Explicitly approve or reject a high-risk workflow change after successful validation

Review does not promote the workflow. Production promotion remains a separate explicit action and revalidates the exact version, production baseline and suite fingerprint.

curl

curl -X POST \
  -H "Authorization: Bearer $FINANCEGPT_API_KEY" \
  -H "Accept: application/json"
  "https://financegptlabs.com/api/v2/workflow-studio/validation-campaigns/{uid}/review"

javascript

const response = await fetch("https:\/\/financegptlabs.com\/api\/v2\/workflow-studio\/validation-campaigns\/{uid}\/review", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${FINANCEGPT_API_KEY}`,
    Accept: 'application/json',
  },
});
const data = await response.json();

python

import json
import os
import requests

response = requests.request(
    'POST',
    'https://financegptlabs.com/api/v2/workflow-studio/validation-campaigns/{uid}/review',
    headers={
        'Authorization': 'Bearer ' + os.environ['FINANCEGPT_API_KEY'],
        'Accept': 'application/json',
    },
)
response.raise_for_status()
print(response.json())

php

<?php
$ch = curl_init('https://financegptlabs.com/api/v2/workflow-studio/validation-campaigns/{uid}/review');
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer '.getenv('FINANCEGPT_API_KEY'),
        'Accept: application/json',
    ],
]);
$response = curl_exec($ch);
curl_close($ch);
echo $response;

A developer credential proves application identity and permits only its scopes. It does not grant model promotion, policy override, QLM rebinding, or Financial Actions execution authority unless those separate controls are satisfied.

workflow:manage