Verify an execution grant without consuming it

Deprecated alias of GET /v1/authority/grants/{grantId}: the same handler, fed the token and the full intent from a body.

Verifies the Ed25519 signature, issuer, audience, lifetime, action, actor, tenant, and exact intent hash. This endpoint does not authorize execution by itself because it does not atomically consume the grant.

post/v1/execution/verify-token

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/execution/verify-token
  • Auth: HTTP bearer

Request body

execution_tokenstring required
intent_hashstring required
consumed_bystring
commit_correlation_idstring

Response

Valid grant

validboolean required
should_executeboolean

Present on pre-commit claim responses. Only true after current-state and Presence revalidation, an atomic nonce claim with durable evidence, and a final database-time claim-lease check.

would_blockboolean

Present on pre-commit claim responses for Shadow diagnostics.

verdict'APPROVE' | 'ESCALATE' | 'REJECT' | 'REVIEW'

Deterministic pre-commit revalidation verdict.

reason_codesstring[] required
claim_tokenstring nullable
claim_validated_atstring date-time nullable

Database time of the final execution-eligibility confirmation. Qualifying effect observations must not predate this boundary.

claim_lease_expires_atstring date-time nullable
claim_attestationstring nullable

Present only on a live claim. A compact EdDSA JWS over ClaimAttestationClaims, verifiable against the execution-grant JWKS. Absent or null whenever should_execute is not true.

evidenceobject
evidence_durably_queuedboolean

True when the canonical revalidation evidence is durably queued in the same transaction as the nonce transition. This does not by itself mean the Protocol Decision Chain append has completed.

decision_chain_evidence_recordedboolean

True when the queued evidence has already been acknowledged by the Protocol Decision Chain. False evidence remains recoverable when evidence_durably_queued is true.

Changes

No recorded changes to this operation across all 1 revision of this API.