---
title: "Graduate a pending memory via explicit confirmation"
method: POST
path: "/v1/confirm"
tags: ["decisions"]
---

# Graduate a pending memory via explicit confirmation

`POST /v1/confirm`

## Request

- Base URL: `https://api.contextdb.ai`
- URL: `https://api.contextdb.ai/v1/confirm`
- Auth: HTTP bearer

Records the authenticated caller's project-credential context against
one scoped pending memory and updates its confirmation state. API and
MCP authentication identify the project credential, not the end user
named by `user_id`; the customer host authenticates that person and
retains any end-user attestation. Call `recall_for_action` again after
confirmation because policy still determines `act`, `ask`, or
`abstain`. Confirmation does not prove objective truth. Partition
ownership is enforced at the store layer: a memory ID outside the
caller's org/project/user scope returns 404, indistinguishable from a
missing one.

## Headers

- `Idempotency-Key` string

## Request body

- ConfirmRequest
  - `user_id` string, required: End-user memory partition key. Not an identity assertion.
  - `memory_id` string, required

## Response `200`

The confirmed memory

- ConfirmResponse
  - `memory` Memory, required
    - `id` string, required
    - `content` string, required: Stored content with PII redacted as `[TYPE]` placeholders
    - `user_id` string, nullable, required
    - `epistemic_source` 'user_stated' | 'agent_inferred' | 'third_party', required: Who vouches for the claim. Required on writes.
    - `confidence` number, required
    - `corroboration_count` integer, required
    - `action_relevant` boolean, required
    - `requires_confirmation` boolean, required
    - `confirmed` boolean, required
    - `independent_corroboration` integer, required
    - `injection_suspect` boolean, required
    - `entity_key` string, nullable, required
    - `attribute_key` string, nullable, required
    - `valid_until` string, date-time, nullable, required
    - `superseded_by` string, nullable, required
  - `memory_version` integer, required: Monotonic consistency version within one organization/project.
  - `primary_wal_lsn` string, nullable, required: Primary PostgreSQL WAL position observed after commit.

## Other responses

- `400`: Malformed request or failed validation
- `401`: Missing, malformed, unknown, or revoked API key
- `403`: Authenticated but not allowed (entitlement or billing state)
- `404`: Target not found in the caller's partition (or missing)
- `409`: The key was reused with a different request, an identical request is still running, or a previous process ended with an ambiguous outcome.
- `429`: The client IP/project exceeded its request rate, or the project's idempotency retention capacity is full until older keys expire.
- `503`: Memory or metadata store unreachable

---

[API](https://skmtc.dev/contextdb/apis/contextdb-cloud-data-plane-api.md) · [All operations](https://skmtc.dev/contextdb/apis/contextdb-cloud-data-plane-api/llms.txt) · [OpenAPI document](https://skmtc.dev/contextdb/apis/contextdb-cloud-data-plane-api/revisions/9e441d2e21a7?raw)