Alignment

Update enforcement settings

PATCH applies RFC 7396 JSON Merge Patch to the enforcement block (fine-grained tool-use policy (forbidden patterns, unmapped severity, grace window)). null deletes a key; missing keeps; present replaces. Arrays are replaced wholesale (not item-merged). Requires Idempotency-Key and If-Match. Authorization: team_id is resolved to its owning organization from the DB and the caller must be an owner/admin of that org (or a platform admin); team_admin grants are not honored on this sub-resource. A team in an org the caller does not belong to returns the same 404 as a nonexistent team; a member without that role receives 403. No other tenant's manifest can be changed.

patch/alignment/team/{team_id}/enforcement

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/alignment/team/{team_id}/enforcement
  • Auth: one of:
    • HTTP bearer
    • API key in header X-Mnemom-Api-Key
    • API key in cookie mnemom_session

Path parameters

team_idstring required

Team identifier (UUID)

Headers

Idempotency-Keystring required

Client-supplied idempotency token. Replays within 24 hours return the stored result verbatim. See ADR-023.

If-Matchstring required

Optimistic concurrency token. Pass the ETag from a recent GET ("sha256:<hex64>" shape). A stale ETag returns 412 Precondition Failed; a missing header returns 428 Precondition Required. See RFC 9110 §13.1.1.

Request body

allow_unmapped_toolsboolean
default_unmapped_severity'low' | 'medium' | 'high' | 'critical'
forbidden_toolsobject[]
grace_period_hoursnumber

Response

The enforcement primitive was updated at the team scope.

oktrue required
scope'team' required
scope_idstring required
resource'alignment' required
primitive'enforcement' required
verb'put' | 'patch' required
content_hashstring required

New sha256:<hex64> of the spec at this scope after the write.

agents_flagged_for_recomposeinteger
_warningsobject

Pre-existing structural issues outside the modified primitive. Present only when the existing spec carries unrelated validation problems; never blocks the write.

Changes

No recorded changes to this operation across all 1 revision of this API.