Grant an exemption to an agent
Requires org owner or admin of the agent’s org. Personal agents (no org) cannot have exemptions and receive 400. Reason is required (20–500 chars). expires_at defaults to +90 days if omitted; pass null for permanent (opt-in only). Requires Idempotency-Key. Emits a agent.exemption.granted webhook and writes a governance audit row. Triggers a recompose of the agent’s canonical cards. See ADR-008.
Authorizations
Supabase JWT token in Authorization: Bearer header
Headers
Path Parameters
Agent identifier (e.g. smolt-abc123)
Body
Template section this exemption relaxes.
autonomy.forbidden_actions, enforcement.forbidden_tools, autonomy.max_autonomous_value Business justification for the exemption (required, ≥20 chars).
20 - 500Specific patterns to exempt within the section. null exempts the entire section.
50256Expiry. Omit for default +90 days. null = permanent (explicit opt-in).