> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rotavision.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Resolve Draft

> Dry-run against DRAFT (unsaved) rules — the wizard previews a sample user
before anything is written. No DB read; resolves the provided rules only.



## OpenAPI

````yaml /api-reference/openapi.json post /api/v1/admin/entitlement-rules/resolve-draft
openapi: 3.1.0
info:
  title: Sakshi — Agent Governance API
  description: >-
    Registry (KYA), decision flight recorder, bounded autonomy, evidence packs,
    fairness screens. Auth: bearer ingest keys create evidence; OIDC JWTs with
    governance roles mutate state.
  version: 0.1.0
servers:
  - url: https://demo.rotavision.com
    description: Public demo (read-only, synthetic data)
  - url: https://{host}
    description: Your Sakshi deployment (single-tenant, in your environment)
    variables:
      host:
        default: sakshi.your-company.internal
security:
  - bearerAuth: []
paths:
  /api/v1/admin/entitlement-rules/resolve-draft:
    post:
      tags:
        - access
      summary: Resolve Draft
      description: >-
        Dry-run against DRAFT (unsaved) rules — the wizard previews a sample
        user

        before anything is written. No DB read; resolves the provided rules
        only.
      operationId: resolve_draft_api_v1_admin_entitlement_rules_resolve_draft_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ResolveDraftIn'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResolveOut'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    ResolveDraftIn:
      properties:
        rules:
          items:
            $ref: '#/components/schemas/DraftRule'
          type: array
          title: Rules
          default: []
        roles:
          items:
            type: string
          type: array
          title: Roles
          default: []
        groups:
          items:
            type: string
          type: array
          title: Groups
          default: []
        user_ids:
          items:
            type: string
          type: array
          title: User Ids
          default: []
        trust_canonical:
          type: boolean
          title: Trust Canonical
          default: true
      type: object
      title: ResolveDraftIn
    ResolveOut:
      properties:
        roles:
          items:
            type: string
          type: array
          title: Roles
        org_units:
          items:
            type: string
          type: array
          title: Org Units
      type: object
      required:
        - roles
        - org_units
      title: ResolveOut
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    DraftRule:
      properties:
        match_on:
          type: string
          title: Match On
        claim_value:
          type: string
          title: Claim Value
        match_mode:
          type: string
          title: Match Mode
          default: exact
        grants_role:
          anyOf:
            - type: string
            - type: 'null'
          title: Grants Role
        grants_org_unit:
          anyOf:
            - type: string
            - type: 'null'
          title: Grants Org Unit
      type: object
      required:
        - match_on
        - claim_value
      title: DraftRule
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
              - type: string
              - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
        - loc
        - msg
        - type
      title: ValidationError
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: Ingest API key or OIDC JWT. See /authentication.

````