Create Delegation

POST 
/v1/delegations

Grant an entity (the delegate) the ability to act on the delegator's behalf, optionally attenuated to a subset of actions via scope and/or time-boxed with expires_at. The delegate borrows the delegator's authority (it needs no permissions of its own) and scope narrows what is borrowed; it can never escalate beyond what the delegator holds.

Re-delegation is supported: a delegate may itself delegate a narrower slice onward, up to DELEGATION_MAX_DEPTH hops (default 3). Authority originates at the root of the chain and every scope along the way must cover the action. Cycles are rejected at creation time.

Request

Responses

201

Delegation created

400

Invalid request, e.g. re-delegation not supported, or delegate/delegator are the same entity

401

Unauthorized

404

Delegate or delegator entity not found