| Method | Path | Summary | Auth |
|---|---|---|---|
| GET | /v1/firewall-actions/policy | Read the desired, active, and last-known-good firewall action policy | Session |
| PUT | /v1/firewall-actions/policy | Create the next immutable firewall action policy candidate | Session |
| POST | /v1/firewall-actions/policy/recover | Create a monotonic recovery candidate from the last-known-good policy | Session |
Contract file：api/control-firewall-actions.openapi.yaml