Change a ruleset
Changes a ruleset’s name, description, membership or default flag. ruleIds is REPLACE semantics, never a diff: the list you send is the list the ruleset holds afterwards — a membership diff is where a rule silently ends up in two groups. Unsetting the default without promoting another is refused: a plan naming no ruleset would have nothing to be judged by. expectedVersion is required.
Authorizations
Authorization: Bearer <token>. Accepts EITHER a Keycloak access token (scopes-in-token) OR an opaque POS session token; both resolve to the same pos.* scope vocabulary the route guards enforce.
Path Parameters
The ruleset id, e.g. group-default.
1Body
Response
The ruleset as persisted, at its new version.
The ruleset as persisted, at its new version.

