Submit policy version for review
Transitions a draft policy version to “submitted” state. Requires the actor to be the draft author. Blocks if another draft or submitted version exists for the same policy. The request body is intentionally omitted from the schema so callers may invoke this endpoint with no body (Fastify rejects undefined bodies when a body schema is attached).
Authorizations
MeshQu API key passed as a bearer token: Authorization: Bearer mqu_…. Mint one in the console (Settings → API keys).
Tenant UUID for multi-tenant isolation. Required on all authenticated routes — validated before authentication (middleware/tenant.ts), so a missing or non-UUID header returns 400 (MISSING_TENANT_ID / INVALID_TENANT_ID) before the API key is checked.
Response
Default Response
Lifecycle status: draft → submitted → ratified → superseded (or back to draft on reject)
draft