disableBYOKLite

Disable BYOK Lite. Marks the escrow row superseded with a 24h grace window (cron sweeper hard-deletes after expiry). Existing encrypted data continues to decrypt via passphrase + recovery — BYOK is a peer escrow, not the only unwrap path; disabling never loses data. Tier-gate is bypassed on disable so grace-period users can always opt out. Admin-only via the manage-byok scope.

disableBYOKLite(
  orgID: String!
): Boolean!

Arguments

disableBYOKLite.orgID ● String! non-null scalar

Type

Boolean scalar

The Boolean scalar type represents true or false.