---
title: "Validate a tenant redaction policy without saving it"
method: POST
path: "/redaction/policies/validate"
tags: ["redaction-policies"]
---

# Validate a tenant redaction policy without saving it

`POST /redaction/policies/validate`

Normalizes and validates a schema version 1 tenant policy, then returns the canonical definition and behavior digest without accessing the tenant policy store. Required scope: `policy:redaction:manage`.

## Request body

- CreateRedactionPolicyRequest — Tenant policy input. After normalization, description and businessConfidential together must fit in 8 KiB canonical UTF-8 JSON. Raw request bodies are limited to 64 KiB.
  - `name` string, required
  - `description` string, nullable
  - `businessConfidential` RedactionPolicyBusinessConfidential, required
    - `definition` string, required
    - `include` RedactionPolicyBusinessTarget[], required
      - `text` string, required
      - `mode` 'exact' | 'value_clause' | 'exact_or_value_clause', required
    - `exclude` string[], required
    - `examples` string[], required

## Response `200`

Policy is valid

- ValidateRedactionPolicyResponse
  - `name` string, required
  - `schemaVersion` 1, required
  - `definition` RedactionPolicyDefinition, required
    - `enabledCategories` string[], required
    - `businessConfidential` RedactionPolicyBusinessConfidential, required
      - `definition` string, required
      - `include` RedactionPolicyBusinessTarget[], required
        - `text` string, required
        - `mode` 'exact' | 'value_clause' | 'exact_or_value_clause', required
      - `exclude` string[], required
      - `examples` string[], required
  - `contentDigest` string, required

## Other responses

- `400` — Bad Request - policy schema, normalization, size, quota, cursor, or path validation failed
- `401` — Unauthorized - Authentication failed
- `403` — Forbidden - requires an API key with the `policy:redaction:manage` scope; Dashboard bearer authentication is rejected

## Changes

> 65 revisions in range; 12 not diffed.

- **2026-08-03** `8e90404f8bf2` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/qlonolink/apis/qaip-apis/changes/redaction/policies/validate/post.md)

---

[API](https://skmtc.dev/qlonolink/apis/qaip-apis.md) · [All operations](https://skmtc.dev/qlonolink/apis/qaip-apis/llms.txt) · [OpenAPI document](https://skmtc.dev/qlonolink/apis/qaip-apis/revisions/430440bbcc56?raw)