> ## Documentation Index > Fetch the complete documentation index at: https://docs.causeloop.ai/llms.txt > Use this file to discover all available pages before exploring further. # Update a corrective action plan > Requires the `caps.write` permission + CSRF. Optimistic concurrency: the request body must carry `expected_version`; a mismatch returns 409 ("refresh and retry"). A `status` change is checked against a fixed transition table (`proposed` -> `approved` -> `in_progress` -> `blocked`/`completed` -> `verified`/`rejected`); an out-of-order transition returns 422. On success, increments the CAP's version, writes an `audit_log` row (tenant schema) (`cap_updated`) with only the fields that changed, and returns the updated record. 404 if the CAP does not exist. ## OpenAPI ````yaml /api-reference/openapi.json patch /remediation/caps/{cap_id} openapi: 3.1.0 info: title: CL MVP Product API description: >- The Causeloop MVP Product API is a deliberately small, explicitly allowlisted HTTP surface: `services/api/product_app.py` enumerates every one of the 44 published (method, path) operations drawn from seven routers, and only those operations are mounted onto this app -- everything else defined in the underlying routers (and the entire legacy research surface in `services/api/main.py`) is not exposed here. Staff (employee) and tenant-user sessions are separate cookie-based principals with no shared session table; mutating requests are protected by a double-submit CSRF cookie/header pair. See `/api-reference/authentication` for session and CSRF details, and `/api-reference/errors-and-conventions` for shared error shapes and status-code conventions. version: 1.0.0 servers: [] security: [] tags: - name: Auth description: >- Staff (employee) and tenant-user session lifecycle: login/logout, current-identity reads, invitation acceptance, and the public pre-login workspace directory. - name: Staff Onboarding description: >- The Onboarding Portal surface used to create, provision, ingest data for, train, activate, and go-live a tenant. Every operation requires an authenticated employee session; mutations additionally require the `onboarding_admin` control role (`support_readonly` employees can read but not write). - name: Insights description: >- Tenant-facing reads of materialized insight collections (themes, severity, issues, fishbone, and related model outputs) produced by the training and materialization pipeline. - name: Members description: Read-only tenant member directory. - name: Sources description: Tenant-facing source-connector registration and file-upload ingest. - name: Remediation description: >- Tenant-scoped corrective action plans (CAPs), human-in-the-loop issue reviews, the tenant audit trail, and the branded Excel export. - name: Health & Observability description: >- Unauthenticated liveness/readiness probes and the employee-only Prometheus metrics scrape endpoint. paths: /remediation/caps/{cap_id}: patch: tags: - Remediation summary: Update a corrective action plan description: >- Requires the `caps.write` permission + CSRF. Optimistic concurrency: the request body must carry `expected_version`; a mismatch returns 409 ("refresh and retry"). A `status` change is checked against a fixed transition table (`proposed` -> `approved` -> `in_progress` -> `blocked`/`completed` -> `verified`/`rejected`); an out-of-order transition returns 422. On success, increments the CAP's version, writes an `audit_log` row (tenant schema) (`cap_updated`) with only the fields that changed, and returns the updated record. 404 if the CAP does not exist. operationId: update_cap_remediation_caps__cap_id__patch parameters: - name: cap_id in: path required: true schema: type: string format: uuid title: Cap Id requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/UpdateCapRequest' responses: '200': description: Successful Response content: application/json: schema: $ref: '#/components/schemas/CapRecord' '422': description: Validation Error content: application/json: schema: $ref: '#/components/schemas/HTTPValidationError' components: schemas: UpdateCapRequest: properties: expected_version: type: integer title: Expected Version status: anyOf: - type: string enum: - proposed - approved - in_progress - blocked - completed - verified - rejected - type: 'null' title: Status owner: anyOf: - type: string - type: 'null' title: Owner due_date: anyOf: - type: string - type: 'null' title: Due Date path_tier: anyOf: - type: string enum: - automated - governed - expert - type: 'null' title: Path Tier problem_statement: anyOf: - type: string - type: 'null' title: Problem Statement root_cause: anyOf: - type: string - type: 'null' title: Root Cause containment_action: anyOf: - type: string - type: 'null' title: Containment Action corrective_action: anyOf: - type: string - type: 'null' title: Corrective Action preventive_action: anyOf: - type: string - type: 'null' title: Preventive Action success_metric: anyOf: - type: string - type: 'null' title: Success Metric verification_evidence: anyOf: - type: string - type: 'null' title: Verification Evidence type: object required: - expected_version title: UpdateCapRequest CapRecord: properties: id: type: string format: uuid title: Id target_type: type: string title: Target Type target_id: type: string title: Target Id title: type: string title: Title status: type: string enum: - proposed - approved - in_progress - blocked - completed - verified - rejected title: Status version: type: integer title: Version due_date: anyOf: - type: string - type: 'null' title: Due Date created_at: type: string title: Created At updated_at: type: string title: Updated At owner: anyOf: - type: string - type: 'null' title: Owner problem_statement: type: string title: Problem Statement default: '' root_cause: type: string title: Root Cause default: '' containment_action: type: string title: Containment Action default: '' corrective_action: type: string title: Corrective Action default: '' preventive_action: type: string title: Preventive Action default: '' success_metric: type: string title: Success Metric default: '' verification_evidence: type: string title: Verification Evidence default: '' path_tier: type: string enum: - automated - governed - expert title: Path Tier default: governed proof_window_days: type: integer title: Proof Window Days default: 30 steps: additionalProperties: true type: object title: Steps proof_started_at: anyOf: - type: string - type: 'null' title: Proof Started At proof_verified_at: anyOf: - type: string - type: 'null' title: Proof Verified At type: object required: - id - target_type - target_id - title - status - version - due_date - created_at - updated_at title: CapRecord HTTPValidationError: properties: detail: items: $ref: '#/components/schemas/ValidationError' type: array title: Detail type: object title: HTTPValidationError ValidationError: properties: loc: items: anyOf: - type: string - type: integer type: array title: Location msg: type: string title: Message type: type: string title: Error Type input: title: Input ctx: type: object title: Context type: object required: - loc - msg - type title: ValidationError ````