opschain approval-policies
packs:change-governance
opschain approval-policies <subcommand>
Manages the change-governance approval policies: the matrix rows the create funnel matches every change and
workflow-run create against. Needs a PostgreSQL-backed server holding the
packs:change-governance entitlement; policy writes additionally require
the delegable change-governance determination (updatable on
/governance/change<scope>) and a stepped-up session
(opschain elevate).
Subcommands
| Subcommand | Meaning |
|---|---|
list | List the approval policies (readable by any authenticated user). |
create | Create a policy — one row of the change matrix. |
update <id> | Update a policy; only the flags you pass change. |
delete <id> | Delete a policy. |
convert-settings-approvers | Convert the retired settings requires_approval_from entries into approval policies. |
convert-step-gates | Convert the step-level requires_approval_from wait gates into approval policies (the gates stay enforced; workflow YAML is never edited). |
See opschain docs change-governance for the model.