vault

Declare this vault's epoch secret exposed (owner + step-up)

Owner + step-up (gitvault.rotate, protocol rev 42 D199). Declares reason:"epoch_secret_exposed" admissible — deliberately VAULT-scoped, not org-wide: one vault's leaked secret is not evidence any sibling vault is compromised. Advances the vault's own epoch_secret_exposure_version counter, cleared only by a COMMITTED rotation bound to it.

post/vaults/v1/{vault_id}/epoch-secret-exposure

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/vaults/v1/{vault_id}/epoch-secret-exposure
  • Auth: one of:
    • API key in header SIGN-IN-WITH-X
    • HTTP bearer

Path parameters

vault_idstring required

The vault id (src_<32 hex>); the wire field is repo_id (protocol D185).

Headers

SIGN-IN-WITH-Xstring required

SIWX auth header — base64-encoded JSON payload containing a signed CAIP-122 (EIP-4361) message. See https://docs.x402.org/extensions/sign-in-with-x.

Response

The vault's exposure counter after the declaration

epoch_secret_exposure_versionstring

Changes

No recorded changes to this operation across all 1 revision of this API.