Create Review Playbook

POST /review-playbooks

The playbook and its revision 1, in one act. A playbook with no revision resolves to nothing, so creating one without instructions would be creating a row that never applies.

Role floor

Requires admin or above. The floor is a minimum, not a grant: scope filtering still applies on top of it, and a resource in another tenant answers 404 rather than 403.

Request body — ReviewPlaybookCreate

Field	Type		Notes
slug	string	required	min length 1 max length 120
name	string	required	min length 1 max length 200
description	string | null	optional	max length 4000
templates	object	optional	—
scope	workspace | organization | platform | null	optional	—
is_default	boolean	optional	Default false.
change_note	string | null	optional	max length 500

Responses

Status	Description	Body
201	Successful Response	ReviewPlaybookView
422	Validation Error	HTTPValidationError

Only the success paths are declared

Any operation may also answer any status in the error catalogue, and every failure body is the platform envelope — including the 422 this document types as HTTPValidationError.

Example

The body shows the fields the schema always carries. Which combination is legal is a service rule the schema cannot express, so read the description above before copying this.

curl -X POST https://your-deployment.example.com/review-playbooks \
  -H "Authorization: Bearer $COBRE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
       "slug": "string",
       "name": "string"
     }'

Response — ReviewPlaybookView

Field	Type		Notes
id	string (uuid)	required	—
slug	string	required	—
name	string	required	—
description	string | null	required, nullable	—
scope	workspace | organization | platform	required	—
is_default	boolean	required	—
is_active	boolean	required	—
active_revision_id	string (uuid) | null	required, nullable	—
revision_number	integer	required	—
templates	object	required	—
organization_id	string (uuid) | null	required, nullable	—
workspace_id	string (uuid) | null	required, nullable	—
created_at	string (date-time)	required	—
updated_at	string (date-time)	required	—