Approval Policies

Authentication

Authenticate with Authorization: Bearer ak_... — see API keys. Requests are scoped to one entity. Pass entityId as a query parameter, JSON field, or x-entity-id header. API keys are already pinned to an entity. A mismatched entityId returns 403.

Endpoints

List approval policies

GET /api/ledger/approval-policies?entityId={entityId}

Returns an array of approval policies.

[
  {
    "id": "policy_abc123",
    "name": "Journal entry approval",
    "trigger": "journal_entry",
    "threshold": 10000,
    "approvers": ["user_1", "user_2"]
  }
]

Create policy

POST /api/ledger/approval-policies

Body: { "entityId", "name", "trigger", "threshold?", "approvers" }

Update / Delete

PUT /api/ledger/approval-policies — body: { "entityId", "policyId", ...fields }

DELETE /api/ledger/approval-policies — body: { "entityId", "policyId" }