Revoke Exchange (any non-terminal -> REVOKED) — irreversible

Moves a non-terminal Cryptographic Exchange to REVOKED, populates
revokedAt / revokedBy / revokedReason

atomically with the transition, and invalidates the linked Capability Grant
projection. Terminal and irreversible.

This is the ONE operation in the family whose justification has TWO homes: the
revokedReason property of the resource, and canonical position 21 of

the signed AdminAuditEvent. Both are written from the SAME submitted value, so a
divergence between them is a defect and not a degree of freedom.

reason is MANDATORY (PRD 231), bounded at

AuditFieldBounds.MAX_REASON_LENGTH (1,000 UTF-8 BYTES, not
characters) - the same bound applied
before signing - and NEVER written to a log line (231.19).

Authorization: requires scope admin.tenant.exchange.revoke.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
uuid
required
Body Params

Optimistic-lock version plus the mandatory operator justification.

Revoke a Cryptographic Exchange (irreversible). The reason is mandatory; it is persisted to revoked_reason and signed into the audit record at canonical position 21.

int32
required

JPA @Version optimistic-lock discriminator, as last read from the exchange detail response. A stale value is refused with 409.

string
required
length between 1 and 1000

Operator-supplied justification (free text). Persisted to revoked_reason and recorded verbatim at canonical position 21 of the signed admin audit event.

Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
Responses

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
application/problem+json