Reset Apply endpoint

Reset Apply permanently deletes the single workspace bound to a dedicated maintenance listener. The caller must be both a verified platform operator and an Administrator of the target workspace. The separate development maintenance profile binds the listener to host loopback port 5196. The base packaged proxy has no reset apply route.

Separate preparation from deletion

1. Use Assess a workspace reset on the bound workspace listener to inspect the signed target and its blockers. Use the authorized workspace transition to quiesce and settle work as required, then obtain a fresh Maintenance manifest.
2. Follow Review an exact reset. Match workspace, applications, storage, endpoint inventory, schema coverage, digest and expiry to the authorized target. The dedicated listener also requires independently verified replacement readiness and retirement of the old endpoints.
3. For an explicitly authorized apply, the apply_v2_workspace_reset tool takes a workspace.reset.apply program with the prepared manifestDigest, expiresAt and signature, plus the original idempotency_key. The workspace ID comes from the listener. A successful response has status: Deleted and a retained reset receipt.

Stop on stale or expired proof, unexpected inventory, schema drift, active work or a missing readiness check. If the apply response is uncertain, reconcile with the original operator, target, digest and key before considering another request. The isolated signed example and its exact-replay tests use a disposable workspace.