Skip to content

Read Purpose grant as of a watermark

GET
/v1/object-types/hospitality.purpose_grant/objects/{id}/as-of
curl --request GET \
--url 'https://api.aerandil.com/v1/object-types/hospitality.purpose_grant/objects/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/as-of?at=example' \
--header 'Authorization: Bearer <token>'

Time-travel read: the instance as it stood at the at watermark, reconstructed by folding its structural events. Property values that were marking-redacted or truncated in the event log surface as sentinel objects, not values.

One principal’s hold on an access_purpose: requested with a recorded rationale, approved through an ordinary 0020 approval gate (the grant implements the approvable interface; the gate decision transitions it), alive until expires_at (the §9.1 sweep expires it — the grant implements expirable) or an operator revocation. Terminal grants are kept: the row is the audit answer to who could touch this marking, under what purpose, on whose approval, and why.

id
required
string format: uuid

Object id (UUID v7, server-generated at create time).

at
required
string

The watermark: an event seq (integer, canonical — the /v1/events cursor namespace) or an RFC3339 timestamp (resolved to the latest seq at or before it in the tenant’s stream).

The reconstructed as-of state.

Media typeapplication/json
object
at
required
string
events_applied
required
integer
id
required
string format: uuid
last_event_seq
required
integer
last_event_ts
required
string format: date-time
object_type
required
Allowed value: hospitality.purpose_grant
properties
required

Log-shaped folded bag: each entry is a typed {kind, value} object, a {redacted: [markings]} sentinel, or a {truncated_bytes: n} sentinel.

object
key
additional properties
any
Example
{
"object_type": "hospitality.purpose_grant"
}

Object did not exist at the watermark (not yet created, or already deleted).

Malformed at, or the object’s history predates structural event images and cannot back a faithful reconstruction.