Open Change Request

Open a CAB ticket wrapping a proposed diff (risk_class + planned_window + reviewers) before Publish.

POST/api/v1/workflows/dispatch

Request

curl -X POST "<BASE_URL>/api/v1/workflows/dispatch" \
  -H "Authorization: Bearer <ACCESS_TOKEN>" \
  -H "X-CQRS-Action: OPEN_CHANGE_REQUEST" \
  -H "Content-Type: application/json" \
  -d '{
    "base_version_hash": [
      1
    ],
    "definition_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "opened_by": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
    "proposed_diff_hash": [
      1
    ],
    "reviewer_slots": [
      "SUPER_ADMIN"
    ],
    "risk_class": "STANDARD",
    "target_version": {
      "major": 1,
      "minor": 125000,
      "patch": 1
    },
    "tenant_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7"
  }'

Authorization

Minimum role: ManagerThe caller must hold this role or a higher one.
Action: OPEN_CHANGE_REQUEST

Headers

AuthorizationstringRequired
Access token of the signed-in user, as a Bearer token. It identifies the user, their role and the workspace.
X-CQRS-ActionstringRequired
Names the command to run. Must be OPEN_CHANGE_REQUEST for this endpoint.
Content-TypestringRequired
Always application/json.
X-Idempotency-KeystringOptional
A key you choose that is unique to this attempt. A command repeated with the same key is not applied a second time.
X-Correlation-IdstringOptional
Your own identifier for the request. Returned in the x-correlation-id response header; generated when you leave it out.

Request body

base_version_hasharray of integerRequired
No description yet.
at least 0
definition_iduuidRequired
No description yet.
opened_byuuidRequired
No description yet.
proposed_diff_hasharray of integerRequired
No description yet.
at least 0
reviewer_slotsarray of enumRequired
No description yet.
Allowed values
- SUPER_ADMIN
- TENANT_ADMIN
- MANAGER
- REP
- VIEWER
- DEAL_DESK_APPROVER
- REV_OPS_ADMIN
- FINANCE
- EXTERNAL_AUDITOR
- AGENT
- SYSTEM
SYSTEM
Internal system actor — autonomous orchestrator, scheduled job, or other non-human dispatcher. Distinct from Agent (autonomous AI agent acting on behalf of a user) because system actions bypass some user-scoped guards (e.g. "this user can't see X").
risk_classenumRequired
WorkflowChangeRequest.risk_class per ITIL change taxonomy.
Allowed values
- STANDARD
- NORMAL
- EMERGENCY
target_versionobjectRequired
No description yet.
3 child fields
- majorintegerRequired
  No description yet.
  at least 0
- minorintegerRequired
  No description yet.
  at least 0
- patchintegerRequired
  No description yet.
  at least 0
tenant_iduuidRequired
No description yet.
decision_due_bydate-time or nullOptional
No description yet.
linked_pr_urlstring or nullOptional
No description yet.
linked_service_now_ticketstring or nullOptional
No description yet.
planned_windowstring or nullOptional
No description yet.

Response

Status 202. The command was applied. The body reports the outcome and, where the command changes a record, that record's new state.

successbooleanRequired
true when the command was applied.
error_messagestringRequired
Empty when the command was applied.
projected_stateobjectOptional
The record as it stands after the command.
event_payloadobjectOptional
The event the command recorded.
insightsarray of objectOptional
Advisory notes about the result. Each has a code, a message and an impact number.

Errors

Every error carries an HTTP status. Where it also carries a code, branch on the code, not on the message.

400X-CQRS-Action is missing or names a command this route does not accept. Send OPEN_CHANGE_REQUEST.
400DOMAIN_ROUTINGThe body is not a valid command. Check the required fields and their types.
401The access token is missing, expired or not valid.
401L1_AUTHThe caller's role is below manager or the caller has no access to this record.
403L1_POLICYA business rule refused the command. The message names the rule.
409L1_IDEMPOTENCYA command with this idempotency key was already applied.
409CONFLICTThe command would duplicate a record that must be unique.
500L3_COMMITThe command was valid but could not be saved.