--- title: "Revoke a policy override (retired in v11)" method: DELETE path: "/api/v1/overrides/{id}" tags: ["Decisions & Overrides"] --- # Revoke a policy override (retired in v11) `DELETE /api/v1/overrides/{id}` ## Request - Base URL: `https://orchestrator.getaxonflow.com` - URL: `https://orchestrator.getaxonflow.com/api/v1/overrides/{id}` - Auth: none declared. Required headers: `X-User-Email`, `X-Tenant-ID` - TypeScript: (a function with typed inputs; its response is checked against the schema) Retired in v11 (PRD v11 §1.5, #4252). The step gate no longer reads a session override (the last deciding reader, the agent's tier pass, goes with #4281), so this route revokes nothing and leaves the row as the record of what was granted. After the guards that authenticate the request (403, 401, 400, as on `POST`), every caller is answered `409 LEGACY_POLICY_WRITE_FROZEN`. ## Path parameters - `id` string, required ## Headers - `X-User-Email` string, required - `X-Tenant-ID` string, required - `X-Org-ID` string ## Other responses - `400`: Missing X-Tenant-ID header - `401`: Missing user identity (X-User-Email / X-User-ID) - `403`: The request did not arrive through the agent gateway (proxy authentication) - `409`: Policy overrides are retired in v11 (PRD v11 §1.5, #4252). The workflow step gate no longer reads a session override (the last deciding reader, the agent's tier pass, goes with #4281), so the session override writes answer this in every edition and on every database role, after the guards that authenticate the request. A policy is enabled, disabled or re-actioned in the organization's typed document through `/api/v1/typed-policies`. The body is the coded envelope with `code` the string `LEGACY_POLICY_WRITE_FROZEN`. --- [API](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api.md) - [All operations](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/llms.txt) - [OpenAPI document](https://skmtc.dev/getaxonflow/apis/axonflow-orchestrator-api/revisions/f408ef3ec9dd?raw)