opschain admin trust node-ceiling remove
packs:agentspacks:agent-governance
opschain admin trust node-ceiling remove <id> [--server <url>] [--auth-token <token>]
Removes one node-classification tier ceiling
(DELETE /api/trust/ceilings/nodes/{id}). Covered agents regain their grant
tier (still capped by any type ceiling and the remaining matching rules) on
the very next request — the trust snapshot recompiles on the write. The
removal sits on the same governance floor as every ceiling write: step-up
floored (trust.ceiling_write), packs:agent-governance gated, and audited
as info:trust:node_ceiling_removed carrying the rule it removed.
Flags
| Flag | Meaning |
|---|---|
--server <url> | Server base URL. Default: the active context, then OPSCHAIN_SERVER. |
--auth-token <token> | Admin bearer token override. Default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login for that server. |
Output
{"id": "<id>", "deleted": true}.