security.org-workflow-policy.query

List the workflow availability denylist for the current organization.

List the calling org's workflow denylist rows.

Overview

Property	Value
Workflow type	Atomic
Library	App-security
Version	1.0

Input Schema

Field	Type	Required	Default	Description
organization_uuid	uuid	No	—	Resolved server-side from the caller's token; input is advisory.
target_kind	string	No	—	Optional filter: 'namespace' or 'workflow_type'.

Output Schema

Field	Type	Required	Default	Description
organization_uuid	uuid	No	—	—
target_kind	string	No	—	Echo of optional input filter when provided.
policies	list	No	—	Denylist rows: {target_kind, target, disabled, created_by, created_at, updated_at}.
count	integer	No	—	—
failure_reason	string	No	—	—
failure_type	string	No	—	—
failed_action	string	No	—	—
failed_at_state	string	No	—	—
failed_step	string	No	—	—
failed_layer	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	Accepted
completed	No	Yes	Yes	—	Listed
failed	No	Yes	No	—	Failed

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "security.org-workflow-policy.query",
  "initial_data": {
    "organization_uuid": "value",
    "target_kind": "value"
  }
}