Get Denial
Get one budget-denial episode by its unique ID.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.
- Token URL
- /auth/v1/token
Path Parameters
Unique identifier for the denial episode.
Response
GetDenialResponse contains a denial episode and its first-refusal context.
GetDenialResponse contains a denial episode and its first-refusal context.
DenialEpisode represents repeated budget refusals for one scope and budget period.
DenialMoneySnapshot captures account amounts at the first refusal.
AdmissionTrace is the bounded authority decision committed with a reservation. It stores typed row references and resolved limits, never full authority rows. Relevant absences remain explicit because a row created between resolution and commit is the fail-open half of the pin set.
Reservation.expires_at is the Dynamo TTL attribute, so this trace supports in-flight atomicity and bounded operational diagnosis only. The durable copy belongs on M2's per-call usage record.