SST-X HTTP API

Contract generated from Hono routes. Download OpenAPI JSON.

Method	Path	Description	Code
GET	/health	GET /health	Source
POST	/runtime/executions	POST /executions	Source
GET	/runtime/executions/{executionId}	GET /executions/{executionId}	Source
GET	/runtime/executions/{executionId}/replay	Reconstructs an execution timeline from immutable, tenant-scoped runtime records without invoking an agent or mutating state.	Source
GET	/runtime/executions/{executionId}/explanation	Explains persisted workflow state in natural language without resuming or mutating it.	Source
POST	/runtime/executions/{executionId}/control	POST /executions/{executionId}/control	Source
POST	/runtime/executions/{executionId}/steps/{stepId}	POST /executions/{executionId}/steps/{stepId}	Source
POST	/runtime/executions/{executionId}/heartbeat	POST /executions/{executionId}/heartbeat	Source
POST	/runtime/executions/{executionId}/checkpoints	POST /executions/{executionId}/checkpoints	Source
POST	/runtime/executions/{executionId}/pause	POST /executions/{executionId}/pause	Source
POST	/runtime/executions/{executionId}/resume	POST /executions/{executionId}/resume	Source
POST	/runtime/executions/{executionId}/terminate	POST /executions/{executionId}/terminate	Source
POST	/multi-agent/messages	POST /messages	Source
POST	/multi-agent/messages/{messageId}/ack	POST /messages/{messageId}/ack	Source
POST	/multi-agent/messages/{messageId}/cancel	POST /messages/{messageId}/cancel	Source
POST	/multi-agent/messages/{messageId}/reconcile	POST /messages/{messageId}/reconcile	Source
GET	/multi-agent/messages/{messageId}	GET /messages/{messageId}	Source
POST	/attention/items/{attentionId}/escalation-policies	Configures one active escalation deadline for an open attention item; configuration grants no execution authority.	Source
POST	/attention/items/{attentionId}/escalation-policies/{policyId}/advance	Escalates only an overdue active policy and matching attention version, preserving optimistic concurrency.	Source
POST	/attention/signal-groups/preview	Produces a bounded deterministic preview before any bulk or storm mutation is authorized.	Source
POST	/attention/items/{attentionId}/score	Recalculates versioned priority from explicit factors while preserving independent severity.	Source
POST	/attention/notification-templates	Publishes one immutable, localized and data-minimized notification template.	Source
POST	/attention/routing-profiles	Publishes a versioned capacity, skill, qualification and delegation routing profile.	Source
POST	/attention/items/{attentionId}/route	Routes an existing attention item to exactly one eligible profile and preserves ownership history.	Source
POST	/attention/escalation-policy-versions	Publishes a bounded immutable multi-level escalation policy.	Source
POST	/attention/items/{attentionId}/action-tokens	Issues a one-time opaque action token whose presence never grants business authority.	Source
POST	/attention/action-tokens/introspect	Introspects and optionally consumes an opaque token while rechecking tenant, user, expiry and capability lifecycle.	Source
POST	/attention/items/{attentionId}/reconcile	Re-evaluates an item against authoritative canonical state and auto-resolves only on exact evidence.	Source
POST	/attention/items/{attentionId}/transitions	Applies any valid attention lifecycle command under optimistic concurrency.	Source
POST	/attention/items/{attentionId}/source-context	Pins the cross-fabric evidence graph and complete affected-entity set for an aggregate item.	Source
POST	/attention/items/{attentionId}/secure-notifications	Queues notification legs only after resolving an exact template version and minimizing shared payload data.	Source
POST	/attention/items/{attentionId}/escalations/evaluate	Evaluates and records every newly overdue escalation level in one bounded optimistic mutation.	Source
GET	/attention/items/{attentionId}/timeline	Returns the immutable attention, assignment, escalation, reconciliation and delivery history.	Source
GET	/attention/metrics	Reports tenant-scoped attention quality and delivery effectiveness metrics.	Source
POST	/attention/notification-channel-policies	POST /notification-channel-policies	Source
PUT	/attention/notification-preferences	PUT /notification-preferences	Source
POST	/attention/items/{attentionId}/notifications	POST /items/{attentionId}/notifications	Source
POST	/attention/notification-deliveries/{deliveryId}/receipts	POST /notification-deliveries/{deliveryId}/receipts	Source
POST	/attention/notification-deliveries/{deliveryId}/retry	POST /notification-deliveries/{deliveryId}/retry	Source
POST	/attention/items	POST /items	Source
POST	/attention/suppressions	Creates an expiry-bound suppression before ingestion; expired entries cease to suppress without changing business state.	Source
POST	/attention/items/{attentionId}/acknowledge	POST /items/{attentionId}/acknowledge	Source
POST	/attention/items/{attentionId}/resolve	POST /items/{attentionId}/resolve	Source
GET	/attention/items	GET /items	Source
GET	/audit-workspace/governance/audits	GET /governance/audits	Source
POST	/audit-workspace/governance/audits	POST /governance/audits	Source
POST	/audit-workspace/governance/audits/{auditId}/transitions	POST /governance/audits/{auditId}/transitions	Source
POST	/audit-workspace/governance/audits/{auditId}/prepare	POST /governance/audits/{auditId}/prepare	Source
POST	/audit-workspace/governance/programs	POST /governance/programs	Source
POST	/audit-workspace/governance/populations	POST /governance/populations	Source
POST	/audit-workspace/governance/evidence-requests	POST /governance/evidence-requests	Source
POST	/audit-workspace/governance/tests	POST /governance/tests	Source
POST	/audit-workspace/governance/findings	POST /governance/findings	Source
POST	/audit-workspace/governance/findings/{findingId}/root-causes	POST /governance/findings/{findingId}/root-causes	Source
POST	/audit-workspace/governance/findings/{findingId}/responses	POST /governance/findings/{findingId}/responses	Source
POST	/audit-workspace/governance/actions	POST /governance/actions	Source
POST	/audit-workspace/governance/actions/{actionId}/transitions	POST /governance/actions/{actionId}/transitions	Source
POST	/audit-workspace/governance/findings/{findingId}/verifications	POST /governance/findings/{findingId}/verifications	Source
POST	/audit-workspace/governance/reports	POST /governance/reports	Source
POST	/audit-workspace/governance/reports/{reportId}/approvals	POST /governance/reports/{reportId}/approvals	Source
POST	/audit-workspace/governance/access-grants	POST /governance/access-grants	Source
POST	/audit-workspace/governance/simulations	POST /governance/simulations	Source
POST	/audit-workspace/governance/queries/preview	POST /governance/queries/preview	Source
GET	/audit-workspace/governance/audits/{auditId}/workspace	GET /governance/audits/{auditId}/workspace	Source
GET	/audit-workspace/governance/audits/{auditId}/evidence/{evidenceId}	GET /governance/audits/{auditId}/evidence/{evidenceId}	Source
GET	/audit-workspace/governance/audits/{auditId}/timeline	GET /governance/audits/{auditId}/timeline	Source
GET	/audit-workspace/governance/metrics	GET /governance/metrics	Source
POST	/audit-workspace/audits	POST /audits	Source
POST	/audit-workspace/findings	POST /findings	Source
POST	/audit-workspace/findings/{id}/actions	Creates a corrective action for an open finding; assignment never closes or verifies the finding.	Source
POST	/audit-workspace/actions/{id}/transition	Advances a corrective action with optimistic versioning; only a non-owner may verify evidence-backed completion.	Source
POST	/audit-workspace/findings/{id}/verify	POST /findings/{id}/verify	Source
POST	/audit-workspace/audits/{id}/close	POST /audits/{id}/close	Source
GET	/audit-workspace/audits/{id}	GET /audits/{id}	Source
GET	/audit/verify	GET /verify	Source
GET	/audit/summary	Returns bounded forensic aggregates; it never exposes another tenant's ledger.	Source
GET	/audit/report	Consolidates a bounded tenant ledger without returning its metadata payloads or authorizing any action.	Source
POST	/audit/legal-holds	Creates an immutable tenant-scoped preservation record; it never changes or authorizes ledger data.	Source
GET	/audit	GET /	Source
POST	/capabilities/catalog/sync	POST /catalog/sync	Source
GET	/capabilities	GET /	Source
POST	/capabilities/{id}/versions/{version}/approvals	POST /{id}/versions/{version}/approvals	Source
PATCH	/capabilities/{id}/versions/{version}/lifecycle	PATCH /{id}/versions/{version}/lifecycle	Source
GET	/capacity/resources	GET /resources	Source
POST	/capacity/resources/{resourceId}/profile	POST /resources/{resourceId}/profile	Source
PATCH	/capacity/resources/{resourceId}/profile	PATCH /resources/{resourceId}/profile	Source
POST	/capacity/pools	POST /pools	Source
PATCH	/capacity/pools/{poolId}/lifecycle	PATCH /pools/{poolId}/lifecycle	Source
POST	/capacity/quotas	POST /quotas	Source
PATCH	/capacity/quotas/{quotaId}/lifecycle	PATCH /quotas/{quotaId}/lifecycle	Source
POST	/capacity/dependencies	POST /dependencies	Source
POST	/capacity/admissions	POST /admissions	Source
POST	/capacity/admissions/{admissionId}/release	POST /admissions/{admissionId}/release	Source
GET	/capacity/admissions/{admissionId}	GET /admissions/{admissionId}	Source
POST	/capacity/resources/{resourceId}/health	POST /resources/{resourceId}/health	Source
POST	/capacity/scheduler/claim	POST /scheduler/claim	Source
GET	/capacity/metrics	Returns aggregate tenant capacity health without exposing individual resource identities.	Source
POST	/capacity/resources	POST /resources	Source
POST	/capacity/reservations	POST /reservations	Source
POST	/capacity/reservations/{reservationId}/release	POST /reservations/{reservationId}/release	Source
GET	/capacity/resources/{resourceId}	GET /resources/{resourceId}	Source
POST	/chat	POST /	Source
POST	/collaboration/approval-policy-versions	Publishes an immutable approval-policy version.	Source
POST	/collaboration/workspaces/{workspaceId}/participants	Registers a tenant-scoped collaboration participant with an explicit authorization decision.	Source
POST	/collaboration/workspaces/{workspaceId}/approvals	Creates a policy-pinned approval request and durable contracts for every collaborating fabric.	Source
POST	/collaboration/approvals/{requestId}/votes	Casts an approval vote after reloading every immutable policy and binding input.	Source
POST	/collaboration/approvals/{requestId}/tokens	Issues an opaque, one-time approval token while persisting only its digest.	Source
POST	/collaboration/approval-tokens/introspect	Validates and optionally consumes an opaque approval token with a conditional state transition.	Source
POST	/collaboration/approvals/{requestId}/revoke	Revokes a non-terminal approval and every active token under the same request.	Source
POST	/collaboration/approvals/{requestId}/expire	Expires an overdue request and records bounded escalation contracts.	Source
POST	/collaboration/workspaces/{workspaceId}/handoffs/{handoffId}/reject	Rejects a pending handoff while retaining current workspace ownership.	Source
POST	/collaboration/workspaces/{workspaceId}/handoffs/{handoffId}/expire	Expires an overdue pending handoff without changing its owner.	Source
POST	/collaboration/workspaces/{workspaceId}/takeover-policy-decisions	Persists an immutable takeover decision after validating the active Capability Registry.	Source
POST	/collaboration/workspaces/{workspaceId}/takeovers	Records a governed human or agent takeover; override pauses instead of bypassing policy.	Source
POST	/collaboration/workspaces/{workspaceId}/evidence-submissions	Stores hash-addressed evidence with Knowledge Fabric trust and classification metadata.	Source
POST	/collaboration/workspaces/{workspaceId}/mentions	Normalizes a mention into durable Attention and Notification integration records.	Source
POST	/collaboration/workspaces/{workspaceId}/presence	Renews self presence through a bounded lease rather than durable online state.	Source
GET	/collaboration/workspaces/{workspaceId}/context-projection	Returns and caches a least-privilege collaboration context projection.	Source
POST	/collaboration/approvals/{requestId}/reconcile	Reconciles a request binding with State and revokes stale approvals.	Source
POST	/collaboration/commands/preview	Parses a bounded natural-language collaboration command as preview only.	Source
POST	/collaboration/bulk-simulations	Persists a dry-run bulk preview with an itemized safety decision.	Source
GET	/collaboration/workspaces/{workspaceId}/semantic-manifest	Returns a Semantic UI contract whose mutations always require confirmation and reauthorization.	Source
GET	/collaboration/approvals/{requestId}/review	Returns the least-privilege review facts needed for a human approval; it never changes approval state or execution authority.	Source
GET	/collaboration/approvals/{requestId}/timeline	Returns the immutable approval timeline with current participants, votes, and token metadata.	Source
POST	/collaboration/integrations/{dispatchId}/acknowledgements	Records immutable consumer proof for one collaboration integration dispatch.	Source
POST	/collaboration/workspaces/{workspaceId}/complete	Marks collaboration completed only after approved binding and verified Workflow proof.	Source
POST	/collaboration/workspaces/{workspaceId}/close	Closes a completed workspace while retaining its immutable audit history.	Source
GET	/collaboration/metrics	Returns tenant-scoped collaboration health, approval, evidence, and integration counters.	Source
POST	/collaboration/workspaces/{workspaceId}/information-requests	Opens a bounded information request; it is collaboration state, never an approval or authority grant.	Source
POST	/collaboration/workspaces/{workspaceId}/information-requests/{requestId}/answer	Answers a request only as its target and attaches evidence references without implying verification.	Source
POST	/collaboration/workspaces/{workspaceId}/information-requests/{requestId}/verify	Lets the workspace owner verify an answered request; verification is distinct from approval.	Source
POST	/collaboration/workspaces/{workspaceId}/information-requests/{requestId}/close	Closes only a verified information request under its active workspace owner; closure is not approval.	Source
GET	/collaboration/workspaces/{workspaceId}/information-requests	Lists the workspace information-request lifecycle without exposing it as approval state.	Source
POST	/collaboration/workspaces	POST /workspaces	Source
POST	/collaboration/workspaces/{workspaceId}/context	POST /workspaces/{workspaceId}/context	Source
POST	/collaboration/workspaces/{workspaceId}/handoffs	POST /workspaces/{workspaceId}/handoffs	Source
POST	/collaboration/workspaces/{workspaceId}/handoffs/{handoffId}/accept	POST /workspaces/{workspaceId}/handoffs/{handoffId}/accept	Source
POST	/collaboration/workspaces/{workspaceId}/comments	POST /workspaces/{workspaceId}/comments	Source
GET	/collaboration/workspaces/{workspaceId}/timeline	GET /workspaces/{workspaceId}/timeline	Source
POST	/compliance/governance/sources	Registers one immutable, integrity-bound regulatory source version.	Source
POST	/compliance/governance/regulations	Publishes an immutable regulation version linked to an active registered source.	Source
POST	/compliance/governance/requirements	Certifies and publishes an operational requirement into the existing requirement registry.	Source
POST	/compliance/governance/entity-bindings	Binds a versioned requirement to one governed business entity.	Source
POST	/compliance/governance/exceptions	Registers an explicit authorized exception and its non-invented compensating controls.	Source
POST	/compliance/governance/evaluations	Evaluates and persists one reproducible point-in-time compliance snapshot.	Source
POST	/compliance/governance/remediations	Creates a responsibility-bound remediation for one immutable compliance gap.	Source
POST	/compliance/governance/remediations/{remediationId}/transition	Advances a remediation through its strict auditable lifecycle.	Source
POST	/compliance/governance/remediations/{remediationId}/verify	Verifies remediation only from a new deterministic compliant snapshot.	Source
GET	/compliance/governance/history	Returns immutable point-in-time evidence and remediation history for one tenant entity.	Source
POST	/compliance/queries/preview	Parses a bounded compliance query without storing text or granting authority.	Source
GET	/compliance/governance/metrics	Returns tenant-scoped operational governance counters.	Source
POST	/compliance/requirements	POST /requirements	Source
POST	/compliance/controls	POST /controls	Source
POST	/compliance/evidence	POST /evidence	Source
POST	/compliance/evaluations	POST /evaluations	Source
POST	/control-automation/governance/objectives	POST /governance/objectives	Source
POST	/control-automation/governance/collectors	POST /governance/collectors	Source
POST	/control-automation/governance/profiles	POST /governance/profiles	Source
POST	/control-automation/governance/compensations	POST /governance/compensations	Source
POST	/control-automation/governance/evaluations	POST /governance/evaluations	Source
GET	/control-automation/governance/health	GET /governance/health	Source
POST	/control-automation/governance/portfolio-snapshots	POST /governance/portfolio-snapshots	Source
GET	/control-automation/governance/entities/{type}/{id}/history	GET /governance/entities/{type}/{id}/history	Source
GET	/control-automation/governance/graph	GET /governance/graph	Source
POST	/control-automation/governance/queries/preview	POST /governance/queries/preview	Source
POST	/control-automation/controls	POST /controls	Source
POST	/control-automation/evaluations	POST /evaluations	Source
POST	/control-automation/dependencies	POST /dependencies	Source
GET	/control-automation/plan	GET /plan	Source
GET	/control-automation/health	Computes a tenant-isolated health snapshot from current control versions, evaluations, and delivery state.	Source
POST	/control-automation/overrides	Records a time-bounded exception request while preserving the immutable evaluation result.	Source
POST	/control-automation/overrides/{overrideId}/approve	Approves a reviewed temporary exception without rewriting the control evaluation.	Source
POST	/control-automation/remediations/{remediationId}/plan-intervention	Plans a human-authorization-gated intervention from an open remediation and a uniquely matching active template.	Source
POST	/control-automation/remediations/{remediationId}/authorize	Binds remediation to the separately policy-authorized intervention that owns its capability execution.	Source
POST	/control-automation/remediations/{remediationId}/verify	Completes remediation only from an EFFECTIVE intervention and a fresh passing verification control.	Source
POST	/decisions/operational-situations/{situationId}	Converts a critical operational snapshot into a durable review recommendation; it cannot grant intervention or execution authority.	Source
POST	/decisions/risk-predictions/{predictionId}	Converts a critical or review-required risk snapshot into a durable review recommendation; it cannot grant execution authority.	Source
POST	/decisions	Records deterministic evidence-backed alternatives; the selected alternative is a recommendation, never an approval or execution grant.	Source
POST	/decisions/{decisionId}/what-if	Projects a counterfactual alternative from an immutable decision record without creating mutations or execution authority.	Source
POST	/decisions/{decisionId}/replay	Replays immutable decision input to detect deterministic drift without altering the historical record.	Source
GET	/decisions/{decisionId}	Reads an immutable decision record only within its tenant boundary.	Source
POST	/delegations	Issues a single opaque delegated token; only its SHA-256 hash is retained and issuance grants no direct execution authority.	Source
POST	/delegations/authorize	Checks an opaque token against its exact tenant, delegate, audience, capability, resource, expiry, and revocation state.	Source
POST	/delegations/{delegationId}/revoke	Revokes a tenant-owned token atomically; revoked grants remain deny-only audit state.	Source
POST	/device-gateway/{tenantId}/{sourceId}	POST /{tenantId}/{sourceId}	Source
POST	/events	POST /	Source
POST	/evidence-fabric/governance/sources	POST /governance/sources	Source
POST	/evidence-fabric/governance/schemas	POST /governance/schemas	Source
POST	/evidence-fabric/governance/profiles	POST /governance/profiles	Source
POST	/evidence-fabric/governance/assessments	POST /governance/assessments	Source
POST	/evidence-fabric/governance/certifications	POST /governance/certifications	Source
POST	/evidence-fabric/governance/snapshots	POST /governance/snapshots	Source
POST	/evidence-fabric/governance/packages	POST /governance/packages	Source
POST	/evidence-fabric/governance/collections	POST /governance/collections	Source
POST	/evidence-fabric/governance/impacts	POST /governance/impacts	Source
GET	/evidence-fabric/governance/graph	GET /governance/graph	Source
GET	/evidence-fabric/governance/readiness	GET /governance/readiness	Source
GET	/evidence-fabric/governance/entities/{type}/{id}/history	GET /governance/entities/{type}/{id}/history	Source
POST	/evidence-fabric/governance/queries/preview	POST /governance/queries/preview	Source
POST	/evidence-fabric/evidence/{evidenceId}/exports	Audits a purpose-bound, tenant-private evidence export. It never issues a public object URL or mutates original payload bytes.	Source
POST	/evidence-fabric/evidence	POST /evidence	Source
POST	/evidence-fabric/evidence/{id}/revoke	POST /evidence/{id}/revoke	Source
POST	/evidence-fabric/bundles	POST /bundles	Source
GET	/evidence-fabric/bundles/{id}	GET /bundles/{id}	Source
POST	/evidence-fabric/evidence/{evidenceId}/payload	Stores an evidence payload privately in R2 only after its bytes match the immutable Evidence Fabric hash.	Source
GET	/evidence-fabric/evidence/{evidenceId}/payload	Reads a private evidence payload only after cross-checking D1, R2 metadata and the stored bytes.	Source
POST	/evidence-fabric/signing-keys	Registers only an ECDSA P-256 public verification key; private key material is never accepted or stored.	Source
POST	/evidence-fabric/evidence/{evidenceId}/signatures	Verifies an ECDSA signature over the evidence's immutable SHA-256 string against a tenant-owned active public key.	Source
GET	/evidence-fabric/sources/health	Reports source liveness from immutable evidence observations; a source is never silently treated as healthy when stale.	Source
POST	/exceptions	POST /	Source
GET	/execution-events/stream	GET /stream	Source
POST	/webhooks/{integrationId}/{tenantId}	POST /{integrationId}/{tenantId}	Source
POST	/goals/definitions	POST /definitions	Source
POST	/goals/definitions/{definitionId}/{version}/approve	POST /definitions/{definitionId}/{version}/approve	Source
POST	/goals/instances	POST /instances	Source
POST	/goals/instances/{goalId}/activate	POST /instances/{goalId}/activate	Source
POST	/goals/instances/{goalId}/pause	POST /instances/{goalId}/pause	Source
POST	/goals/instances/{goalId}/cancel	POST /instances/{goalId}/cancel	Source
POST	/goals/instances/{goalId}/resume	POST /instances/{goalId}/resume	Source
POST	/goals/instances/{goalId}/simulate	POST /instances/{goalId}/simulate	Source
POST	/goals/instances/{goalId}/evaluate	POST /instances/{goalId}/evaluate	Source
POST	/goals/instances/{goalId}/signals	POST /instances/{goalId}/signals	Source
POST	/goals/instances/{goalId}/dependencies	POST /instances/{goalId}/dependencies	Source
POST	/goals/instances/{goalId}/tasks/{taskId}/delegate	POST /instances/{goalId}/tasks/{taskId}/delegate	Source
PATCH	/goals/instances/{goalId}/tasks/{taskId}	PATCH /instances/{goalId}/tasks/{taskId}	Source
GET	/goals/instances/{goalId}	GET /instances/{goalId}	Source
GET	/goals/instances/{goalId}/timeline	GET /instances/{goalId}/timeline	Source
GET	/goals/metrics	GET /metrics	Source
POST	/goals	POST /	Source
POST	/goals/{goalId}/activate	POST /{goalId}/activate	Source
POST	/goals/{goalId}/pause	POST /{goalId}/pause	Source
POST	/goals/{goalId}/resume	POST /{goalId}/resume	Source
POST	/goals/{goalId}/progress	POST /{goalId}/progress	Source
POST	/goals/{goalId}/tasks	Adds a bounded, dependency-declared planning task to an active goal; a task never dispatches a capability.	Source
POST	/integrations	POST /	Source
POST	/integrations/{integrationId}/versions/{version}/activate	POST /{integrationId}/versions/{version}/activate	Source
POST	/intents/preview	Returns a trusted, non-executable interpretation for a bounded UI context.	Source
POST	/interventions/{id}/escalations/{escalationId}/advance	POST /{id}/escalations/{escalationId}/advance	Source
POST	/interventions/capability-bindings	POST /capability-bindings	Source
POST	/interventions/templates/{id}/capability-binding	POST /templates/{id}/capability-binding	Source
POST	/interventions/{id}/executions	POST /{id}/executions	Source
POST	/interventions/{id}/action-orders/{orderId}/complete	POST /{id}/action-orders/{orderId}/complete	Source
POST	/interventions/{id}/action-orders/{orderId}/confirm-sandbox-renewal	Confirms only a synthetic LMS renewal through the private provider binding before recording completion.	Source
POST	/interventions/{id}/action-orders/{orderId}/confirm-sandbox-maintenance	Confirms only a synthetic maintenance order through the private provider binding before recording completion.	Source
GET	/interventions/{id}/executions/{executionId}	GET /{id}/executions/{executionId}	Source
POST	/interventions/{id}/recovery	POST /{id}/recovery	Source
POST	/interventions/{id}/replan	POST /{id}/replan	Source
POST	/interventions/{id}/start	POST /{id}/start	Source
POST	/interventions/{id}/temporal-policy	POST /{id}/temporal-policy	Source
POST	/interventions/{id}/timeout	POST /{id}/timeout	Source
POST	/interventions/{id}/vertical-slices/critical-work-permit/verify	POST /{id}/vertical-slices/critical-work-permit/verify	Source
POST	/interventions/templates	POST /templates	Source
POST	/interventions	POST /	Source
POST	/interventions/{id}/authorize	POST /{id}/authorize	Source
POST	/interventions/{id}/start	POST /{id}/start	Source
POST	/interventions/{id}/verify	POST /{id}/verify	Source
POST	/interventions/templates/{id}/emergency-stop-capability	POST /templates/{id}/emergency-stop-capability	Source
POST	/interventions/{id}/emergency-stop	POST /{id}/emergency-stop	Source
POST	/interventions/{id}/compensate	POST /{id}/compensate	Source
GET	/interventions/{id}	GET /{id}	Source
POST	/knowledge-trust/authority-rules	POST /authority-rules	Source
POST	/knowledge-trust/authority-rules/{ruleId}/{version}/approve	POST /authority-rules/{ruleId}/{version}/approve	Source
POST	/knowledge-trust/source-dependencies	POST /source-dependencies	Source
POST	/knowledge-trust/policies	POST /policies	Source
POST	/knowledge-trust/policies/{policyId}/{version}/approve	POST /policies/{policyId}/{version}/approve	Source
POST	/knowledge-trust/evaluations	POST /evaluations	Source
GET	/knowledge-trust/workspace	GET /workspace	Source
POST	/knowledge-trust/reviews/{reviewId}/verify	POST /reviews/{reviewId}/verify	Source
POST	/knowledge-trust/recertification/run	POST /recertification/run	Source
GET	/knowledge-trust/inspector/{knowledgeId}	GET /inspector/{knowledgeId}	Source
POST	/knowledge/bundles	POST /bundles	Source
POST	/knowledge/bundles/{bundleId}/{version}/index	POST /bundles/{bundleId}/{version}/index	Source
GET	/knowledge/bundles/{bundleId}/{version}/index/status	GET /bundles/{bundleId}/{version}/index/status	Source
POST	/knowledge/bundles/{bundleId}/{version}/certify	POST /bundles/{bundleId}/{version}/certify	Source
POST	/knowledge/bundles/{bundleId}/{version}/activate	POST /bundles/{bundleId}/{version}/activate	Source
POST	/learning/analysis/run	Runs the same bounded shadow-only aggregation used by cron; restricted to a human superadmin for operational verification.	Source
GET	/learning/suggestions	Lists tenant-scoped, non-authoritative learning suggestions for human review.	Source
POST	/learning/suggestions/{suggestionKey}/review	Records a human decision on a pending shadow suggestion; approval never changes runtime behavior.	Source
POST	/operations/situations/{situationId}/attention	Projects only an existing critical operational situation into a deduplicated Attention Center item; it cannot execute or authorize intervention.	Source
GET	/operations/situations/{id}/audit	GET /situations/{id}/audit	Source
POST	/operations/sources	POST /sources	Source
POST	/operations/geofence-policies	POST /geofence-policies	Source
POST	/operations/sources/{id}/geofence-policy	POST /sources/{id}/geofence-policy	Source
POST	/operations/events	POST /events	Source
GET	/operations/situations/{id}/control-monitoring	Reads immutable inbox facts for one tenant-scoped operational situation without replaying or authorizing work.	Source
GET	/operations/twin/zones/{id}	Projects the current tenant-scoped operational objects of one zone; it never writes or controls source systems.	Source
GET	/operations/workers/{id}/context	Reads a minimized, tenant-scoped worker context without assigning, tracking, or authorizing work.	Source
GET	/operations/situations/{id}/replay	Reconstructs an operational situation from immutable facts without reinserting events or changing state.	Source
POST	/operations/situations/{id}/simulate	Evaluates one bounded hypothetical observation without persisting it or controlling equipment.	Source
GET	/operations/situations/{id}/timeline	Reads immutable inbox facts for one tenant-scoped operational situation without replaying or authorizing work.	Source
GET	/operations/situations/{id}	GET /situations/{id}	Source
POST	/operations/situations/{situationId}/open-workspace	Opens a collaboration workspace for an already-routed human reviewer; it does not approve or execute any operation.	Source
POST	/operations/situations/{situationId}/exception	Correlates a critical operational situation into Exception Management; it only requires human review.	Source
POST	/operations/situations/{situationId}/route-resource	Projects an existing deterministic workforce choice for a critical situation without reserving or executing it.	Source
POST	/operations/situations/{situationId}/route-responsibility	Resolves exactly one governed human reviewer for a critical situation without changing its state or authority.	Source
POST	/operations/situations/{situationId}/plan-intervention	Plans, but never executes, a human-approved intervention for a critical operational situation.	Source
GET	/operations/capabilities	Lists the bounded capability set that has completed tenant-scoped operational telemetry.	Source
GET	/operations/alerts	GET /alerts	Source
POST	/operations/events/{eventId}/replay	POST /events/{eventId}/replay	Source
GET	/operations/tasks/{correlationId}	GET /tasks/{correlationId}	Source
GET	/operations/metrics	GET /metrics	Source
GET	/operations/anomalies	Compares the newest completed operation with a tenant-local P95 baseline without treating absent data as an incident.	Source
GET	/operations/costs	Returns bounded, tenant-isolated estimated-cost aggregates; microunits avoid floating-point billing drift.	Source
GET	/operations/health	GET /health	Source
POST	/orchestration/work-permits/preview	POST /work-permits/preview	Source
POST	/orchestration/plans	Persists a bounded plan snapshot. Capability execution remains impossible until a dedicated registered dispatcher consumes it.	Source
POST	/orchestration/plans/{planId}/confirm	Confirms the owner's persisted plan and starts a durable non-executing dispatch checkpoint.	Source
POST	/orchestration/plans/{planId}/dispatch	Starts the durable non-executing checkpoint for an unconfirmed low-risk draft owned by the caller.	Source
POST	/orchestration/plans/{planId}/compensate	Issues a server-bound cancellation receipt from the immutable result of a failed create plan.	Source
POST	/orchestration/plans/{planId}/cancel	Cancels an owner-bound, unexecuted plan; compensating a capability remains a separately authorized action.	Source
POST	/planning/dry-runs	Dry-runs bounded plan candidates under caller-supplied risk and cost limits; it does not persist, approve, or execute a plan.	Source
POST	/planning/plans	POST /plans	Source
POST	/planning/plans/{planId}/confirm	POST /plans/{planId}/confirm	Source
POST	/planning/plans/{planId}/steps/{stepId}/outcomes	POST /plans/{planId}/steps/{stepId}/outcomes	Source
POST	/planning/plans/{planId}/replan	POST /plans/{planId}/replan	Source
POST	/planning/plans/{planId}/invalidate	POST /plans/{planId}/invalidate	Source
GET	/planning/plans/{planId}	GET /plans/{planId}	Source
POST	/proactive/signals	POST /signals	Source
POST	/proactive/process	POST /process	Source
GET	/proactive/recommendations	GET /recommendations	Source
POST	/regulatory-changes/governance/dependency-edges	Registers one immutable directed edge for bounded impact traversal.	Source
POST	/regulatory-changes/governance/source-monitors	Stores a source observation while keeping unavailable distinct from unchanged.	Source
POST	/regulatory-changes/governance/changes/{changeId}/analyze	Computes and persists one tenant impact plus twelve traceable fabric dispatches.	Source
POST	/regulatory-changes/governance/changes/{changeId}/simulations	Persists a dry-run population projection and explicit transition/grace mode.	Source
POST	/regulatory-changes/governance/changes/{changeId}/compatibility	Pins compatibility across requirement, control, policy, workflow, capability and evidence.	Source
POST	/regulatory-changes/governance/conflicts	Resolves source conflicts by authority and freshness or escalates to human review.	Source
POST	/regulatory-changes/governance/migration-plans	Creates an approved, responsibility-bound migration plan and eight ordered steps.	Source
POST	/regulatory-changes/governance/migration-plans/{migrationId}/transition	Advances a migration with evidence-backed completed steps and strict ordering.	Source
POST	/regulatory-changes/governance/changes/{changeId}/activate	Activates an approved implementation and forbids partial canary after mandatory effect.	Source
POST	/regulatory-changes/governance/changes/{changeId}/verify	Verifies a released change only when all affected entities are remediated and gap-free.	Source
GET	/regulatory-changes/governance/changes/{changeId}/history	Returns the immutable, tenant-scoped change evidence chain and implementation history.	Source
POST	/regulatory-changes/governance/queries/preview	Parses bounded regulatory queries without storing free-form input.	Source
GET	/regulatory-changes/governance/metrics	Returns operational source, impact, deadline, migration and dispatch metrics.	Source
POST	/regulatory-changes/dependencies	POST /dependencies	Source
POST	/regulatory-changes/changes	POST /changes	Source
POST	/regulatory-changes/changes/{changeId}/approve	POST /changes/{changeId}/approve	Source
POST	/regulatory-changes/changes/{changeId}/reject	POST /changes/{changeId}/reject	Source
POST	/regulatory-changes/changes/{changeId}/activate	POST /changes/{changeId}/activate	Source
GET	/regulatory-changes/changes/{changeId}	GET /changes/{changeId}	Source
POST	/releases	POST /	Source
POST	/releases/{releaseId}/rollback	POST /{releaseId}/rollback	Source
PATCH	/releases/{releaseId}/lifecycle	PATCH /{releaseId}/lifecycle	Source
POST	/releases/{releaseId}/evaluations	POST /{releaseId}/evaluations	Source
POST	/releases/{releaseId}/semantic-evaluations	Collects bounded LLM semantic evidence for an evaluating release; this route never gates a release or authorizes execution.	Source
POST	/releases/{releaseId}/rollouts	Stores a bounded rollout allocation for a CANARY or ACTIVE release; the server uses it only to route authenticated orchestration previews.	Source
GET	/releases/{releaseId}/metrics	Correlates persisted release gates, preview-routing configuration and observed task telemetry; it never implies execution authority.	Source
POST	/responsibility/role-versions	Publishes an immutable organizational role version without deriving permissions from its name.	Source
POST	/responsibility/definition-versions	Publishes an immutable responsibility definition, including critical coverage and SLA rules.	Source
POST	/responsibility/governance-assignments	Creates a role- and definition-bound RACI assignment with atomic overlap protection.	Source
GET	/responsibility/governance/resolve	Resolves the effective graph with measured in-Worker duration and no sensitive context expansion.	Source
POST	/responsibility/governance/coverage	Persists an immutable coverage snapshot for gaps, conflicts and critical backups.	Source
POST	/responsibility/governance/routes	Resolves and persists responsibility-aware routing contracts for downstream fabrics.	Source
POST	/responsibility/governance/what-if	Simulates assignment removal and persists only the immutable dry-run result.	Source
POST	/responsibility/governance/backups/{backupAssignmentId}/activate	Activates a registered backup only with explicit policy and optional delegation evidence.	Source
GET	/responsibility/governance/history	Returns immutable point-in-time records while redacting principals for non-admin callers.	Source
POST	/responsibility/governance/reconcile	Reconciles organization-version drift into State/Proactive/Goal/Workflow review signals.	Source
POST	/responsibility/queries/preview	Parses a bounded natural-language responsibility query without making organizational claims.	Source
GET	/responsibility/governance/metrics	Exposes tenant-scoped responsibility coverage and routing health.	Source
POST	/responsibility/assignments	POST /assignments	Source
POST	/responsibility/assignments/{assignmentId}/end	POST /assignments/{assignmentId}/end	Source
GET	/responsibility/resolve	GET /resolve	Source
GET	/responsibility/assignments	GET /assignments	Source
POST	/responsibility/snapshots	Persists an immutable point-in-time responsibility resolution; it conveys accountability but grants no authority.	Source
POST	/responsibility/acting	Creates a bounded ACTING_FOR assignment while retaining the original accountable assignment.	Source
POST	/responsibility/inheritance	Registers explicit, bounded organizational scope inheritance; hierarchy never conveys technical authority.	Source
GET	/responsibility/resolve-inherited	Resolves the nearest explicit inherited RACI scope at a point in time; the direct scope always wins.	Source
POST	/risk/predictions/{predictionId}/attention	Projects a governed risk review into Attention Center; it never approves or executes an intervention.	Source
GET	/risk/models/{modelId}/calibration	Reports outcome-backed model quality over a short tenant-scoped window; review signals never alter model lifecycle or execute action.	Source
POST	/risk/models	POST /models	Source
POST	/risk/predictions	POST /predictions	Source
GET	/risk/predictions/{id}	GET /predictions/{id}	Source
GET	/risk/governance/subjects/{subjectType}/{subjectId}/signal-summary	Aggregates immutable Work Permit signals and assessments over the only supported fixed analysis windows.	Source
GET	/risk/models/{modelId}/monitoring	Aggregates a bounded, tenant-isolated prediction window; it never alters model lifecycle or execution authority.	Source
POST	/risk/predictions/{predictionId}/outcomes	Records independently evidenced ground truth; it never mutates an immutable prediction snapshot.	Source
POST	/risk/governance/incidents/{incidentId}/signal	POST /governance/incidents/{incidentId}/signal	Source
POST	/risk/governance/resources/{resourceId}/signal	POST /governance/resources/{resourceId}/signal	Source
POST	/risk/governance/goals/{goalId}/signal	POST /governance/goals/{goalId}/signal	Source
POST	/risk/governance/signals	POST /governance/signals	Source
POST	/risk/governance/assessments	POST /governance/assessments	Source
GET	/risk/governance/assessments/{assessmentId}	GET /governance/assessments/{assessmentId}	Source
GET	/risk/governance/assessments	GET /governance/assessments	Source
POST	/risk/governance/acceptances	POST /governance/acceptances	Source
POST	/risk/recommendations/{recommendationId}/plan-intervention	Converts a human-reviewed recommendation into an authorization-gated intervention plan, never a capability execution.	Source
POST	/risk/governance/hazards	POST /governance/hazards	Source
POST	/risk/governance/registry	POST /governance/registry	Source
POST	/risk/models/{modelId}/rollouts	Promotes a governed candidate or rolls back only to the active model's declared rollback version; it never authorizes field execution.	Source
POST	/risk/predictions/{predictionId}/scenarios	Runs a bounded scenario against an immutable prediction snapshot; it persists no state and never authorizes execution.	Source
GET	/runbooks/for-exception/{exceptionId}	Resolves documented procedures for a persisted exception. This is deliberately read-only: a runbook is guidance, never a capability invocation or approval.	Source
GET	/runbooks	GET /	Source
POST	/runbooks	POST /	Source
POST	/multi-agent/work-permit-analyses	POST /work-permit-analyses	Source
GET	/multi-agent/work-permit-analyses/{analysisId}	GET /work-permit-analyses/{analysisId}	Source
POST	/state/entities	POST /entities	Source
PATCH	/state/entities/{entityType}/{entityId}	PATCH /entities/{entityType}/{entityId}	Source
GET	/state/entities/{entityType}/{entityId}	GET /entities/{entityType}/{entityId}	Source
GET	/state/entities/{entityType}/{entityId}/events	GET /entities/{entityType}/{entityId}/events	Source
POST	/state/source-authorities	POST /source-authorities	Source
POST	/state/contexts	POST /contexts	Source
POST	/state/contexts/{contextId}/validate	POST /contexts/{contextId}/validate	Source
GET	/state/contexts/{contextId}	GET /contexts/{contextId}	Source
POST	/state/contexts/{contextId}/deltas	POST /contexts/{contextId}/deltas	Source
PUT	/state/forms/{formId}	PUT /forms/{formId}	Source
POST	/state/subscriptions	POST /subscriptions	Source
GET	/state/subscriptions/{subscriptionId}/events	GET /subscriptions/{subscriptionId}/events	Source
POST	/state/subscriptions/{subscriptionId}/events/{deliveryId}/ack	POST /subscriptions/{subscriptionId}/events/{deliveryId}/ack	Source
POST	/state/projections	POST /projections	Source
GET	/state/projections/{projectionId}	GET /projections/{projectionId}	Source
POST	/state/entities/{entityType}/{entityId}/synchronize	POST /entities/{entityType}/{entityId}/synchronize	Source
GET	/state/entities/{entityType}/{entityId}/at	GET /entities/{entityType}/{entityId}/at	Source
GET	/state/metrics	GET /metrics	Source
POST	/multi-agent/swarms/deadlines/run	POST /swarms/deadlines/run	Source
POST	/multi-agent/swarms	POST /swarms	Source
POST	/multi-agent/swarms/{swarmId}/handoffs	POST /swarms/{swarmId}/handoffs	Source
POST	/multi-agent/swarms/{swarmId}/handoffs/{handoffId}/accept	POST /swarms/{swarmId}/handoffs/{handoffId}/accept	Source
POST	/multi-agent/swarms/{swarmId}/tasks/{taskId}/start	POST /swarms/{swarmId}/tasks/{taskId}/start	Source
POST	/multi-agent/swarms/{swarmId}/tasks/{taskId}/results	POST /swarms/{swarmId}/tasks/{taskId}/results	Source
POST	/multi-agent/swarms/{swarmId}/validate	POST /swarms/{swarmId}/validate	Source
POST	/multi-agent/swarms/{swarmId}/cancel	POST /swarms/{swarmId}/cancel	Source
GET	/multi-agent/swarms/{swarmId}	GET /swarms/{swarmId}	Source
POST	/temporal/sla-clocks/{clockId}/pause	POST /sla-clocks/{clockId}/pause	Source
POST	/temporal/sla-clocks/{clockId}/resume	POST /sla-clocks/{clockId}/resume	Source
POST	/temporal/sla-clocks/{clockId}/evaluate	POST /sla-clocks/{clockId}/evaluate	Source
POST	/temporal/sla-clocks/{clockId}/complete	POST /sla-clocks/{clockId}/complete	Source
POST	/temporal/sla-clocks/{clockId}/cancel	POST /sla-clocks/{clockId}/cancel	Source
POST	/temporal/slas/{slaId}/clocks	POST /slas/{slaId}/clocks	Source
POST	/temporal/slas	POST /slas	Source
POST	/temporal/deadline-predictions	POST /deadline-predictions	Source
POST	/temporal/business-calendars	POST /business-calendars	Source
POST	/temporal/business-calendar	POST /business-calendar	Source
GET	/temporal/business-calendar	GET /business-calendar	Source
POST	/temporal/schedules/{scheduleId}/pause	POST /schedules/{scheduleId}/pause	Source
POST	/temporal/schedules/{scheduleId}/resume	POST /schedules/{scheduleId}/resume	Source
POST	/temporal/schedules/{scheduleId}/cancel	POST /schedules/{scheduleId}/cancel	Source
GET	/temporal/schedules/{scheduleId}/timeline	GET /schedules/{scheduleId}/timeline	Source
GET	/temporal/schedules/{scheduleId}	GET /schedules/{scheduleId}	Source
GET	/temporal/metrics	GET /metrics	Source
POST	/temporal/references/resolve	POST /references/resolve	Source
POST	/temporal/dependencies/analyze	POST /dependencies/analyze	Source
POST	/temporal/simulations	POST /simulations	Source
POST	/temporal/work-permit-monitors	POST /work-permit-monitors	Source
POST	/temporal/schedules	POST /schedules	Source
POST	/temporal/process	POST /process	Source
GET	/temporal/occurrences	GET /occurrences	Source
POST	/workforce/policy-versions	POST /policy-versions	Source
POST	/workforce/resources/{resourceId}/configure	POST /resources/{resourceId}/configure	Source
POST	/workforce/shifts	POST /shifts	Source
POST	/workforce/availability-exceptions	POST /availability-exceptions	Source
POST	/workforce/authorization-decisions	POST /authorization-decisions	Source
POST	/workforce/discovery/preview	POST /discovery/preview	Source
POST	/workforce/bundles/preview	POST /bundles/preview	Source
POST	/workforce/reservations	POST /reservations	Source
POST	/workforce/reservations/{reservationId}/transitions	POST /reservations/{reservationId}/transitions	Source
POST	/workforce/assignments/from-reservation	POST /assignments/from-reservation	Source
POST	/workforce/assignments/{assignmentId}/lifecycle	POST /assignments/{assignmentId}/lifecycle	Source
POST	/workforce/assignments/{assignmentId}/delegations	POST /assignments/{assignmentId}/delegations	Source
POST	/workforce/preemptions/preview	POST /preemptions/preview	Source
POST	/workforce/queue	POST /queue	Source
GET	/workforce/queue	GET /queue	Source
POST	/workforce/forecasts	POST /forecasts	Source
POST	/workforce/resources/{resourceId}/health	POST /resources/{resourceId}/health	Source
POST	/workforce/assignments/{assignmentId}/reconcile	POST /assignments/{assignmentId}/reconcile	Source
GET	/workforce/reservations/{reservationId}/timeline	GET /reservations/{reservationId}/timeline	Source
GET	/workforce/metrics	GET /metrics	Source
POST	/workforce/profiles	POST /profiles	Source
POST	/workforce/assignments	POST /assignments	Source
POST	/workforce/availability	Declares a bounded availability window; configured resources are admitted only when the whole assignment fits.	Source
POST	/workforce/assignments/{assignmentId}/accept	POST /assignments/{assignmentId}/accept	Source
GET	/workforce/assignments	GET /assignments	Source
POST	/workforce/assignments/{assignmentId}/reassign	Atomically reassigns a reserved task after rechecking every hard constraint on the replacement resource.	Source
POST	/controls	POST /	Source
POST	/controls/{controlId}/deactivate	POST /{controlId}/deactivate	Source
GET	/controls	GET /	Source
GET	/health	GET /health	Source
GET	/api/auth/{wildcard}	GET /api/auth/{wildcard}	Source
POST	/api/auth/{wildcard}	POST /api/auth/{wildcard}	Source
POST	/api/cipa/votar/{token}	POST /api/cipa/votar/{token}	Source
GET	/api/admin/environments/tenants	GET /tenants	Source
PUT	/api/admin/environments/tenants/{id}	PUT /tenants/{id}	Source
GET	/api/admin/environments/tenants/{id}/purge-preview	GET /tenants/{id}/purge-preview	Source
POST	/api/admin/environments/tenants/{id}/purge	POST /tenants/{id}/purge	Source
GET	/api/ia/admin/prompt-configs	GET /prompt-configs	Source
POST	/api/ia/admin/prompt-configs	POST /prompt-configs	Source
PATCH	/api/ia/admin/prompt-configs/{id}	PATCH /prompt-configs/{id}	Source
POST	/api/ia/admin/prompt-configs/{id}/publish	POST /prompt-configs/{id}/publish	Source
POST	/api/ia/admin/prompt-configs/{id}/rollback	POST /prompt-configs/{id}/rollback	Source
POST	/api/ia/admin/prompt-configs/{id}/archive	POST /prompt-configs/{id}/archive	Source
GET	/api/ia/admin/knowledge-files	GET /knowledge-files	Source
GET	/api/ia/admin/knowledge-files/{id}	GET /knowledge-files/{id}	Source
POST	/api/ia/admin/knowledge-files	POST /knowledge-files	Source
PATCH	/api/ia/admin/knowledge-files/{id}	PATCH /knowledge-files/{id}	Source
POST	/api/ia/admin/knowledge-files/{id}/status	POST /knowledge-files/{id}/status	Source
POST	/api/ia/admin/knowledge-files/{id}/toggle-ai	POST /knowledge-files/{id}/toggle-ai	Source
GET	/api/ia/admin/kb-versions	GET /kb-versions	Source
POST	/api/ia/admin/kb-versions	POST /kb-versions	Source
POST	/api/ia/admin/kb-versions/{id}/publish	POST /kb-versions/{id}/publish	Source
POST	/api/ia/admin/kb-versions/{id}/rollback	POST /kb-versions/{id}/rollback	Source
GET	/api/ia/admin/tests	GET /tests	Source
POST	/api/ia/admin/tests	POST /tests	Source
PATCH	/api/ia/admin/tests/{id}	PATCH /tests/{id}	Source
GET	/api/ia/admin/usage	GET /usage	Source
GET	/api/ia/admin/subscribers	GET /subscribers	Source
PUT	/api/ia/admin/limits/{tenantId}	PUT /limits/{tenantId}	Source
POST	/api/ia/admin/block-user/{userId}	POST /block-user/{userId}	Source
POST	/api/ia/admin/entitlements/{tenantId}	POST /entitlements/{tenantId}	Source
GET	/api/ia/admin/feedback	GET /feedback	Source
POST	/api/ia/admin/messages/{id}/flag	POST /messages/{id}/flag	Source
GET	/api/ia/admin/audit	GET /audit	Source
GET	/api/ia/admin/prompt-configs/{id}/compare/{otherId}	GET /prompt-configs/{id}/compare/{otherId}	Source
GET	/api/ia/admin/kb-versions/{id}/compare/{otherId}	GET /kb-versions/{id}/compare/{otherId}	Source
GET	/api/ia/admin/audit/export	GET /audit/export	Source
GET	/api/ia/admin/health	GET /health	Source
POST	/api/ia/admin/bootstrap	POST /bootstrap	Source
GET	/api/ia/admin/notifications	GET /notifications	Source
POST	/api/ia/admin/notifications/{id}/retry	POST /notifications/{id}/retry	Source
GET	/api/ia/rag/documents	GET /documents	Source
GET	/api/ia/rag/documents/{id}	GET /documents/{id}	Source
POST	/api/ia/rag/documents/batch	POST /documents/batch	Source
POST	/api/ia/rag/documents	POST /documents	Source
PUT	/api/ia/rag/documents/{id}	PUT /documents/{id}	Source
DELETE	/api/ia/rag/documents/{id}	DELETE /documents/{id}	Source
POST	/api/ia/rag/search	POST /search	Source
POST	/api/ia/rag/vault	POST /vault	Source
GET	/api/ia/status	GET /status	Source
GET	/api/ia/profile	GET /profile	Source
PUT	/api/ia/profile	PUT /profile	Source
GET	/api/ia/conversations	GET /conversations	Source
POST	/api/ia/conversations	POST /conversations	Source
PATCH	/api/ia/conversations/{id}	PATCH /conversations/{id}	Source
DELETE	/api/ia/conversations/{id}	DELETE /conversations/{id}	Source
GET	/api/ia/conversations/{id}/messages	GET /conversations/{id}/messages	Source
POST	/api/ia/conversations/{id}/messages	POST /conversations/{id}/messages	Source
POST	/api/ia/messages/{id}/feedback	POST /messages/{id}/feedback	Source
GET	/api/inspecoes/risk-methodologies	GET /	Source
POST	/api/inspecoes/risk-methodologies/ensure-legacy	POST /ensure-legacy	Source
GET	/api/inspecoes/risk-methodologies/{id}	GET /{id}	Source
POST	/api/inspecoes/risk-methodologies	POST /	Source
PATCH	/api/inspecoes/risk-methodologies/{id}/activate	PATCH /{id}/activate	Source
PATCH	/api/inspecoes/risk-methodologies/{id}/archive	PATCH /{id}/archive	Source
GET	/api/inspecoes/risk-assessments	GET /	Source
GET	/api/inspecoes/risk-assessments/latest	GET /latest	Source
POST	/api/inspecoes/risk-assessments	POST /	Source
POST	/api/inspecoes/risk-assessments/create-risk-item	POST /create-risk-item	Source
GET	/api/internal/agentic-capabilities/authorization/{userId}/roles	Resolves current tenant-bound role assignments for a workflow-owned policy recheck.	Source
GET	/api/internal/agentic-capabilities/notification-recipients/{userId}/email	GET /notification-recipients/{userId}/email	Source
GET	/api/internal/agentic-capabilities/work-permit/{workPermitId}/analysis-context	GET /work-permit/{workPermitId}/analysis-context	Source
POST	/api/internal/agentic-capabilities/work-permit/update-validity	POST /work-permit/update-validity	Source
POST	/api/internal/agentic-capabilities/work-permit/cancel	Cancels only a draft Work Permit through a pinned compensating capability.	Source
POST	/api/internal/agentic-capabilities/work-permit/create	Creates one Work Permit only through a pinned, authenticated capability contract.	Source
POST	/api/laudos-tecnicos/{id}/revisions/{revId}/aet-recommendations/{entityId}/send-to-action-plan	POST /{id}/revisions/{revId}/aet-recommendations/{entityId}/send-to-action-plan	Source
GET	/api/laudos-tecnicos/{id}/revisions/{revId}/aet-task-comparison	GET /{id}/revisions/{revId}/aet-task-comparison	Source
POST	/api/laudos-tecnicos/{reportId}/workflow/transition	POST /:reportId/workflow/transition Body: { targetStatus, reason?, acknowledgeWarnings? }	Source
GET	/api/laudos-tecnicos/{reportId}/workflow/gate	GET /:reportId/workflow/gate Check if a transition is allowed without performing it.	Source
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/review	POST /:reportId/revisions/:revisionId/review Body: { decision: "approved"	"rejected", comment? }
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/approve	POST /:reportId/revisions/:revisionId/approve Body: { decision: "approved"	"rejected", comment? }
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/prepare-artifact	POST /:reportId/revisions/:revisionId/prepare-artifact Idempotently freezes the snapshot and creates the official PDF. This does not issue the document and does not activate public verification.	Source
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/emit	Legacy endpoint retained as an explicit compatibility error.	Source
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/preview	POST /:reportId/revisions/:revisionId/preview Generate preview PDF (watermarked, no snapshot persistence).	Source
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/sign	POST /:reportId/revisions/:revisionId/sign Body: { signatureType: "INTERNAL_ELECTRONIC"	"EXTERNAL_SIGNED_UPLOAD" } For EXTERNAL_SIGNED_UPLOAD: include signedPdfBase64 (base64-encoded PDF). Validates: - Emission exists and is in PENDING state - Signer is a responsible professional for this report - For EXTERNAL_SIGNED_UPLOAD: validates PDF content type and stores separately - Signature is bound to snapshotHash + pdfHash
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/issue	POST /:reportId/revisions/:revisionId/issue Officially issues an already prepared and signed artifact.	Source
POST	/api/laudos-tecnicos/{reportId}/new-revision	POST /:reportId/new-revision Body: { changeReason }	Source
GET	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/download	GET /:reportId/revisions/:revisionId/download Download the official PDF (requires authorization).	Source
GET	/api/laudos-tecnicos/verify/{verificationCode}	GET /verify/{verificationCode}	Source
GET	/api/laudos-tecnicos/{reportId}/timeline	GET /:reportId/timeline Full audit timeline of the document.	Source
GET	/api/laudos-tecnicos/{reportId}/compare-revisions	GET /:reportId/compare-revisions Query: ?from=0&to=1	Source
POST	/api/laudos-tecnicos/{reportId}/revisions/{revisionId}/cancel	POST /:reportId/revisions/:revisionId/cancel Body: { reason }	Source
GET	/api/laudos-tecnicos/{reportId}/emissions	GET /:reportId/emissions List all emissions for a report.	Source
GET	/api/official-ca/search	GET /search	Source
GET	/api/official-ca/freshness	GET /freshness	Source
GET	/api/official-ca/changes/recent	GET /changes/recent	Source
GET	/api/official-ca/{caNumber}	GET /{caNumber}	Source
GET	/api/official-ca/{caNumber}/generations	GET /{caNumber}/generations	Source
GET	/api/official-ca/{caNumber}/changes	GET /{caNumber}/changes	Source
GET	/api/usuarios	GET /	Source
POST	/api/usuarios	POST /	Source
PUT	/api/usuarios/{id}	PUT /{id}	Source
DELETE	/api/usuarios/{id}	DELETE /{id}	Source
POST	/api/usuarios/{id}/roles	POST /{id}/roles	Source
DELETE	/api/usuarios/{id}/roles/{roleId}	DELETE /{id}/roles/{roleId}	Source
GET	/api/work-permits	GET /	Source
GET	/api/work-permits/{id}	GET /{id}	Source
GET	/api/work-permits/{id}/components	GET /{id}/components	Source
POST	/api/work-permits	POST /	Source
PATCH	/api/work-permits/{id}/validity	PATCH /{id}/validity	Source
PATCH	/api/work-permits/{id}	PATCH /{id}	Source
POST	/api/work-permits/{id}/components	POST /{id}/components	Source
PATCH	/api/work-permits/{id}/components/{componentId}	PATCH /{id}/components/{componentId}	Source
DELETE	/api/work-permits/{id}/components/{componentId}	DELETE /{id}/components/{componentId}	Source