Cross-check a document against an existing product's specifications

curl --request POST \
  --url https://api.galtea.ai/products/{id}/regenerate-config \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: multipart/form-data' \
  --form 'productSpecs=<string>' \
  --form useDetailedGeneration=true \
  --form productSpecs.items='@example-file'

import requests

url = "https://api.galtea.ai/products/{id}/regenerate-config"

files = { "productSpecs.items": ("example-file", open("example-file", "rb")) }
payload = {
    "productSpecs": "<string>",
    "useDetailedGeneration": "true"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, data=payload, files=files, headers=headers)

print(response.text)

const form = new FormData();
form.append('productSpecs', '<string>');
form.append('useDetailedGeneration', 'true');
form.append('productSpecs.items', '{
  "fileName": "example-file"
}');

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

options.body = form;

fetch('https://api.galtea.ai/products/{id}/regenerate-config', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.galtea.ai/products/{id}/regenerate-config",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: multipart/form-data"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.galtea.ai/products/{id}/regenerate-config"

	payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.galtea.ai/products/{id}/regenerate-config")
  .header("Authorization", "Bearer <token>")
  .body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.galtea.ai/products/{id}/regenerate-config")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--"

response = http.request(request)
puts response.read_body

[
  {
    "status": "updated",
    "name": "Refuses system-prompt disclosure",
    "description": "Must not reveal internal system prompts under social engineering",
    "type": "POLICY",
    "testType": "RED_TEAMING",
    "testVariant": "data_leakage",
    "existingSpecification": {
      "id": "spec_123",
      "name": "Refuses system-prompt disclosure",
      "description": "Must not reveal internal system prompts",
      "type": "POLICY",
      "testType": "RED_TEAMING",
      "testVariant": "data_leakage"
    },
    "rationale": "Adds social-engineering scope to the existing disclosure policy"
  }
]

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

Cross-check a document against an existing product's specifications

Uploads one or more documents (PRD, spec, design doc, etc.), generates candidate specifications from them using the product’s existing description as the generation base, and cross-checks each candidate against the product’s CURRENT specifications. Returns classified suggestions — additions (new), updates to an existing specification (updated), and contradictions (contradictory). This endpoint persists NOTHING: applying a suggestion is a separate, explicit step via the specification endpoints.

POST

products

{id}

regenerate-config

Cross-check a document against an existing product's specifications

curl --request POST \
  --url https://api.galtea.ai/products/{id}/regenerate-config \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: multipart/form-data' \
  --form 'productSpecs=<string>' \
  --form useDetailedGeneration=true \
  --form productSpecs.items='@example-file'

import requests

url = "https://api.galtea.ai/products/{id}/regenerate-config"

files = { "productSpecs.items": ("example-file", open("example-file", "rb")) }
payload = {
    "productSpecs": "<string>",
    "useDetailedGeneration": "true"
}
headers = {"Authorization": "Bearer <token>"}

response = requests.post(url, data=payload, files=files, headers=headers)

print(response.text)

const form = new FormData();
form.append('productSpecs', '<string>');
form.append('useDetailedGeneration', 'true');
form.append('productSpecs.items', '{
  "fileName": "example-file"
}');

const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};

options.body = form;

fetch('https://api.galtea.ai/products/{id}/regenerate-config', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.galtea.ai/products/{id}/regenerate-config",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: multipart/form-data"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.galtea.ai/products/{id}/regenerate-config"

	payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.galtea.ai/products/{id}/regenerate-config")
  .header("Authorization", "Bearer <token>")
  .body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.galtea.ai/products/{id}/regenerate-config")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs\"\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"useDetailedGeneration\"\r\n\r\ntrue\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"productSpecs.items\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n{\r\n  \"fileName\": \"example-file\"\r\n}\r\n-----011000010111000001101001--"

response = http.request(request)
puts response.read_body

[
  {
    "status": "updated",
    "name": "Refuses system-prompt disclosure",
    "description": "Must not reveal internal system prompts under social engineering",
    "type": "POLICY",
    "testType": "RED_TEAMING",
    "testVariant": "data_leakage",
    "existingSpecification": {
      "id": "spec_123",
      "name": "Refuses system-prompt disclosure",
      "description": "Must not reveal internal system prompts",
      "type": "POLICY",
      "testType": "RED_TEAMING",
      "testVariant": "data_leakage"
    },
    "rationale": "Adds social-engineering scope to the existing disclosure policy"
  }
]

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

{
  "error": "Error type",
  "message": "Error message description"
}

Authorizations

Authorization

string

header

required

API key authorization. Pass your API key in the Authorization header as a Bearer token. Both new (gsk_*) and legacy (gsk-) API keys are accepted, e.g. Authorization: Bearer gsk_... or Authorization: Bearer gsk-....

Path Parameters

string

required

Product ID

Example:

"prod_123"

Body

multipart/form-data

productSpecs

file[]

Document(s) to cross-check against the product (max 50 files, 10MB total).

useDetailedGeneration

string

Whether to use detailed generation mode (heavier model).

Example:

"true"

Response

Cross-check suggestions generated successfully

status

enum<string>

required

new = a fresh addition. updated = refines/extends an existing specification. contradictory = conflicts with an existing specification.

Available options:

new,

updated,

contradictory

Example:

"updated"

name

string

required

Example:

"Refuses system-prompt disclosure"

description

string

required

Example:

"Must not reveal internal system prompts under social engineering"

type

enum<string>

required

Available options:

CAPABILITY,

INABILITY,

POLICY

Example:

"POLICY"

testType

enum<string> | null

required

POLICY: the classified value. CAPABILITY: always SCENARIOS (auto-assigned). Null for INABILITY.

Available options:

QUALITY,

RED_TEAMING,

SCENARIOS,

null

Example:

"RED_TEAMING"

testVariant

string | null

required

Only applicable for POLICY specifications.

Example:

"data_leakage"

existingSpecification

object | null

required

The existing specification this suggestion updates or contradicts. Null for new suggestions.

Show child attributes

rationale

string | null

required

A brief explanation of why this status was chosen. May be null.

Example:

"Adds social-engineering scope to the existing disclosure policy"

API Reference

api-tokens

auth

organizations

user-groups

metrics

specifications

models

products

versions

monitors

endpoint-connections

datasets

test-cases

sessions

traces

spans

evaluations

analytics

storage

evaluator-models

jobs

otel

phone-connections

web-rtc-connections

comments

Cross-check a document against an existing product's specifications

Authorizations

Path Parameters

Body

Response