Opens an emergency window.

POST

/v1/m/governance/breakglass

curl --request POST \
  --url https://example.com/v1/m/governance/breakglass \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "expires_in_seconds": 1, "match_action": "example", "reason": "example" }'

• this engine

Opens an emergency window. Admin-tier; a REAL human only (a system token has no stable identity for the review SoD to key on); justification required; time-boxed; blocked while any prior grant is unreviewed (the forced-post-review backpressure: you cannot stack emergencies over an unexamined one).

Authorizations

• bearerAuth

Parameters

Header Parameters

X-Olivares-Tenant

string format: uuid

Target tenant id; required when the principal can act in more than one tenant.

Request Body ^required

Media type application/json

object

expires_in_seconds

Any of:

integer

Values at or below zero, null, and omission select the 3600-second default.

integer format: int64

<= 86400

null

null

match_action

Any of:

string

Empty or * covers every action; otherwise exact match or one trailing * prefix wildcard; capped at 128 bytes.

string

null

null

reason

required

Mandatory justification, trimmed and capped at 4096 bytes.

string

/.*\S.*/

Example ^generated

{
  "expires_in_seconds": 1,
  "match_action": "example",
  "reason": "example"
}

Responses

200

OK

Media type application/json

object

Example ^generated

{}

400

Bad request

Media type application/json

object

Example ^generated

{}

401

Unauthenticated

Media type application/json

object

Example ^generated

{}

403

Forbidden

Media type application/json

object

Example ^generated

{}

404

Not found

Media type application/json

object

Example ^generated

{}

409

Conflict / setup required

Media type application/json

object

Example ^generated

{}

429

Rate limited

Media type application/json

object

Example ^generated

{}