Cancel a pending Decionis-managed Presence escalation
Authorization
ApiKeyAuth An organization API key. Its scopes decide what it may call;
decision:shadow is the narrowest: SHADOW evaluations through
POST /v1/authority/grants or its alias
POST /v1/authority/enforce-and-bind only (DECISION_SHADOW_MODE_DENIED
in any other mode; DECISION_SHADOW_FIELD_DENIED for a body carrying
context.decionis_policy, evidence or escalation), with no
integration dispatch. A key whose only scope is decision:shadow
(an AgentSafe hosted gateway's) reaches exactly those two,
POST /v1/auth/credential-context, POST /v1/hosted-gateway/keys/confirm
and POST /v1/hosted-gateway/keys/revoke-self; every other route
answers 403 HOSTED_GATEWAY_KEY_PATH_DENIED.
decision:enforce is an enforced hosted gateway's key: evaluations
in SHADOW or ENFORCEMENT through POST /v1/authority/grants or its
alias (400 DECISION_ENFORCE_FIELD_DENIED for a body carrying
context.decionis_policy; it never holds policy:write), and the
grants and managed escalations they bind. A key whose scopes are
decision:enforce (with or without decision:shadow) reaches exactly
POST /v1/authority/enforce-and-bind, POST /v1/authority/grants,
GET /v1/authority/grants/{grant_id},
POST /v1/authority/grants/{grant_id}/claims,
POST /v1/authority/grants/{grant_id}/receipts,
POST /v1/authority/grants/{grant_id}/reconciliations,
POST /v1/execution/verify-token, POST /v1/execution/claim-token,
POST /v1/execution/consume-token, POST /v1/execution/finalize-token,
GET /v1/authority/escalations/{escalation_id},
DELETE /v1/authority/escalations/{escalation_id},
POST /v1/auth/credential-context, POST /v1/hosted-gateway/keys/confirm
and POST /v1/hosted-gateway/keys/revoke-self, each id a UUID; every
other route answers 403 HOSTED_GATEWAY_KEY_PATH_DENIED.
In: header
Path Parameters
uuidQuery Parameters
Organization UUID. Required for platform-authenticated callers; organization API keys derive and enforce their organization from the authenticated credential.
uuidResponse Body
application/json
application/json
application/json
application/json
application/json
curl -X DELETE "https://example.com/v1/authority/escalations/497f6eca-6276-4993-bfeb-53cbbbba6f08"{ "escalation_id": "stringst", "intent_id": "05704cef-194d-4987-b2cb-c2c20c9cd88a", "action_hash": "string", "status": "PENDING_PRESENCE", "outcome": "ESCALATE_PENDING", "expires_at": "2019-08-24T14:15:22Z", "reason_codes": [ "string" ], "decision": { "decision_id": "string", "chain_id": "string", "status": "ALLOW", "should_execute": true, "authority_classification": "AUTHORITATIVE", "execution_eligible": true, "execution_binding_digest": "string", "reason_codes": [ "string" ], "action_hash": "string", "policy_version": "string", "mode": "SHADOW", "execution_token": "string", "execution_token_jti": "string", "execution_token_key_id": "string", "execution_token_expires_at": "2019-08-24T14:15:22Z", "dossier_id": "string", "dossier_sha256": "string", "dossier_url": "string", "approval_request_id": "string", "ledger_entry_id": "string", "managed_escalation": { "outcome": "ESCALATE_PENDING", "escalation_id": "stringst", "intent_id": "05704cef-194d-4987-b2cb-c2c20c9cd88a", "status": "PENDING_PRESENCE", "expires_at": "2019-08-24T14:15:22Z", "reason_codes": [ "string" ] }, "verification": { "verification_page_url": "http://example.com", "verification_url": "http://example.com", "verification_api_path": "string", "signature": "string", "signature_algorithm": "HMAC-SHA256", "signature_scheme": "hmac-v1", "link_expires_at": "2019-08-24T14:15:22Z", "link_exp": "string", "asymmetric_proof": {}, "asymmetric_proof_bundle": {} }, "escalation_requirement": { "requirement_id": "string", "expires_at": "2019-08-24T14:15:22Z", "selector": { "kind": "ROLE", "role_id": "string" }, "verification": { "provider": "string", "methods": [ "WEBAUTHN" ], "level": "STANDARD" } }, "action_manifest_digest": "string", "permit_id": "7af9675c-40fb-44dd-8fe4-46923dd592e6", "intent_sha256": "string", "expires_at": "2019-08-24T14:15:22Z" }}Read Decionis-managed Presence authorization status GET
Returns tenant-scoped orchestration state without exposing Presence credentials, invitation locators, authentication assertions, or biometric material. A normal execution grant is present only at GRANT_READY, after Decionis has independently verified Presence evidence and re-evaluated current policy for the original exact intent.
Read the Presence authority request a managed escalation asks a person to prove GET
For the caller that opened the escalation, so that a decision case of its own can name the same Presence request as its step-up and one passkey ceremony answers both. `authority_request_id` is null until Presence has the request, and for an approval chain, where each tier member has a request of their own. It is never approval evidence and carries no invitation, assertion or grant.