Skip to content

Validate a stored or supplied policy body and return structured errors.

POST
/v1/policies/{policy_version}/validate

Supplied bodies are validated as copies and are not persisted. Stored draft or rejected bodies persist validation summary only when manifest_hash matches. Published and archived policies are never mutated by validate.

policy_version
required
string
>= 1 characters
tenant_id
string
>= 1 characters
environment_id
string
>= 1 characters
object
manifest_hash
string
/^sha256:[a-f0-9]{64}$/
body
object
actor_id

Rejected if supplied; actor is derived from authentication context.

string

Validation result.

object
schema_version
required
policy_version
required
string
>= 1 characters
manifest_hash
required
string
/^sha256:[a-f0-9]{64}$/
valid
required
boolean
rule_count
required
integer
errors
required
Array<object>
object
reason_code
required
string
/^[a-z0-9_]+$/
message
required
string
>= 1 characters
line
required
integer | null
>= 1
column
required
integer | null
>= 1
path
required
string
>= 1 characters

Missing policy.validate.

Hash mismatch.

Type set in Geist, Source Serif 4, and Departure Mono.