Update a framework
Update a governance framework.
The most common use is activating or deactivating a framework for the workspace by setting
enabled. Rules of a disabled framework are not evaluated and do not count towards compliance.
Frameworks that ship with Openlayer report immutable: true. For those, only enabled, tags,
and projectSelector can be changed — their name and definition are managed by Openlayer.
Only the fields you send are changed.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your workspace API key. See Find your API key for more information.
Path Parameters
The framework id.
Body
Response
Status OK.
The framework id.
"9f1b3c2d-4e5a-4f60-8a71-2b3c4d5e6f70"
The id of the workspace the framework belongs to.
"3fa85f64-5717-4562-b3fc-2c963f66afa6"
The framework name.
255"EU AI Act"
Whether the framework is active. Rules of a disabled framework are not evaluated and do not count towards compliance.
Free-form labels on the framework.
The creation date.
"2026-03-22T11:31:01.185Z"
The last update date.
"2026-03-22T11:31:01.185Z"
The user who created the framework. null for built-in frameworks.
A short description of the framework.
5000"Requirements for high-risk AI systems under the EU AI Act."
A longer, rich-text description, as a TipTap JSON document.
A link to the external standard or regulation the framework is based on.
2048The icon shown for the framework.
Identifies a framework that ships with Openlayer, for example eu_ai_act, iso_42001, nist_ai_rmf, or traiga. null for frameworks you create yourself.
"eu_ai_act"
Whether the framework definition is managed by Openlayer and cannot be edited.
Determines which projects the framework applies to. An empty or null match array applies the framework to every project in the workspace.
Compliance roll-up for the framework. Present only on GET /workspaces/{workspaceId}/frameworks when the request sets includeRuleStats=true.