Sandbox API

Clearance policies

Immutable published policy versions select categories, purpose, adapter, grant TTL, and retention. There is no free-form policy language.

  • GET /v1/policies lists versions for the authenticated environment.
  • POST /v1/policies creates a draft or published version (publish: true).
  • POST /v1/policies/{id}/publish publishes a draft.
  • When at least one published policy exists, POST /v1/clearance-intents must match a published policy (purpose, adapter, and category coverage) or returns policy_not_allowed.
  • Environments with zero published policies stay open for bootstrap UX.

Dashboard: Policies nav. Evidence pack includes published policies.