Pasar una política a Enforce a partir de una anomalía

POST/api/public/v1/policies/{public_id}/promote

Sets mode: enforce and writes a policy_history row promoted_from_anomaly whose evidence_ref is the anomaly cited — the audit answer to why was this enforced. Evidence is resolved through I-6's tenant-scoped stored-anomaly reader; accepting an id unchecked would write an evidence_ref pointing at nothing and read, forever after, as a decision somebody backed with data. The checks that ARE live run first and in this order: submitting from a descendant layer is 409 INHERITED_HERE (you change a policy where it was authored), a policy that is not ratified is 409 NOT_RATIFIED carrying its actual status (a draft composes into nothing, so Enforce on one would enforce nothing), and a policy with no enforceable intent is 409 NOT_ACTIVATABLE with no_enforceable_atoms in details[]. Unknown, cross-tenant and archived evidence, and evidence raised by a different policy, are each 422. An agent (OAuth) caller must send the version of the policy it read: missing answers 428 POLICY_VERSION_REQUIRED, one that is no longer current 409 POLICY_VERSION_STALE.

cURL

curl --fail-with-body -X POST 'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>/promote' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"evidence_anomaly_id":"<evidence_anomaly_id>","zone_id":"<zone_id>"}'

Python

import json
import os
import urllib.request

body = '{"evidence_anomaly_id":"<evidence_anomaly_id>","zone_id":"<zone_id>"}'
request = urllib.request.Request(
    'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>/promote',
    method='POST',
    data=body.encode(),
    headers={
        'Authorization': 'Bearer ' + os.environ['OPENLATCH_API_KEY'],
        'Content-Type': 'application/json',
    },
)
with urllib.request.urlopen(request) as response:
    text = response.read().decode()
    print(json.dumps(json.loads(text), indent=2) if text else response.status)

Bash

#!/usr/bin/env bash
set -euo pipefail

curl -sS --fail-with-body -X POST 'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>/promote' \
  -H "Authorization: Bearer $OPENLATCH_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{"evidence_anomaly_id":"<evidence_anomaly_id>","zone_id":"<zone_id>"}' | jq .

PowerShell

$headers = @{
  Authorization = "Bearer $env:OPENLATCH_API_KEY"
}
$body = '{"evidence_anomaly_id":"<evidence_anomaly_id>","zone_id":"<zone_id>"}'
Invoke-RestMethod -Method POST -Uri 'https://app.openlatch.ai/api/public/v1/policies/<policy_public_id>/promote' -Headers $headers -ContentType 'application/json; charset=utf-8' -Body $body | ConvertTo-Json -Depth 20

Autorización

Rol en la organización	Este punto de conexión
owner	Permitido
admin	Permitido
editor	Permitido
viewer	No permitido

Una clave tiene el rol que su propietario ocupa en la organización. Consulte Autenticación.

Ámbito de la clave de API: policies:write

Parámetros de ruta

Parámetro	Tipo	Descripción
public_id	string	Obligatorio.

Parámetros de encabezado

Parámetro	Tipo	Descripción
Idempotency-Key	string or null	Optional. Makes the request safe to retry: the same key and the same request, within 24 hours, returns the stored response with Idempotent-Replayed: true and runs once.

Cuerpo de la solicitud

Campo	Tipo	Descripción
evidence_anomaly_id	string	Obligatorio.
version	integer or null	The version of the policy the caller read. Required of an agent (OAuth) caller: missing answers 428 POLICY_VERSION_REQUIRED, a version that is no longer current 409 POLICY_VERSION_STALE.
zone_id	string (uuid) or null

Respuesta

• 200 OK — la llamada se completó correctamente.
• 400 Bad Request — BAD_REQUEST
• 401 Unauthorized — UNAUTHORIZED
• 402 Payment Required — license_expired
• 403 Forbidden — FEATURE_DISABLED, FORBIDDEN, INSUFFICIENT_SCOPE
• 404 Not Found — NOT_FOUND
• 409 Conflict — CONFLICT, IDEMPOTENCY_IN_PROGRESS, INHERITED_HERE, LOOSENS_LAYER, NOT_ACTIVATABLE, NOT_ATTACHED, NOT_RATIFIED, POLICY_VERSION_STALE, SAME_LAYER_CONFLICT, ZONE_REQUIRED
• 422 Unprocessable Content — IDEMPOTENCY_KEY_REUSED, INVALID_ID, VALIDATION_ERROR
• 428 Precondition Required — POLICY_VERSION_REQUIRED
• 429 Too Many Requests — TOO_MANY_REQUESTS
• 500 Internal Server Error — INTERNAL_SERVER_ERROR, tenant_isolation_violation
• 503 Service Unavailable — ENGINE_UNAVAILABLE, EVIDENCE_UNAVAILABLE, FEATURE_STATE_UNAVAILABLE, PROOF_UNAVAILABLE, SERVICE_UNAVAILABLE

Campos de la respuesta

Campo	Tipo	Descripción
data	object	Obligatorio. One policy as a zone's list serves it.
data.anomalies_7d	integer
data.attached_here	boolean	Whether the viewed zone holds its own attachment.
data.attachment_mode	string — one of disabled, monitor, enforce or null	The viewed zone's own attachment mode; null when it only inherits the AIP.
data.coverage	object	Obligatorio. D-66 — installs counted from stamped negotiation, never from mode + recent poll.
data.coverage.compatibility_unavailable_installs	integer	Obligatorio.
data.coverage.enforced_installs	integer	Obligatorio.
data.dimensions	array of string	Obligatorio.
data.display_title	string	The AIP's name: its title, else its generated_title, else its statement.
data.effective_layer	object or null	The zone whose attachment sets effective_mode when it is not layer; null otherwise.
data.effective_layer.inherited	boolean	Obligatorio.
data.effective_layer.label	string	Obligatorio.
data.effective_layer.unit_id	string	Obligatorio.
data.effective_layer.zone_id	string	Obligatorio.
data.effective_mode	string — one of disabled, monitor, enforce or null	The mode the AIP runs in at the viewed zone: the strictest attachment on its path.
data.id	string	Obligatorio.
data.intents	object	Obligatorio. How many of the policy's atoms are actually enforceable.
data.intents.enforceable	integer	Obligatorio.
data.intents.monitor_only	integer	Obligatorio.
data.intents.total	integer	Obligatorio.
data.layer	object	Obligatorio. The layer a policy row is labelled with: the zone being viewed when it holds the AIP, else the zone whose attachment sets its mode there. `inherited` is true when the viewed zone holds no attachment of it.
data.layer.inherited	boolean	Obligatorio.
data.layer.label	string	Obligatorio.
data.layer.unit_id	string	Obligatorio.
data.layer.zone_id	string	Obligatorio.
data.mode	string	Obligatorio. Deprecated: attachment_mode when the viewed zone holds it, else effective_mode.
data.preset	object or null
data.preset.application_id	string	Obligatorio.
data.preset.preset_id	string	Obligatorio.
data.preset.preset_name	string	Obligatorio.
data.preset.preset_policy_key	string	Obligatorio.
data.preset.preset_version	integer	Obligatorio.
data.public_id	string	Obligatorio.
data.statement	string	Obligatorio.
data.status	string	Obligatorio.
data.version	integer	Obligatorio.

Ejemplo de respuesta

{
  "data": {
    "anomalies_7d": 0,
    "attached_here": false,
    "attachment_mode": "disabled",
    "coverage": {
      "compatibility_unavailable_installs": 3,
      "enforced_installs": 3
    },
    "dimensions": [
      "string"
    ],
    "display_title": "",
    "effective_layer": {
      "inherited": false,
      "label": "string",
      "unit_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "zone_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10"
    },
    "effective_mode": "disabled",
    "id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
    "intents": {
      "enforceable": 3,
      "monitor_only": 3,
      "total": 3
    },
    "layer": {
      "inherited": false,
      "label": "string",
      "unit_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "zone_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10"
    },
    "mode": "string",
    "preset": {
      "application_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "preset_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
      "preset_name": "release-bot",
      "preset_policy_key": "string",
      "preset_version": 3
    },
    "public_id": "3f6c1a2e-8b4d-4c1f-9a7e-0d5b2c8e4f10",
    "statement": "string",
    "status": "string",
    "version": 3
  }
}

Véase también

• POST State sentences as a policy
• DELETE Delete a policy
• GET Leer una política ratificada