Revalidate and atomically claim one execution-bound authorization

Deprecated alias of POST /v1/authority/grants/{grantId}/claims: the same handler.

Required immediately before the downstream commit. Verifies the dossier signature and complete execution binding, resolves current policy, signal, and Presence state, then atomically claims the nonce and mutable concurrency scope. Execution is authorized only when should_execute is true, claim_token is non-null, and claim_lease_expires_at is still live at the downstream boundary. valid alone is diagnostic; in SHADOW it may describe hypothetical validity without execution authority.

A live claim also returns claim_attestation: a compact EdDSA JWS, signed with the execution-grant key, that a downstream system of record can verify offline against /.well-known/decionis-execution-grant-jwks.json. It names the grant, the decision, the dossier, the binding the grant carried (intent hash, canonical payload digest and its profile, expected effect digest, nonce, correlation), a digest of the claim token, and an expiry equal to the claim lease. The executor forwards it with the downstream request; the provider checks that the request it received is the one the attestation describes. See ClaimAttestationClaims.

post/v1/execution/claim-token

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/execution/claim-token
  • Auth: HTTP bearer

Request body

execution_tokenstring required
intent_hashstring required
consumed_bystring
commit_correlation_idstring
claim_lease_secondsinteger

Pre-commit lease duration. This does not extend the signed execution grant lifetime.

Response

Authorization remains valid and the nonce is claimed

validboolean required
should_executetrue required

Present on pre-commit claim responses. Only true after current-state and Presence revalidation, an atomic nonce claim with durable evidence, and a final database-time claim-lease check.

would_blockboolean

Present on pre-commit claim responses for Shadow diagnostics.

verdict'APPROVE' | 'ESCALATE' | 'REJECT' | 'REVIEW'

Deterministic pre-commit revalidation verdict.

reason_codesstring[] required
claim_tokenstring nullable required
claim_validated_atstring date-time nullable required

Database time of the final execution-eligibility confirmation. Qualifying effect observations must not predate this boundary.

claim_lease_expires_atstring date-time nullable required
claim_attestationstring nullable required

Compact EdDSA JWS over ClaimAttestationClaims.

evidenceobject
evidence_durably_queuedboolean

True when the canonical revalidation evidence is durably queued in the same transaction as the nonce transition. This does not by itself mean the Protocol Decision Chain append has completed.

decision_chain_evidence_recordedboolean

True when the queued evidence has already been acknowledged by the Protocol Decision Chain. False evidence remains recoverable when evidence_durably_queued is true.

Changes

No recorded changes to this operation across all 1 revision of this API.