Revalidate and atomically claim a grant once, immediately before commit

The handler of the deprecated aliases POST /v1/execution/claim-token and POST /v1/execution/consume-token, with the same body and the same responses: execution is authorized only when should_execute is true, claim_token is non-null and claim_lease_expires_at is still live at the downstream boundary, and a live claim returns claim_attestation. The verified token's jti must be {grantId}; otherwise the answer is 409 GRANT_ID_MISMATCH and nothing is claimed.

post/v1/authority/grants/{grantId}/claims

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/authority/grants/{grantId}/claims
  • Auth: HTTP bearer

Request body

execution_tokenstring required
intent_hashstring required
consumed_bystring
commit_correlation_idstring
claim_lease_secondsinteger

Pre-commit lease duration. This does not extend the signed execution grant lifetime.

Response

Authorization remains valid and the nonce is claimed

validboolean required
should_executetrue required

Present on pre-commit claim responses. Only true after current-state and Presence revalidation, an atomic nonce claim with durable evidence, and a final database-time claim-lease check.

would_blockboolean

Present on pre-commit claim responses for Shadow diagnostics.

verdict'APPROVE' | 'ESCALATE' | 'REJECT' | 'REVIEW'

Deterministic pre-commit revalidation verdict.

reason_codesstring[] required
claim_tokenstring nullable required
claim_validated_atstring date-time nullable required

Database time of the final execution-eligibility confirmation. Qualifying effect observations must not predate this boundary.

claim_lease_expires_atstring date-time nullable required
claim_attestationstring nullable required

Compact EdDSA JWS over ClaimAttestationClaims.

evidenceobject
evidence_durably_queuedboolean

True when the canonical revalidation evidence is durably queued in the same transaction as the nonce transition. This does not by itself mean the Protocol Decision Chain append has completed.

decision_chain_evidence_recordedboolean

True when the queued evidence has already been acknowledged by the Protocol Decision Chain. False evidence remains recoverable when evidence_durably_queued is true.

Changes

No recorded changes to this operation across all 1 revision of this API.