Withdraw an approved stack profile summary (browser session)

Reads and decisions use the primary database with fresh permission, credential and source checks. Responses are private/no-store. Summary revisions never create or advance a workload profile version. No request accepts snapshots, approval identities or provider configuration.

POST /org/stack-profiles/{profile_id}/versions/{version}/summary/withdraw

Withdraw an approved stack profile summary (browser session)

Python

import requests

url = "https://api.platform.ankra.app/org/stack-profiles/{profile_id}/versions/{version}/summary/withdraw"

payload = { "expected_summary_revision": 1 }
headers = {
    "cookie": "ankra_session=",
    "X-Ankra-CSRF": "<x-ankra-csrf>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

200

{
  "state": "available",
  "summary_revision": 1,
  "schema_version": 1,
  "policy_version": "<string>",
  "outcomes": [
    {
      "kind": "logging",
      "claims": [
        {
          "fact_id": "<string>",
          "resource_id": "<string>",
          "subject_id": "<string>",
          "statement": "<string>",
          "applicability": "fixed",
          "scope_id": "<string>",
          "condition": {
            "operator": "equals",
            "parameter_id": "<string>",
            "equals": true,
            "children": "<array>"
          }
        }
      ]
    }
  ],
  "coverage": [
    {
      "resource_id": "<string>",
      "reason": "unsupported_format"
    }
  ],
  "parameters": [
    {
      "id": "<string>",
      "default": true
    }
  ]
}

Authorizations

ankra_session · string · cookie · required

Browser session. Mutations also require X-Ankra-CSRF.

Headers

X-Ankra-CSRF · string · required

Must match the authenticated browser CSRF cookie.

Path Parameters

profile_id · string<uuid> · required

version · integer · required

Required range: x >= 1

Body

application/json

Strict JSON, maximum 8192 bytes. Repeated and unknown object fields are rejected without echoing values.

expected_summary_revision · integer · required

Required range: x >= 0

reason · enum<string> · required

Available options: incorrect_claim, sensitive_content, outdated_policy, author_request

Response

200

application/json

Current authorized summary state

Option 1

Option 2

Option 3

Exact-version approved projection. Database failures are errors, never absent. With no approved summary, retain the existing profile description and resource inventory.

state · enum<string> · required

Available options: available

summary_revision · integer · required

Required range: x >= 0

schema_version · enum<integer> · required

Available options: 1

policy_version · string · required

outcomes · object[] · required

Maximum array length: 5

Show child attributes

coverage · object[]

Maximum array length: 256

Show child attributes

parameters · object[]

Maximum array length: 64

Show child attributes