GEgetaxonflow
Decisions & Overrides

Create a session-scoped policy override (retired in v11)

Retired in v11 (PRD v11 §1.5, #4252). The workflow step gate no longer reads an ADR-044 session override (the last deciding reader, the agent's tier pass, goes with #4281), so this route writes nothing: a policy is enabled, disabled or re-actioned in the organization's typed document through /api/v1/typed-policies. The route stays registered so a caller is told where the write went.

The guards that authenticate the request answer first (the agent's proxy token, 403; the per-user identity, 401; the tenant, 400), then every caller is answered 409 LEGACY_POLICY_WRITE_FROZEN. The body is not read. The override reads (GET) are unaffected.

post/api/v1/overrides

Request

Headers

X-User-Emailstring required

Authenticated user identity (falls back to X-User-ID); missing identity is a 401

X-Tenant-IDstring required

Tenant identifier scoping the request. The AxonFlow Agent gateway sets this header after authentication; the orchestrator fails closed when it is absent (401 on audit/decision endpoints, 400 on others — see each operation). Clients cannot widen their scope through it: handlers force the tenant filter from this header, never from the request body.

X-Org-IDstring

Organization identifier. Falls back to authenticated org from the Basic auth client when omitted. Surface for callers that need to override (e.g. cross-org admin reads in Enterprise).

Request body

policy_idstring required

Policy UUID, or the human-readable slug (static) / name (dynamic)

policy_type'static' | 'dynamic' required
tool_signaturestring

Optional tool scope for the override

override_reasonstring required

Mandatory justification (ADR-044)

ttl_secondsinteger

Override lifetime in seconds. Omitted/0 defaults to 3600. Clamped server-side to [60, 86400]; the response reports any clamp.

Changes

No recorded changes to this operation across all 1 revision of this API.