Skip to main content
PATCH
Update autonomy settings

Authorizations

Authorization
string
header
required

Supabase JWT token in Authorization: Bearer header

Headers

Idempotency-Key
string
required

Client-supplied idempotency token. Replays within 24 hours return the stored result verbatim. See ADR-023.

Required string length: 1 - 128
If-Match
string
required

Optimistic concurrency token. Pass the ETag from a recent GET ("sha256:<hex64>" shape). A stale ETag returns 412 Precondition Failed; a missing header returns 428 Precondition Required. See RFC 9110 §13.1.1.

Pattern: ^"sha256:[0-9a-f]{64}"$

Path Parameters

scope_id
enum<string>
required

Always default — the platform scope is a singleton; any other value returns 400 with care-framed guidance pointing at default.

Available options:
default

Body

application/json
bounded_actions
string[]
forbidden_actions
string[]
escalation_triggers
object[]
max_autonomous_value
object

Response

The autonomy primitive was updated at the platform scope.

ok
boolean
required
scope
enum<string>
required
Available options:
platform
scope_id
string
required
resource
enum<string>
required
Available options:
alignment
primitive
enum<string>
required
Available options:
autonomy
verb
enum<string>
required
Available options:
put,
patch
value
object
required
content_hash
string
required

New sha256:<hex64> of the spec at this scope after the write.

agents_flagged_for_recompose
integer
Required range: x >= 0
_warnings
object

Pre-existing structural issues outside the modified primitive. Present only when the existing spec carries unrelated validation problems; never blocks the write.