter group "${…}" still contains ${…} filter(s): ${…}. Delete them first, or repeat this request with ?cascade=true to remove them together. |
gw-4d7faf5b | Too many requests, please try again later. |
gw-4db8c48e | Conversation ${…} not found |
gw-4ec6c553 | Model '${…}' is not active |
gw-4fa98b12 | Unknown role: ${…} |
gw-51771d69 | Only a superadmin may change the appliance-wide detection escalation policy |
gw-51abd065 | No OWASP object ${…} in any loaded snapshot |
gw-52fb7b51 | Unsupported file type ".${…}". Upload a PDF, DOCX or TXT. |
gw-539f6778 | API key is not active |
gw-5445d4e7 | User not found |
gw-5467a7ba | config.port must be 1-65535 |
gw-560dd7f9 | An unlock request is already pending for this lock |
gw-562066d2 | Scope belongs to a group you cannot read |
gw-57ca0252 | Rate for ${…} must be a positive number |
gw-59b293d8 | Missing or invalid authorization header |
gw-5ae7ee36 | no CSR is pending — generate one first |
gw-5b5f5984 | Please provide a valid email address |
gw-5bd0dfad | This sign-in attempt expired. Sign in again. |
gw-5c0d6e34 | A test group with this name already exists |
gw-5c479b1d | Leave the host URL blank for github.com — it is only for GitHub Enterprise Server. |
gw-5f863ae1 | Endpoint must use http or https, got "${…}" |
gw-5fd6ffc5 | No repo provider is registered for connector type '${…}' |
gw-5ffea0b3 | Failed to render filter test PDF: ${…} |
gw-60653034 | source ${…} belongs to an external authority (${…}). Entries citing one arrive through a payload import, not by hand — use a cid: source for a card this deployment authors. |
gw-606bcb13 | Client certificate required |
gw-60edf30e | API key request quota exceeded |
gw-60f41469 | Scope belongs to a group you are not in |
gw-61076687 | LDAP bind password file unreadable |
gw-6268b9f2 | Knowledge entry ${…} came from the shipped bootstrap payload. Disable it instead — an import would recreate a deleted row. |
gw-62eb629f | Unknown page: ${…} |
gw-633fe9b8 | '${…}' must be a whole number. |
gw-6365893d | Output filter with ID ${…} not found |
gw-65290819 | Analysis is already ${…}; reopen it before deciding again |
gw-68752272 | Device is enrolled to another tenant |
gw-68e51868 | Invalid or expired EDL token |
gw-69c8fa3e | Regulation ${…} not found |
gw-6a20eed5 | Run not found |
gw-6b8e5574 | No such trusted browser. |
gw-6c3f45da | Sync scope not found |
gw-6c69afb3 | mode must be 'connected' or 'air_gapped' |
gw-6cbd1e21 | Connector not found for this assignment |
gw-6cc6b078 | Document analysis failed: ${…} |
gw-6d6d4a31 | license issuer unavailable |
gw-6f4564c4 | license is for installation ${…}, this box is ${…} |
gw-6fbf57b2 | Unknown governance policy setting(s): ${…}. Settable keys are: ${…}. |
gw-711c5e1a | Account not found |
gw-7162b8fd | "${…}" is set by the gateway and cannot be overridden |
gw-71639636 | Cannot delete output filter group with ${…} associated filters |
gw-741d9751 | cadence must be monthly or quarterly |
gw-7430d6e5 | ${…} connector needs an access_token |
gw-7459f269 | Download failed: ${…} |
gw-7742471e | Credential must be assigned to either a tenant or a tenant group, but not both |
gw-778cc642 | A clone URL is required |
gw-77ccaa9a | Invalid enrollment token |
gw-77d8511f | Credential with ID ${…} not found |
gw-788b6fc9 | Snapshot ${…} payload is not an object |
gw-7ac24bd9 | key is not a PEM private key (encrypted keys are not accepted — decrypt it first) |
gw-7b850d4b | Tenant group not found |
gw-7babd919 | Test case with ID ${…} not found |
gw-7c905173 | Could not extract text from the document${…}. |
gw-7d379561 | Review ${…} carries no reasoning to promote; supply text in the request body |
gw-7df9c8a3 | Rate limit exceeded. Please try again later. |
gw-7e361151 | Failed to render executive summary PDF: ${…} |
gw-7e7881f0 | Failed to connect to DeepTeam service |
gw-7efecc34 | LLM review ${…} not found |
gw-7f8b3f36 | This repository has no completed baseline yet, so there is no commit to read the files at. |
gw-80e1680b | A clone URL cannot begin with "-" — git would read it as an option. |
gw-811184e8 | Invalid or expired token |
gw-81c016be | Attribution ${…} not found |
gw-82fa354a | An authenticator app is already set up. Turn it off first to register a new one. |
gw-83565b7f | No ATLAS object ${…} in any loaded release |
gw-83696890 | Too many attempts, please try again later. |
gw-83861f19 | Provider '${…}' not found |
gw-84f83583 | Tenant ID not found in token |
gw-8550e62c | '${…}' must be a list of filter names, or an empty value for all of them. |
gw-8562cee7 | Account is inactive |
gw-87fa6ca5 | Failed to render cost-savings PDF: ${…} |
gw-884f5698 | Failed to render detections PDF: ${…} |
gw-88709b07 | Provider with ID ${…} not found |
gw-88866efe | No authenticator app is set up for this account. |
gw-88ba5d59 | This sync scope is disabled. Re-enable it before syncing. |
gw-8a0dbbd1 | name too long: ${…} |
gw-8af215ff | "${…}" is not a valid header name |
gw-8cb93149 | No test cases found matching criteria |
gw-8df46f08 | chain link ${…} (${…}) did not issue ${…} — order the chain leaf-side first |
gw-8e4f3bec | Cannot switch the base to ${…}: no usable rate is stored for it |
gw-8ea1c002 | Tenant is already a member of this group |
gw-8ee05e72 | Refusing to store connector credentials: JWT_SECRET is not set, so they would be written unencrypted. Set a persistent JWT_SECRET and restart. |
gw-8f076a18 | Redaction job not found |
gw-8f10d584 | Failed to process document: ${…} |
gw-8f9359d2 | The model did not produce a configuration proposal. Try again, or trim the document. |
gw-8fb1e18f | Too many unlock requests, please try again later. |
gw-8fb6527b | invalid manifest URL |
gw-905041bd | You can only manage tenant groups that you own |
gw-910c6530 | cert is required (PEM) |
gw-91c97392 | Tenant group with this name already exists |
gw-91e29a1c | Integration ${…} not found |
gw-92fa4bde | No settings supplied. Send at least one of: ${…}. |
gw-939ccf4e | Regulation ${…} has no seeded fine structure to restore |
gw-9492040a | start_date and end_date must be dates |
gw-94983dbe | Failed to render tenant analytics PDF: ${…} |
gw-95ca03fc | expires_at must be in the future |
gw-9640254e | Tenant not found |
gw-96b1b400 | Document analysis not found |
gw-96dc7b37 | Host URL must be the GHES host only (https://${…}), not a repository URL. |
gw-96de9351 | Device is not enrolled |
gw-97315a8a | Unsupported format: ${…} |
gw-97485089 | Tenant with ID ${…} not found |
gw-988be827 | Testing a different LDAP url requires the bind password to be re-entered; the saved password is only sent to the saved url. |
gw-988cddd5 | The risk analyst could not be reached. |
gw-9898d36a | No such session. |
gw-98d8b316 | cert is not a PEM X.509 certificate |
gw-9931d1ea | Detection with ID ${…} not found |
gw-9981646e | config.format must be one of ${…} |
gw-998323c2 | Retention window for ${…} must be 0 or more days |
gw-9acf96a3 | CID license is expired or invalid. An administrator can install a renewal in the dashboard under Settings → License. |
gw-9aedd634 | An authenticator app is already set up. |
gw-9bb26fd7 | at most 32 names |
gw-9bc101d3 | bundle filename must end with .cidupd |
gw-9bdbe68e | Azure OpenAI requires an endpoint URL. Please configure the endpoint in your credentials. |
gw-9be04ede | CA not available. Is cid-inline-proxy running? |
gw-9c1728b2 | Internal API only |
gw-9ca850fa | Knowledge entry ${…} restates ${…}, which this deployment does not author. Its content changes only by importing a payload whose content changed. Disabling it is allowed. |
gw-9d708334 | Unlock request is already ${…}; it cannot be decided again |
gw-9dcf51be | Assignment ${…} not found |
gw-9e1ad013 | license rejected: ${…} |
gw-9ee47719 | Unknown filter name(s) for '${…}': ${…}. Valid categories are: ${…}. |
gw-9fef08b3 | Connector ${…} not found |
gw-a3ced9d1 | this certificate is not a CA (basicConstraints CA:TRUE); upload the proxy's issuing CA, not a leaf |
gw-a3d14b12 | .${…} files are not supported: legacy and macro-enabled spreadsheet formats cannot be safely redacted. Save the file as .xlsx (without macros) and try again. |
gw-a460c8f7 | update host '${…}' is not in SYSTEM_UPDATE_ALLOWED_HOSTS |
gw-a4947619 | unknown or expired upload |
gw-a4d3fa84 | Provide the policy as a "file" upload or as "text". |
gw-a5286ec5 | API key required |
gw-a5490273 | cert is a CA certificate; upload the server (leaf) certificate, with the CA in chain |
gw-a5d040e8 | scopeId must be 'user-<tenantId>' or 'team-<groupId>' with a uuid, got '${…}' |
gw-a80294d8 | Output filter with nickname '${…}' not found |
gw-a81f6240 | denied must be an object of page id → roles |
gw-aa06d1fa | Capability access was changed by someone else while this screen was open. Reload to see their change before saving yours. |
gw-aa3d346b | Role assignments apply to the entire system. Scoping a role to one tenant or group is not enabled in this release. |
gw-aa8eb42b | Agent key does not match device |
gw-ac9b4689 | Unknown capability: ${…} |
gw-ae1157e9 | Password must be at least 7 characters long |
gw-b10f8359 | online install requires SYSTEM_UPDATE_ALLOWED_HOSTS to pin the update host |
gw-b18fd71a | Unsupported currency: ${…} |
gw-b5538f3e | Signed in, but this role does not use the browser extension: '${…}' has no extension view. Use the dashboard instead. |
gw-b5567096 | Invalid agent API key |
gw-b658bc53 | Scan ${…} has expired from the auditor's retention window — rebaseline the repository to scan it again |
gw-b6758dcf | denied must be an object of capability id → roles |
gw-b712bc40 | Select findings in at most ${…} files — ${…} were chosen. Each file is a separate model round trip. |
gw-b78d804a | Snapshot not found |
gw-b82e5d4e | Knowledge entry ${…} not found |
gw-b8a458ac | superadmin access cannot be removed — it is the role that edits this table |
gw-b8fc2094 | Mapping version ${…} not found |
gw-b950f9da | Configuration store unavailable; settings cannot be saved |
gw-b969b35f | This account is managed by an external directory — change the password there. |
gw-b97dec41 | Device ${…} not found |
gw-bc51c263 | Tenant group with ID ${…} not found |
gw-bd416ebe | Current password is incorrect |
gw-bd97d66b | ITSM handoff is unavailable in this process; cannot send a test event |
gw-be7ec89f | Filter group '${…}' is not active |
gw-bf28b0fa | Tenant with this name already exists |
gw-bfc01052 | Filter with ID ${…} not found |
gw-c11cad27 | Team member ${…} not found |
gw-c1cd3d44 | The dossier report could not be rendered (${…}). The dossier JSON is unaffected and remains downloadable. |
gw-c2d9ad54 | these streams are not yet readable by the analyst |
gw-c315b4c7 | Invalid token |
gw-c3664555 | chain contains no PEM certificates |
gw-c502debd | Invalid regex pattern: ${…} |
gw-c62e2a6b | certificate expired on ${…} |
gw-c8a7b7ab | Assignment ${…} has no GitHub installation id |
gw-c8b9bba5 | Provider with code '${…}' not found |
gw-c8f8f9d8 | OCR engine '${…}' is not available on the OCR service (available: ${…}) |
gw-c9198338 | ${…} is not an ATLAS id (AML.TA####, AML.T####[.###], AML.M#### or AML.CS####) |
gw-c947234f | superadmin capabilities cannot be removed — it is the role that edits this table |
gw-c9a1758b | This role does not use the chat: an auditor reviews the estate rather than adding traffic to it. Use the dashboard instead. |
gw-c9f191de | At least one rate must be supplied |
gw-ca9fdfc5 | Seed data not available in this build; cannot restore defaults |
gw-cba4b570 | LDAP url, bind DN and base DN must be configured |
gw-ce752ab5 | Import payload holds ${…} entries; the limit is ${…} |
gw-cf7ad5c6 | no key uploaded and no CSR is pending — generate a CSR first, or upload the key with the certificate |
gw-cf868bf2 | Only a superadmin may change the appliance-wide inspection policy |
gw-d05d100f | Test run with ID ${…} not found |
gw-d23310f9 | Failed to render AI usage PDF: ${…} |
gw-d2e120a8 | Scope belongs to another account |
gw-d2ee8786 | Tenant group "${…}" still has ${…}. Remove the members and move the credentials before deleting it. |
gw-d447ffc2 | Invalid provisioning token |
gw-d561f3ad | Provide exactly one of "bundle" or "baseline_id". |
gw-d5927500 | dashboard_base_url must be an absolute http(s) URL with no query or fragment, e.g. https://cid.example.com |
gw-d5b2009f | Unsupported base currency: ${…} |
gw-d617d45d | dc-agent.ps1 is missing from this build. The script ships inside the appliance image, so this image is incomplete — report its version. |
gw-d637a6e5 | Model '${…}' not found for provider '${…}' |
gw-d6653ebe | itsm_ref_url must be an absolute http(s) URL |
gw-d6feabaa | Governance asset not found |
gw-d8200482 | certificate is not valid before ${…} |
gw-d895d0fc | Duplicate entry id ${…} in the import payload; nothing was written |
gw-da70369d | config.url must be an http(s) URL |
gw-daa24760 | Your AI access is not locked |
gw-dda824d1 | That repository is not readable without credentials, and an https clone URL cannot use a deploy key. Use an ssh URL (git@host:org/repo.git) so a key can be generated, or put a token in the https URL. |
gw-de6e0e63 | Select at least one finding to analyze |
gw-e037a846 | The model did not produce a filter definition. It said: ${…} |
gw-e14811da | API key has expired |
gw-e149c487 | Tenant group "${…}" is the sync target of ${…} directory sync scope${…} (${…}). Re-point ${…} at another group, or clear the mapping, before deleting this group. |
gw-e14ec014 | not a hostname or IPv4 address: ${…} |
gw-e1e6a1ac | Sign in again to continue. |
gw-e27bb7cd | Directory authentication is unavailable |
gw-e322a9f7 | name can only contain letters, numbers, underscores, and hyphens |
gw-e4955339 | The filter configuration changed after this preview was taken. Re-run the preview and confirm the new diff. |
gw-e4a766ec | offset mismatch |
gw-e4e8dc82 | Unknown baseline "${…}" |
gw-e6084a2b | No active credential found for tenant ${…} and provider ${…} |
gw-e613f1f1 | '${…}' must be between ${…} and ${…} (got ${…}). |
gw-e71a1997 | '${…}' must be a number. |
gw-e77944ce | Tenant is outside your scope |
gw-e77a62b7 | This account requires two-factor authentication. Sign in through the dashboard to complete it; the extension cannot yet. |
gw-e7cc82cb | a host reconcile is already pending (${…}${…}); wait for it to finish |
gw-e839c344 | Missing agent API key |
gw-e84fea1e | Out of scope for this tenant |
gw-e875e972 | Redacted document not available. The document may not have required redaction. |
gw-e89a3876 | API key must be assigned to either a tenant or a tenant group, but not both |
gw-e9ed541a | tenant_id is required; the appliance-wide policy is switched off with PUT bulk_enabled=false, not deleted |
gw-e9f2d69f | The '${…}' role exists but cannot be assigned yet. Its capabilities are not enforced by the API, so an account holding it would be refused everywhere. |
gw-eab8a500 | Invalid fine_structure: ${…} |
gw-ec907583 | denied.${…} must be an array of roles |
gw-ecf2e7d9 | this appliance has no root CA yet |
gw-ed0f0042 | Test group not found |
gw-ed3f42d3 | Output filter '${…}' version '${…}' not found |
gw-ee9d4c24 | detection_ref must look like "<source>:<uuid>" |
gw-efb756c0 | invalid CIDR: ${…} (expected IPv4 like 10.0.5.42 or 10.0.5.0/24) |
gw-efc196a9 | This token predates revocable sessions and is no longer accepted. Sign in again. |
gw-f0778329 | Failed to list benchmarks |
gw-f0c6e5f0 | Repository ${…} is not visible to this connector |
gw-f1827370 | manifestUrl required for online install |
gw-f1cd10c7 | Detection not found |
gw-f4b2ce6a | '${…}' must be true or false. |
gw-f53ef064 | Invalid or expired password reset token |
gw-f669fbe5 | Bundle failed validation; nothing was imported. |
gw-f677dcab | Analysis not found |
gw-f73a3965 | scopeId is required when scopeType=tenant_group |
gw-f746efec | This feature (${…}) is not included in the installed license tier. Contact your CID representative to upgrade. |
gw-f87bb56f | Target test group not found |
gw-f8a41d98 | Model '${…}' not found |
gw-f91027cc | '${…}' must be one of: ${…} (got '${…}'). |
gw-f944049e | OCR service unavailable |
gw-f9500e5e | No settings supplied. Settable keys are: ${…}. |
gw-fb1988df | bundlePath required for bundle install |
gw-fbbcfa08 | API key does not resolve to a tenant (empty tenant group?) |
gw-fbe5a64a | Snapshot ${…} does not contain parseable JSON; no pack can be built from it |
gw-fc120fb8 | No active lock ${…} |
gw-fcb26892 | bundle path must be an uploaded bundle |
gw-fd6fdb51 | Document analysis service is temporarily unavailable |
gw-fda9895c | Too many attestation requests |
gw-ff3c871b | Failed to render regulations PDF: ${…} |
gw-ff53a9e8 | This session was ended because an old sign-in token was presented twice. Sign in again. |
gw-ff9bfdfd | The analyst is already running an analysis. |
gw-ffcf4c9d | Filter group '${…}' has no active filters |
gw-ffe8059c | Output filter group with ID ${…} not found |
First-boot setup wizard (15)
| Id | Message |
|---|---|
setup-016ab30b | a host reconcile is already pending; wait for it to finish |
setup-0824aac5 | '${…}' is not an entitled, user-selectable service on this box |
setup-41b8f8aa | cannot complete: required steps are missing |
setup-63fe4f66 | provider_id or code is required |
setup-76cd4f46 | mode must be one of ${…} |
setup-7c36d409 | Appliance setup is not complete. Finish first-boot setup to use the product. |
setup-7d11d6c0 | default tenant-group '${…}' not found |
setup-8b8d169a | mode must be 'connected' or 'air_gapped' |
setup-8c0870ec | provider_id and api_key are required |
setup-905c8133 | could not create the Claude Code group |
setup-96a1e89f | setup already complete |
setup-c1cbc38c | username and a password (min 8 chars) are required |
setup-c2f341d1 | a proxy URL is required when "behind a proxy" is enabled |
setup-e9f80156 | an account already exists |
setup-feb702b6 | selection for '${…}' must be 'now', 'later' or 'skip' |
Dashboard (English UI strings) (222)
| Id | Message |
|---|---|
dash-001f79f6 | Error activating users |
dash-028725ed | Failure Reason |
dash-088effd4 | Failed to create API key |
dash-08f15818 | Lock / warn / clear, all time |
dash-098d698e | No result arrived before the deadline. |
dash-0c6f0976 | {{completed}} completed, {{failed}} failed |
dash-0c8f3cfa | Error loading credentials. Please try again. |
dash-0ca92f47 | Invalid credentials |
dash-0cf19402 | Provider cannot be changed after creation |
dash-0cfa23f1 | Filter groups not mapped to any engine: {{groups}}. Their filters cannot start an engine. |
dash-0f591af7 | Test failed to run |
dash-0fe45bf9 | This bundle cannot be applied |
dash-10620051 | The report could not be rendered, so it was never compared against the record. Download will refuse. |
dash-11c8735b | Rejected |
dash-1386acc9 | Could not load usage data |
dash-152e861e | Warning! |
dash-1684ae19 | Failed to render PDF |
dash-16e6f506 | Provider unreachable |
dash-19a80a31 | Discovery failed: {{message}} |
dash-1aab3ae8 | The decision was not recorded. |
dash-1bc9e143 | Unable to load DeepTeam runs. The backend service may be unavailable. |
dash-1c6d700d | Failed to create test case: |
dash-1d0f8c95 | Rate editing is unavailable on this deployment. Totals stay in EUR. |
dash-1d5182ce | Something went wrong on our end |
dash-1e41fc78 | Timed out |
dash-1e7cd287 | Rates must be greater than zero. |
dash-20b80f87 | Required for your account on this installation, so it cannot be turned off. |
dash-20c8917c | Failed to create output filter |
dash-22086bc4 | You cannot see every member of this group; these figures describe part of the team. |
dash-24c2a708 | This installation does not report active sessions. |
dash-286977ac | Failed to update pseudonymization for all filters |
dash-287fb9f9 | Error deactivating users |
dash-28ecff04 | Benchmark polling timed out. The test may still be running in the background. Check the run history for updates. |
dash-2b21e881 | Fallback when the analyst is unreachable, and the language it writes in. |
dash-2d54cd4c | Try Again |
dash-2ef3f11a | The page you're looking for doesn't exist |
dash-2f456cbe | Invalid URL |
dash-31717b69 | This sign-in request expired. Please sign in again. |
dash-322d34d3 | Test Run Failed |
dash-33145bbb | {{masked}} masked · {{rejected}} rejected |
dash-34619fbf | Your role does not include this action. Ask an administrator if you need it. |
dash-3578253b | Failed to delete tenant |
dash-3618947c | Failed to read ZIP file |
dash-391eb56b | Failed to update pattern |
dash-39274ca1 | This provider has no reachable credential, so calls will fail. Add one under Credentials. |
dash-397e050c | and every repository tracked through it will be removed, with their findings and analyses. This cannot be undone. |
dash-3a4e129a | Could not save the escalation policy |
dash-3a77d15d | Page Not Found |
dash-3ac4546a | After this, the review is marked timed out |
dash-3b5faea4 | Which sessions had the most rejected messages this week? |
dash-3b91fec2 | The analyst failed while reasoning. |
dash-3c8b8978 | Failed to update pseudonymization setting |
dash-3c8dffa1 | Failed checks: {{rules}} |
dash-401e6792 | Run failed |
dash-415a5f9c | {{count}} referenced articles are not defined in the regulation catalogue, so their coverage cannot be measured. |
dash-41c0e50d | Failed to save OCR settings |
dash-48c4ee82 | Error |
dash-4911066a | invalid |
dash-49ca8c44 | Failed to remove filter override |
dash-4a58c80d | Failed to regenerate API key |
dash-4a627790 | Error Code |
dash-4b0fbd5f | Failed to update filter |
dash-4cb72b00 | Preview failed |
dash-4d7a16ee | Last error |
dash-4febf308 | Benchmark failed: {{error}} |
dash-507d2753 | Whole number, 2 or more |
dash-5130f457 | Are you sure you want to delete this filter? This action cannot be undone. |
dash-51a64859 | Failed to add pattern |
dash-53204288 | Failed to create group: |
dash-532ca6b8 | Failed to load run details |
dash-538cf649 | Server Error |
dash-540f8651 | Invalid format |
dash-55bc92f6 | What it cannot show |
dash-57d983b5 | Error loading test runs |
dash-5bd20f7f | Error loading tenants. Please try again. |
dash-5bea72f4 | Assignment cannot be changed after creation |
dash-5bf2b10c | {{count}} sections cannot be filled from this record and are listed as evidence gaps. |
dash-5c946e87 | Failed to load simulation |
dash-5dca17ef | Failed to update tenant group |
dash-6007e683 | Provider keys are saved but unreachable. Check egress, then use Test on Credentials. |
dash-606ebcf6 | Failure Reasons |
dash-61d3af5e | Access denied |
dash-61f3cfee | Warn |
dash-6250a0e5 | Failed |
dash-66acfbec | Unreachable ✗ |
dash-66c2d462 | The risk analyst could not be reached. |
dash-68482bb6 | Failed to update tenant |
dash-69ca98f8 | Failed to remove member from group |
dash-6a325190 | Your role does not include this page. If you reached it from a link or a bookmark, it belongs to a role you don't hold. |
dash-6a3729fe | Failed to sign the user out |
dash-6ae89ab9 | Test run failed: {{error}} |
dash-6b7bcea6 | Could not promote this review |
dash-6ebe5cf5 | The dossier could not be produced. Try the JSON if the PDF refuses. |
dash-6ef4c69c | Creates missing groups, filters and patterns. Never changes existing actions or on/off switches. |
dash-6f624816 | Unreachable: {{error}} |
dash-72d8636b | {{count}} file(s) invalid |
dash-74ea5054 | Failed to update credential |
dash-763f88d1 | Failed to create filter |
dash-782a5e94 | The analysis did not start. |
dash-785ceacc | Errors |
dash-7addd5c9 | Failed to delete output filter |
dash-800103dc | An unexpected error occurred during the test run. |
dash-82b84222 | An error occurred while loading data. Please try again. |
dash-83d4c2f8 | Invalid email address |
dash-845679fc | Error: {{error}} |
dash-86bd7224 | Failed to delete run: |
dash-872be67c | Failed to update API key |
dash-889b3955 | Failed to save filter override |
dash-88efec36 | {{partial}} short of the floor (half credit) · {{failed}} failing · {{untested}} of {{total}} untested and excluded from the score |
dash-88f50d97 | On timeout |
dash-8a47dcbb | Invalid ID |
dash-8ad974cd | Unreachable |
dash-8c6ca341 | Denied. The lock stays in place. |
dash-8e83b86f | Cannot scan? Enter this setup key by hand: |
dash-8e96210b | Failed to create credential |
dash-8eba2b0c | Failed to load policy impact |
dash-8f40f042 | The request failed. Check that the gateway is reachable, then try again. |
dash-8f7d6616 | Missing risk profile |
dash-90006288 | Please fix JSON errors before submitting |
dash-90420e06 | Failed to start benchmark: |
dash-94bb054c | Failed to start tests: |
dash-95582b11 | Masked and rejected detections were neutralised. Only flagged content still carries exposure. |
dash-95f96b7d | Always zero: the cursor advances only after a successful send, so failed batches are retried. |
dash-966889d1 | Expired {{days}} day(s) ago. Chat, the proxy and inspection stop when grace runs out. |
dash-99421f0a | Failed to clear cache |
dash-9a144e70 | Failed to copy to clipboard |
dash-9a3dab8d | Permanently deletes rows past their category window. This cannot be undone. |
dash-9a51702a | {{refused}} left alone: an id collision is not a reason to replace a card written here. {{ids}} |
dash-9ac2d802 | Missing owner |
dash-9b6fd8ff | Security events: blocks, auth failures, errors |
dash-9b976e2c | a backlog stopped moving |
dash-9d6298eb | Export failed: {{reason}} |
dash-9e1230b8 | Failed to load OCR engines. The OCR service may be unavailable. |
dash-9ea790f6 | Failed to delete tenant group |
dash-a09af353 | Your CID licence is not valid |
dash-a11b5a85 | Failed to reset two-factor |
dash-a1e8fdd3 | Not included in this installation’s licence package. Contact your CID222 representative to add it. |
dash-a21a8d54 | {{count}} errors |
dash-a27b9114 | The DeepTeam service is unavailable. You can view past runs, but cannot start a new benchmark. |
dash-a5fce0d1 | A previous request was declined. You can send another. |
dash-a69842ad | This permanently deletes the {{count}} selected test case(s). This cannot be undone. |
dash-a6c9e6aa | Failed to create tenant |
dash-a73bf90d | Every card comes back in its shipped order and your arrangement is discarded. This cannot be undone. |
dash-a73e4c31 | Failed to add member to group |
dash-a78218b7 | {{count}} failed |
dash-a99f23ce | Import failed |
dash-a9d409f2 | Grace is over and the product is blocked. Install a renewal to restore it. |
dash-aa0476b9 | from the system. This cannot be undone. |
dash-ac740635 | Unauthorized |
dash-ad8dbdb4 | Cloud providers cannot be reached. Add a local model endpoint for chat features. |
dash-aeca6dcf | Directory answered only partly — {{imported}} imported, {{updated}} updated, nothing removed. {{warning}} |
dash-b266c7a8 | Timeout (ms) |
dash-b2c33137 | Directory sign-in fails and group membership stays frozen until it returns. Content policy is unaffected. |
dash-b2ea0135 | Go to Home |
dash-b31bebd8 | Error inviting users |
dash-b4866540 | Error loading data. Please try again. |
dash-b5026215 | Failed to create test cases: |
dash-b64807c2 | Back to home |
dash-b7adb3e7 | Reject: the request is refused and the user starts over. |
dash-b891c53b | {{count}} warning: these entries will be skipped |
dash-b95c8acb | Access Forbidden |
dash-b9acc2f0 | Scorecard PDF export failed |
dash-b9b8f7bd | Go back |
dash-ba376745 | Failed (7 days) |
dash-bc8ed391 | The installed licence failed verification. The product is blocked until it is replaced. |
dash-bcac8eb7 | the collector kept refusing delivery |
dash-bcc9d331 | Report rejected |
dash-be9bf3b9 | An analyzer was unavailable, so treat the result as unknown, not as clean. |
dash-bf9d033b | Error loading groups. Please try again. |
dash-c05ef14b | Error Information |
dash-c4ac1951 | PDF export failed: {{error}} |
dash-c5982cbc | Failed to delete test group: |
dash-c63b3ea4 | Your CID licence has expired |
dash-c6d1b723 | Could not apply |
dash-c6e32530 | Failed to generate reset link |
dash-c774ec44 | Detections masked or rejected before they reached the model. Counted, not projected. |
dash-c9d15ac8 | Capture failed. |
dash-cbd2b721 | Failed to save login state. Please try again. |
dash-cc9f3280 | Export failed |
dash-d32f8cb0 | Failed to update output filter |
dash-d357fcc9 | Directory sign-in is temporarily unavailable — the directory server could not be reached. This is not a problem with your password. |
dash-d4b6ea23 | Unknown error |
dash-d5e167fc | Failed to delete test case: |
dash-da3065b1 | Failed to cleanup logs |
dash-da7fee58 | Someone else changed page access while this screen was open. The table has been reloaded with their change — review it and save again. |
dash-da90b2c8 | What to do with a verdict that carries no reasoning. Warning is the default. |
dash-dce03c33 | If the host is unreachable, the extension blocks AI sites. |
dash-dec71f89 | Failed to delete pattern |
dash-dee2d0dd | You don't have permission to access this page |
dash-e2ab3eaa | Failed to revoke API key |
dash-e2b7206f | Could not change the engine |
dash-e2d6f0eb | Benchmark failed |
dash-e4ce1ffb | Denied |
dash-e5f96e97 | Failed to update test cases: |
dash-e6504fb2 | Error Message |
dash-e8d55352 | {{mitigated}} of {{total}} detections · {{masked}} masked, {{rejected}} rejected, {{flagged}} flagged only |
dash-e8d9e486 | Failed to delete credential |
dash-e9dfbeec | Failed to delete test cases: |
dash-ea476abc | Failed to save the policy |
dash-eb7ea6d5 | Failed to delete filter |
dash-ebdf21b2 | Credential saved but unreachable: {{error}} |
dash-ec1f4e1b | Deletes this benchmark run and all its results. This cannot be undone. |
dash-eda885e0 | Why this decision was made, and what the record is missing |
dash-edb7611d | The pack was not produced. Open "What's inside" to see why. |
dash-edbceffb | This permanently deletes "{{name}}". This cannot be undone. |
dash-f11e5763 | Failed to create test group: |
dash-f1c05fc8 | Something went wrong |
dash-f2ac763a | Errors (7 days) |
dash-f382fc3c | Are you sure you want to delete this output filter? This action cannot be undone. |
dash-f448e99b | Fail |
dash-f47b770e | This action cannot be undone. |
dash-f53f0027 | Deletes this test run and all its results. This cannot be undone. |
dash-f591a738 | Not every claim in the reasoning ties back to a detection or tool result, so a lock verdict is shown as a warning. |
dash-f62a316a | Failed to create tenant group |
dash-f698bc07 | This cannot be undone. |
dash-f8f7ab4e | Import refused |
dash-f933f9e4 | Repository hosts this deployment can read. Credentials cannot be read back. |
dash-f98b3045 | This role does not use the chat — an auditor reviews the estate rather than adding traffic to it. |
dash-fada65ae | Completed reports whose own checks failed |
dash-fb1dbd2d | What this pattern caught will reach the provider from the next request. This cannot be undone. |
dash-fdac3635 | This appliance’s licence has expired — chat, the proxy and inspection are blocked. An administrator can install a renewal under Settings → License. |
dash-fe0acff4 | An unexpected error occurred during the benchmark. |
ISO / OVA installer and first-boot scripts (51)
| Id | Message |
|---|---|
iso-0545b664 | not set — this OVA will NOT be able to update, and cannot |
iso-071c6a6e | HTTPS sidecar FAILED — last lines of its output: |
iso-083bfc75 | public DNS is unreachable too — pinning $reg to $REGISTRY_FALLBACK_IP in /etc/hosts |
iso-1bbed618 | pulling missing release image: $ref |
iso-1ccc150f | cannot log in to $REG — the indented line above is docker's own message |
iso-1d9a5709 | FATAL: console admin missing |
iso-1dc9bbdb | clock is not synchronised (now $(date -u +%FT%TZ)) — if the registry login fails on a certificate error, this is why |
iso-20aee03a | secret generation failed |
iso-236ce5a7 | provisioned. Reach it at https://<vm-ip>/ (one-time certificate warning until the appliance CA is trusted) -> setup wizard. |
iso-278892b5 | invalid CID_RELEASE_CHANNEL |
iso-2817971c | pull ${ref##*/} failed (${kind}, attempt ${n}/${PULL_TRIES:-3}) — retrying in ${delay}s |
iso-3421fc56 | unfilled bundle placeholders in .env: $unfilled — an online ISO cannot pull its images; rebuild the bundle with CID_CHANNEL_TOKEN / CID_REGISTRY_USER / CID_REGISTRY_PASS set |
iso-3d58ef06 | $reg resolves but HTTPS to it will not connect — this network blocks outbound 443 to it, or a proxy/TLS-inspection device sits in the way. Note that Ubuntu's own mirrors use port 80, so apt can work while this fails. Allow direct HTTPS to $reg, then reboot. |
iso-460b8f7e | $name: STUCK-IN-INITRAMFS — missing root-disk driver |
iso-4762995d | registry login FAILED (online updates may not pull) |
iso-4774b99c | WARNING: CID_CHANNEL_TOKEN / CID_REGISTRY_USER / CID_REGISTRY_PASS |
iso-4a5405c5 | docker load failed for $t |
iso-4b53b316 | FATAL: cannot read password file $PASSFILE |
iso-4d4c4bc4 | the registry rejected this appliance's credentials while pulling ${ref##*/} — this install media is stale or its account was revoked; ask your CID222 contact for current media |
iso-57a9f5dc | $name: OVERLAY-FAIL |
iso-5edcb464 | FATAL: docker load failed for $t |
iso-63f749cc | frontend container not found — run install.sh first and let it start |
iso-66ba95bc | docker load reported an error for $t |
iso-6a70029e | FATAL: $must*.deb missing from $OUT |
iso-7a86f302 | images gate: not found: $ENVF |
iso-7e129b4c | proxy passthrough key registration failed (proxy calls may 401) |
iso-7e4bea34 | console UI install FAILED — last lines of its output: |
iso-7f2a9181 | verification: $f missing from the ISO |
iso-7fc6a106 | WARNING: HTTPS front not up — run: sudo bash /opt/cid/tls-tools/https-front.sh |
iso-7fdedc70 | images.env fails the gate |
iso-87aa6202 | HTTPS ready -> https://$HOSTID/ (browser shows a one-time self-signed warning: Advanced -> Proceed) |
iso-91b631da | WARN: could not pull $ref (updates may fail rollback-safety) |
iso-9e24abd3 | MATRIX FAILED — do not ship. Serial logs in $WORK |
iso-a46649a9 | FATAL: docker load reported an error for $t |
iso-a8dd6a35 | this network's DNS cannot resolve $reg — routing that domain to public resolvers |
iso-aab9560b | xorriso failed |
iso-ab352966 | cannot resolve $reg with this network's DNS, with public resolvers, or from a pinned address. Fix DNS (F2 on the console sets one), then reboot. |
iso-b02a77b2 | docker install failed |
iso-b5b1f49c | access hardening FAILED — do not export this image |
iso-b7fd0ae5 | update-ca-certificates failed — the certificates may not be trusted |
iso-c14f0f7f | $label failed (attempt $n/$tries) — retrying in ${delay}s |
iso-c1dbd934 | FATAL: compose references undefined image vars:$missing |
iso-cc263d17 | single streams and extra retries are enabled below; if this site cannot do ~2 MB/s, ask for the air-gap ISO instead |
iso-d243f457 | the previous attempt stopped here: $reason |
iso-d6f794e1 | this machine has ${ram_mb} MB of RAM — the appliance cannot run below 6 GB and is designed for 16 GB. Power it off, raise the memory, and boot again. |
iso-dc95a732 | the registry rejected this appliance's credentials — this install media is stale or its account was revoked; ask your CID222 contact for current media |
iso-df1fd83a | FATAL: cannot read $SRC |
iso-e6464755 | $name: PANIC — missing root-disk driver for this controller |
iso-ecf1b9e3 | WARNING: unfilled placeholders ($unfilled) — fine for airgap (offline bundles), no online updates |
iso-f58cbeaa | (a bundle without it ships a deployment mode that cannot start) |
iso-f5dab1aa | WARN: CID_DEEP_VERIFY set but qemu-img not found — skipped inflate check |
Host agent and offline updater (28)
| Id | Message |
|---|---|
host-0555d2fd | refusing path-traversal member: {member.name} |
host-093a3439 | still missing after pull ({why}): {names} |
host-128d9757 | [test] injected failure at {point} |
host-14e84e67 | health gate timed out; unhealthy: {', '.join(bad)} |
host-169d5b15 | host write failed: {host_path}: {res.stderr.decode(errors='replace')[-400:]} |
host-2befdb27 | error: {e} |
host-2ff16aaa | docker pull failed for {svc} after {PULL_ATTEMPTS} attempts: {last} |
host-403587f6 | migration dry-run failed: {e} |
host-453f3b20 | bundle not found: {bundle} |
host-47c7bf75 | manifest missing required field: {key} |
host-4a771aa9 | cannot record migrations: postgres is not running |
host-520590f9 | current-release images are missing (rollback would be impossible): |
host-65106d8e | [host-agent] diagnostics: docker {' '.join(args[:2])} failed: {e} |
host-82dc9d20 | trust anchor missing: {CID_PUBKEY} (and no *.pem in {CID_PUBKEY_DIR} |
host-9a30c324 | cannot determine own image (container {cid}): {res.stderr.strip()} |
host-a893d024 | functional smoke FAILED (exit {res.returncode}): {detail} |
host-b23c32f4 | compose file missing from release: {compose['file']} |
host-b8620646 | manifest signature verification FAILED against all |
host-c69e1744 | command failed ({res.returncode}): {' '.join(cmd)}\n{err} |
host-c8f9b681 | pre-flight check '{probe['id']}' refused this update: |
host-dda45c6e | bundle missing images.tar / images.tar.zst |
host-e434de3b | pgdata snapshot missing: {snap} |
host-e6cf100e | cannot jump from {cur} to {new}: this release requires at least |
host-e889f206 | [host-agent] diagnostics pass failed ({self.failures}): {e} |
host-e8caa0ac | migration missing from release: {m['file']} |
host-e9120136 | host command failed ({res.returncode}): {cmd}\n{out[-800:]} |
host-f1750e63 | refusing downgrade: current {cur} > target {new} |
host-f306bd6d | signature missing: {sig_path} |