Approve a pending CertOps job
POST/api/v1/workspaces/:id/certops/jobs/:jobId/approve
Grants the human approval a gated job needs before an agent can claim it. Session-only manager surface (internal worker credentials are rejected) with a non-requester rule: the user who requested the job cannot approve it. The approval is bound to a canonical SHA256 hash of the job payload at decision time; if the payload changes afterwards the claim path voids the approval and returns the job to pending_approval. Available while the workspace kill switch is paused.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 409
- 500
Job approved; status moves to approved and the payload hash is recorded
Bad request
Unauthorized
Caller lacks the manager role, is the job requester, or uses non-session credentials (CERTOPS_APPROVAL_SELF_APPROVAL_FORBIDDEN)
Job not found in this workspace
Job is not awaiting approval (CERTOPS_APPROVAL_JOB_NOT_PENDING_APPROVAL)
Internal server error