opschain admin trust unassign

packs:agents

opschain admin trust unassign <assignment-id> [--server <url>] [--auth-token <token>]

Removes an assets-under-management assignment (the v2 TrustService.DeleteTrustAssignment verb). The trust snapshot recompiles immediately, so the agent loses the assignment's ADVISE floor on that subtree at once — explicit trust grants on the same scope are untouched. The removal is audited.

<assignment-id> comes from opschain admin trust assignments (or opschain admin agent assignments).

Flags

Flag	Meaning
--server <url>	Server base URL. Default: the active context, then OPSCHAIN_SERVER.
--auth-token <token>	Admin bearer token override. Default: your opschain login session, then $OPSCHAIN_ADMIN_TOKEN, then the token stored by opschain admin login for that server.

Output

Always a machine document (JSON unless -o yaml):

{
  "deleted": true,
  "id": "<assignment-id>"
}

Exit codes

Code	Meaning
0	The assignment was removed.
1	The server refused or failed the request (unknown id, rejected admin token).
2	Usage — wrong arguments, or no server / admin token resolvable.

Named errors

• An unknown assignment id answers 404 — exit 1.
• a server is required — pass --server <url>, set OPSCHAIN_SERVER, or 'opschain context use <name>' — exit 2.
• this command needs a login or an admin token — run 'opschain login', pass --auth-token, set OPSCHAIN_ADMIN_TOKEN, or store one with 'opschain admin login' — exit 2.
• the server rejected the credential — run 'opschain login' again, or check the admin token — exit 1.

See also

• opschain docs cli/admin-trust-assign — the verb this undoes.
• opschain docs cli/admin-trust-assignments — find the assignment id.