Skip to content
aerandil.com
GitHub

Validate Grant consent (dry-run)

POST
/v1/actions/hospitality.action.grant_consent/validate
curl --request POST \
  --url https://api.aerandil.com/v1/actions/hospitality.action.grant_consent/validate \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "branch": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "params": { "default_scope": {}, "effective_from": "2026-04-15T12:00:00Z", "effective_until": "2026-04-15T12:00:00Z", "min_cohort_size": 1, "policy_text_uri": "example", "purposes_grantable": [ "operational" ], "regulatory_basis": "example", "verified_by": "example" }, "return_modified": false }'

Dry-run of apply_hospitality_action_grant_consent’s parameter checks. No side effects, no idempotency reservation, no handler dispatch — just the schema pass plus action-level shape (target presence, target type, unknown-parameter rejection). return_modified is meaningless here and ignored.

Authorizations

Section titled “Authorizations”

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json
object
branch

Apply against an open branch’s overlay view instead of the canonical (main) plane. The action’s writes land in the branch’s copy-on-first-write overlay, its events in the branch’s own stream, and the invocation is journaled for merge-by-replay. Branch writes are action-only, so this is the write-side entry point to a branch (POST /v1/branches forks one).

string format: uuid
params
required
object
default_scope
required
Default ConsentScope applied to objects without their own scope
object
key
additional properties
any
effective_from
required
When this policy version takes effect
string format: date-time
effective_until
When this policy version is superseded
string format: date-time
min_cohort_size
Kernel-level k-anonymity floor (default 5)
integer
policy_text_uri
Opaque pointer to the human-readable policy document
string
purposes_grantable
required
Purposes this policy may grant
Array<string>
Allowed values: operational benchmark_aggregate federated_query federated_training model_distillation fraud_network
regulatory_basis
required
Regulatory regime this policy is written under (GDPR / CCPA / UK DUA …)
string
verified_by
Principal::stable_id() of the DPO sign-off, when verified
string
return_modified

When true, the response carries modified_objects and modified_links projections — the engine reads the event log inside the same transaction so the projection observes the handler’s own writes.

boolean

Responses

Section titled “Responses”

200

Section titled “200”

Validation outcome. result is valid or invalid; per-parameter diagnostics are always populated for every declared parameter so a UI can render the action’s full surface.

Media typeapplication/json
object
action
required
string
errors

Action-level errors not tied to a single parameter (missing target, target type mismatch, unknown parameter names). Absent when empty.

Array<string>
parameters
required

Per-parameter diagnostics keyed by api_name.

object
key
additional properties
object
errors
Array<string>
result
required
Allowed values: valid invalid
value
required

The serialised value the server interpreted, or null if the parameter was not supplied.

result
required
Allowed values: valid invalid
Example
{
  "parameters": {
    "additionalProperty": {
      "result": "valid"
    }
  },
  "result": "valid"
}