---
title: "Start Review Run"
method: POST
path: "/v1/internal/review-runs/{job_id}/start"
---

# Start Review Run

`POST /v1/internal/review-runs/{job_id}/start`

## Request

- Base URL: `https://api.graphify.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.graphify.com/v1/internal/review-runs/{job_id}/start`
- Auth: none declared

A review worker claiming its run: a lease, a clone token, and the callback
secret it will sign results with.

`InternalWorker` has already proved the caller holds a token minted for this
`{job_id}`. The clone token (repository-scoped, read-only) and the tenant
callback secret (derived, never stored) are minted here and returned exactly
once -- they never touch the `/result` path and are never logged.

## Path parameters

- `job_id` string, required

## Request body

- ReviewStartRequest
  - `owner` string, required
  - `leaseSeconds` integer

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/graphify/apis/graphify-control-plane.md) · [All operations](https://skmtc.dev/graphify/apis/graphify-control-plane/llms.txt) · [OpenAPI document](https://skmtc.dev/graphify/apis/graphify-control-plane/revisions/0e75c82b5ea8?raw)