Revalidate a named human review's current source and dossier

Default off; only a dedicated commerceConnectedTransport credential is admitted. Enabled automatic onboarding additionally requires accountSourceAuthority:true with orgIds omitted. This is not a generic wildcard org key. Each handler independently verifies fresh Accounts signed authority, exact resource/source/plan/tenant/revision and the synced projection before disclosing any result. Generic fixed-orgIds service keys keep their existing permissions. The body authority is mandatory fresh Accounts accounts-commerce-human-review-v1 evidence with purpose commerce_human_review, bound to the exact case revision/context/action/dossier and expected source/workspace. A live product-session token is sent only to Accounts by the trusted BFF; this consumer accepts signed evidence only. It checks current source/policy/dossier and native company permissions. Commerce separately enforces named assignment, requester separation and the atomic human decision. No execution or stale OAuth extension is available.

post/v1/internal/commerce/connected/approvals/revalidate

Request

  • Base URL: https://api.decionis.com
  • URL: https://api.decionis.com/v1/internal/commerce/connected/approvals/revalidate
  • Auth: HTTP bearer

Headers

x-org-idstring uuid required

Must equal the body/query organization and the independently verified Accounts source UUID.

Request body

org_idstring uuid required
dossier_idstring uuid required
policy_versionstring required
authorityunknown

Response

Bounded private result

version'commerce-human-review-evidence-v1' required
org_idstring uuid required
supported_sourcesstring[] required
expires_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.