Decision Gate API reference · mansoq-core

Declared route and availability

This resource is declared in mansoq-core at /api/v1/facility/{facility_external_id}/rcm/gates/. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Every open decision gate, and which configuration rows it is blocking.

Closing a gate requires a resolver, a resolving source and a closure test id. The service refuses anything less and the database CHECK refuses it again, so a gate cannot be closed by assertion from any path.

Operation map

list · GET

GET /api/v1/facility/{facility_external_id}/rcm/gates/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

retrieve · GET

GET /api/v1/facility/{facility_external_id}/rcm/gates/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

close · POST

Resolve a gate. The closure facts are required, and named together.

Every missing element is reported in one refusal rather than one per round-trip, and as the typed gate_closure_incomplete rather than a generic "field is required": a gate cannot be closed by assertion, and the operator is owed the whole list of what would close it.

POST /api/v1/facility/{facility_external_id}/rcm/gates/{external_id}/close/ — action close. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_publish_rcm_configuration_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: gate_service.GateClosureIncompleteError (dynamic detail; inspect source); PermissionDenied: Cannot publish RCM configuration; ValidationError: Request body must be an object; _approval_refusal: named_reviewer_required; PermissionDenied: Cannot read RCM configuration.

accept_risk · POST

Accept the risk: a named person and a written note, never a default.

POST /api/v1/facility/{facility_external_id}/rcm/gates/{external_id}/accept_risk/ — action accept_risk. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_publish_rcm_configuration_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot publish RCM configuration; ValidationError: Request body must be an object; _approval_refusal: named_reviewer_required; ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot read RCM configuration.

not_applicable · POST

Declare the gate inapplicable to this deployment, with a note.

POST /api/v1/facility/{facility_external_id}/rcm/gates/{external_id}/not_applicable/ — action not_applicable. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_publish_rcm_configuration_in_facility, can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot publish RCM configuration; ValidationError: Request body must be an object; _approval_refusal: named_reviewer_required; ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot read RCM configuration.

sweep · GET

GATE-01: every already-active row naming a still-open gate.

An empty result is the invariant holding, and it is reported as such rather than as silence.

GET /api/v1/facility/{facility_external_id}/rcm/gates/sweep/ — action sweep. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_rcm_configuration_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read RCM configuration.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.