POST /v1/mandate/dispense

POST /v1/mandate/dispense
Authorization: Bearer <INVIOLET_API_KEY>
Content-Type: application/json

{
  "actor": "alice@example.com",
  "intent_id": "intents:customer_support_lookup",
  "prompt_id": "p_01J9X...",
  "requested_scope": {
    "operations": ["postgres.select"],
    "resources": ["contacts.first_name", "contacts.last_name"],
    "forbidden_operations": ["postgres.delete"]
  },
  "ttl_seconds": 300,
  "audience": "postgres-prod",
  "context": { "on_call": true, "geo": "us-west" },

  "broker_dispense": { "kind": "vault", "vault_role": "postgres-readonly" },

  "classification_evidence": {
    "intent_id": "intents:customer_support_lookup",
    "confidence": 0.92,
    "classification_method": "llm",
    "evaluation_layers_consulted": ["lexical", "embedding", "llm"],
    "schema_version": 1
  }
}

{
  "credential": "eyJhbGciOiJSUzI1NiIs...",
  "cred_id": "01J9X3...",
  "expires_at": "2026-05-04T20:42:01Z",
  "ttl_seconds": 300,
  "broker_dispense": {
    "kind": "vault",
    "result": {
      "kind": "minted",
      "vault_token": "hvs.CAESI...",
      "lease_duration": 300
    }
  }
}