release: align governed tenant erasure
This commit is contained in:
@@ -2007,6 +2007,20 @@
|
||||
"rationale": "Published integration, interoperability, public-participant, or health endpoint.",
|
||||
"repository": "govoplan-soap"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "GET",
|
||||
"path": "/admin/tenant-erasure-policy",
|
||||
"rationale": "Tenant-erasure policy is a consequential operator API with recent-authentication and dedicated-permission gates.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "PATCH",
|
||||
"path": "/admin/tenant-erasure-policy",
|
||||
"rationale": "Tenant-erasure policy is a consequential operator API with recent-authentication and dedicated-permission gates.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "GET",
|
||||
@@ -2014,6 +2028,48 @@
|
||||
"rationale": "Tenant deletion preflight is an administrative safety API consumed before a destructive workflow.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "POST",
|
||||
"path": "/admin/tenants/{}/erasure-operations",
|
||||
"rationale": "Tenant erasure is an audited, provider-driven operator workflow whose API exposes the complete review and recovery evidence.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "GET",
|
||||
"path": "/admin/tenants/{}/erasure-operations/{}",
|
||||
"rationale": "Tenant erasure is an audited, provider-driven operator workflow whose API exposes the complete review and recovery evidence.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "POST",
|
||||
"path": "/admin/tenants/{}/erasure-operations/{}/approve",
|
||||
"rationale": "Tenant-erasure approval requires typed confirmation, recent authentication, and a distinct authorized account.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "POST",
|
||||
"path": "/admin/tenants/{}/erasure-operations/{}/cancel",
|
||||
"rationale": "Tenant-erasure cancellation is a recovery control available only before destructive work starts.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "POST",
|
||||
"path": "/admin/tenants/{}/erasure-operations/{}/execute",
|
||||
"rationale": "Tenant-erasure execution is a consequential operator API with provider checkpoints and fail-closed reconciliation.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "intentionally_headless",
|
||||
"method": "POST",
|
||||
"path": "/admin/tenants/{}/erasure-operations/{}/reconcile",
|
||||
"rationale": "Tenant-erasure reconciliation resumes idempotent provider steps after pending or outcome-unknown effects.",
|
||||
"repository": "govoplan-tenancy"
|
||||
},
|
||||
{
|
||||
"category": "compatibility",
|
||||
"method": "POST",
|
||||
|
||||
Reference in New Issue
Block a user