Re-derive one shared credentialing group's rollups

POST 
/api/v1/anchor-groups/:anchorGroupId/shared-credentialing-workflows/:id/rollups/recompute

Reads the group's member workflows, re-derives every rollup, and writes the result if anything moved. Idempotent: a second run reports UNCHANGED and writes nothing. Use dryRun to see the delta first — this is the only gate in front of a write that can close a group to new tenant joins permanently, and a dry run reports that outcome as closedToNewJoins.

Request

Responses

200

Processed, whether or not anything was written

400

dryRun was missing, empty, or neither 'true' nor 'false'

403

The caller may not edit a credentialing workflow in the tenant-id header's tenant, or in one of the member tenants; nothing was derived or written

404

No such group, it is not in this anchor group, or the caller holds none of its member tenants

503

Recompute is not enabled in this environment