AuthorityView

GET /v1/artifacts/authorities/{run} and the answer to a revocation: the record without its token and without its path.

Type object

Shape

Field	Type	Description
runrequired	RunId
workspacerequired	WorkspaceId
generationrequired	AttemptGeneration	Which attempt of a run is current - the fence §7.5 and §7.6 rely on. A monotonic counter per run, starting at [`AttemptGeneration::FIRST`]. An event, an MCP call or a session lookup carrying an older generation may not touch status, control or authority; see [`crate::AttemptGeneration::admits`]. It is a counter rather than an id so "older" is a comparison, not a lookup.
grantsrequired	array of WorkspaceId
staterequired	AuthorityState	Whether the authority still stands. A closed domain, `CHECK`ed by the database as well; a revoked record stays, marked.
created_at_msrequired	integer (int64)
revoked_at_ms	integer (int64) or null

Example

{
  "run": "00000000-0000-4000-8000-000000000000",
  "workspace": "00000000-0000-4000-8000-000000000000",
  "generation": 0,
  "grants": [
    "00000000-0000-4000-8000-000000000000"
  ],
  "state": "active",
  "created_at_ms": 0,
  "revoked_at_ms": 0
}

The contract has no example values, so example bodies are generated from each schema: every field is shown with a placeholder of its type.

Used by

Generated from contract version 1. Last updated November 12, 2026.