Revoke a policy override (retired in v11)

Retired in v11 (PRD v11 §1.5, #4252). The step gate no longer reads a session override (the last deciding reader, the agent's tier pass, goes with #4281), so this route revokes nothing and leaves the row as the record of what was granted. After the guards that authenticate the request (403, 401, 400, as on POST), every caller is answered 409 LEGACY_POLICY_WRITE_FROZEN.

delete/api/v1/overrides/{id}

Request

Base URL
https://orchestrator.getaxonflow.com
Auth
none declared. Required headers: X-User-Email, X-Tenant-ID
TypeScript
https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/docs/api/v1/overrides/:id/delete.ts
A function with typed inputs. Its response is checked against the schema.

Path parameters

idstring required

Override id

Headers

X-User-Emailstring required

Authenticated user identity (falls back to X-User-ID); missing identity is a 401

X-Tenant-IDstring required

Tenant identifier scoping the request. The AxonFlow Agent gateway sets this header after authentication; the orchestrator fails closed when it is absent (401 on audit/decision endpoints, 400 on others — see each operation). Clients cannot widen their scope through it: handlers force the tenant filter from this header, never from the request body.

X-Org-IDstring

Organization identifier. Falls back to authenticated org from the Basic auth client when omitted. Surface for callers that need to override (e.g. cross-org admin reads in Enterprise).

Changes

No recorded changes to this operation across all 1 revision of this API.