Lexicon Garden

town.muni.arbiter.resetPolicy

Reset a stewarded arbiter's root policy. The caller authenticates via serviceAuth (aud = arbiter-server DID, lxm = town.muni.arbiter.resetPolicy). Only the account designated in the arbiter's `town.muni.arbiter.recovery/self` record (the recovery admin) may reset the policy. The replacement Rego source is written to `town.muni.arbiter.policy.root/self` and the arbiter is re-onboarded. If no recovery admin is set, this endpoint is unavailable (forbidden).

Repository @zicklag.dev did:plc:ulg2bzgrgs7ddjjlmhtegk3v namespace authority
Details · procedure
Kindprocedure
Authorityarbiter.muni.town
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

arbiterDid

requiredstring · did

The stewarded account whose root policy to reset.

policy

requiredstring

The replacement Rego source text for the root policy.

Output

application/json

ok

requiredboolean

Errors

ErrPermissionDenied

The caller is not the designated recovery admin, or no recovery admin is set.

ErrInvalidPolicy

The replacement policy failed to compile.