Set the pending version aside
PAL-005, the hot-fix path. Closes the policy’s pending version (a draft, a submitted version, or a ratified version not in force) with status “set_aside” and a required reason, so a new draft can start from the version in force. The set-aside version stays readable and can never be ratified or put in force; bringing its changes back means rebuilding them on top of the fix. A draft bound to an authoring capability has that capability exhausted in the same transaction. Human-only. Refusals: 404 NOT_FOUND (policy or version not in this tenant); 409 INVALID_TRANSITION with details.reason — VERSION_ALREADY_IN_FORCE, VERSION_NOT_PENDING. 400 when the reason is missing or blank.
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.
Body
Required: why the pending version is set aside (e.g. a hot fix to the version in force must go first). Must contain a non-whitespace character. Recorded on the version (closed_reason) and in the audit trail.
1 - 2000.*\S.*Response
Default Response
x >= 0Lifecycle status: draft → submitted → ratified → (activated, then) superseded (or back to draft on reject); discarded = soft-discarded draft (PWB-039). A pending version that ends without governing is closed: reopened (a ratified version whose content continues as a new draft), set_aside (put aside with a reason), replaced (a draft whose correction continues as a new draft) — PAL-004/005.
draft What the codification that produced this version accounted for. Unsigned and unhashed; NOT a sealed review package.