API ReferenceGovernance

Review Campaigns

Periodic access reviews -- managers certify their reports' access.

RPCs

Method	Path
CreateReviewCampaign	`POST /v1/governance/reviewCampaigns`
GetReviewCampaign	`GET /v1/governance/reviewCampaigns/{id}`
ListReviewCampaigns	`GET /v1/governance/reviewCampaigns`
ListReviewItems	`GET /v1/governance/reviewCampaigns/{id}/items`
SubmitReview	`POST /v1/governance/reviewItems/{id}:submit`

Base URL: https://<Domain id="api"/>

Authentication: Bearer token with governance.review:write.

Campaign created with a scope (filter over permissions) and deadline.
Items generated -- one per (reviewer, target identity, permission) triple.
Reviewers submit approve or revoke per item.
Revoke actions delete Keto tuples immediately; approve is a no-op but records attestation.
Campaign reaches completed state once every item is resolved or the deadline passes.

POST /v1/governance/reviewItems/{id}:submit

{ "decision": "REVOKE", "note": "No longer on the backend team" }

Valid decision values: APPROVE, REVOKE, MODIFY (reduces scope).

Access Requests

Create, approve, deny, and cancel time-bound access requests.

Separation of Duties

Static rules that prevent toxic combinations of permissions.