Skip to content

Preview accepting a relocation with zero writes

POST
/requirement_relocations/{id}/dry_run

Returns exactly what accepting the proposal would do for this destination component — or every reason it cannot run — without writing anything. This preview is the adjudication review artifact. Requires author role on the DESTINATION component only. Adjudicated proposals (declined or executed) answer 404 like a record that never existed.

Authorizations

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type
HTTP (token)

Request Body

application/json
JSON
{
  
"target_component_id": 42
}

Responses

The preview, valid or not

application/json
JSON
{
  
"valid": true,
  
"errors": [
  
],
  
"source_displayed_name": "CNTR-00-000051",
  
"target_component_id": 42,
  
"target_component_name": "Container Platform SRG",
  
"would_create": {
  
  
"title": "The application must enforce approved authorizations",
  
  
"status": "Applicable",
  
  
"derived_from_srg_rule_id": 5137
  
},
  
"would_tombstone_source": true
}

Playground

Server
Authorization
Body

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)