{
  "openapi": "3.1.0",
  "info": {
    "title": "Intramedial API",
    "version": "0.43.1",
    "description": "The Intramedial Agent Coordination Plane over REST: fleet, admission and leases, mandates, enforcement points, detection, negotiation and courts, arenas and the evidence record. Every operation exposed here is also reachable via MCP, ChatGPT Apps, Gemini Extensions, Perplexity, Claude Cowork, and A2A — see AGENTS.md for the catalogue. Auto-generated from `@intramedial/contracts@0.43.1` on 2026-09-20T00:00:00.000Z.",
    "contact": {
      "name": "Intramedial",
      "url": "https://intramedial.com",
      "email": "support@intramedial.com"
    },
    "license": {
      "name": "Intramedial Terms of Service",
      "url": "https://intramedial.com/terms"
    },
    "x-intramedial-generated-at": "2026-09-20T00:00:00.000Z",
    "x-intramedial-contracts-version": "0.43.1"
  },
  "servers": [
    {
      "url": "https://api.intramedial.com",
      "description": "Production gateway."
    },
    {
      "url": "https://api.staging.intramedial.com",
      "description": "Staging gateway."
    }
  ],
  "tags": [
    {
      "name": "fleet",
      "description": "Fleet and world model. Who each agent is, who it answers to, what it sees."
    },
    {
      "name": "admission",
      "description": "Intents and leases. Who may touch a shared resource, and for how long."
    },
    {
      "name": "policy",
      "description": "Mandates and packs. The rules agents run under, written down as code."
    },
    {
      "name": "enforcement",
      "description": "Enforcement points. Where the plane stands between an agent and the world."
    },
    {
      "name": "detection",
      "description": "Detection and rehearsal. Collisions found before they turn into outages."
    },
    {
      "name": "arbitration",
      "description": "Negotiation and courts. How a conflict between agents ends, and who decided."
    },
    {
      "name": "arenas",
      "description": "Arenas and yards. Neutral ground where agents meet, deal and work."
    },
    {
      "name": "record",
      "description": "Record and recovery. What happened, who did it, and how to put it back."
    }
  ],
  "paths": {
    "/api/v1/acp/coordination/fleetmap": {
      "get": {
        "operationId": "coordination_fleetmap",
        "summary": "Fleet Map: Every agent in your workspace on one screen: what its mandate lets it do, which leases it holds right now, how far it is trusted, and whether it is stopped.",
        "x-intramedial-description-key": "actions.coordination.fleetmap.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { agents, leases, grants, waiters, presence, quarantined, mcpMode, github, ledger }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/identity/enroll": {
      "post": {
        "operationId": "identity_enroll",
        "summary": "Agent identity registry: Enroll each agent as its own identity principal, with a DID, an accountable owner and its keys.",
        "x-intramedial-description-key": "actions.identity.enroll.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "did": {
                    "type": "string"
                  },
                  "displayName": {
                    "type": "string"
                  },
                  "kind": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { agent, skipped }",
                  "value": {
                    "did": "did:web:acme.example:agent:billing",
                    "displayName": "Billing agent",
                    "kind": "customer"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { agent, skipped }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/mcp/shadow": {
      "get": {
        "operationId": "mcp_shadow",
        "summary": "Shadow agent discovery: Find the agents nobody registered.",
        "x-intramedial-description-key": "actions.mcp.shadow.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { events, kind, protocolVersion }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/presence": {
      "post": {
        "operationId": "civics_presence",
        "summary": "Agent presence: Who else is working here, and on what – one call away.",
        "x-intramedial-description-key": "actions.civics.presence.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "did": {
                    "type": "string"
                  },
                  "status": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { row, all }",
                  "value": {
                    "did": "did:web:acme.example:agent:billing",
                    "status": "online"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { row, all }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/trust/get": {
      "get": {
        "operationId": "trust_get",
        "summary": "Trust scores and autonomy: Turn an agent's history into graduated autonomy.",
        "x-intramedial-description-key": "actions.trust.get.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "did",
            "in": "query",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { profile }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/worldmodel/graph": {
      "get": {
        "operationId": "worldmodel_graph",
        "summary": "World model graph: Everything your workspace knows by name, and how it connects.",
        "x-intramedial-description-key": "actions.worldmodel.graph.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { nodes, llm }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/cartographer/map": {
      "get": {
        "operationId": "cartographer_map",
        "summary": "Cartographer edge review: Connections between resources that were proposed but are not yet law.",
        "x-intramedial-description-key": "actions.cartographer.map.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { edges, pending, bounds }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/tenancy/tree": {
      "get": {
        "operationId": "tenancy_tree",
        "summary": "Tenant tree and reach: The tenant tree, and who may reach each branch.",
        "x-intramedial-description-key": "actions.tenancy.tree.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { tenants, valid }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/onramp/sources": {
      "get": {
        "operationId": "onramp_sources",
        "summary": "Fleet on-ramp from export: Bring an existing fleet across from an export instead of rebuilding it.",
        "x-intramedial-description-key": "actions.onramp.sources.description",
        "tags": [
          "fleet"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { v, sources }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/coordination/admit": {
      "post": {
        "operationId": "coordination_admit",
        "summary": "Intralock admission: Declare what an agent is about to do – the actor, the resource, the verb – before it acts.",
        "x-intramedial-description-key": "actions.coordination.admit.description",
        "tags": [
          "admission"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "actorDid": {
                    "type": "string"
                  },
                  "resource": {
                    "type": "string"
                  },
                  "action": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { result: { allow, reason }, llm: false }",
                  "value": {
                    "actorDid": "did:web:acme.example:agent:billing",
                    "resource": "repo:payments/main",
                    "action": "write"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { result: { allow, reason }, llm: false }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/coordination/lease": {
      "post": {
        "operationId": "coordination_lease",
        "summary": "Resource leases and queues: Short-lived, scoped leases on anything two agents could fight over: a branch, a table, a deploy slot.",
        "x-intramedial-description-key": "actions.coordination.lease.description",
        "tags": [
          "admission"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "resource": {
                    "type": "string"
                  },
                  "actorDid": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { ok, lease } or { ok: false, reason, holder }",
                  "value": {
                    "resource": "lock:deploy/production",
                    "actorDid": "did:web:acme.example:agent:release"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { ok, lease } or { ok: false, reason, holder }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/claims": {
      "post": {
        "operationId": "civics_claims",
        "summary": "Resource claims office: Stake a claim on a resource before work starts, so other agents see it before they collide.",
        "x-intramedial-description-key": "actions.civics.claims.description",
        "tags": [
          "admission"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "title": {
                    "type": "string"
                  },
                  "resource": {
                    "type": "string"
                  },
                  "by": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { stub, desk, title, claim, contest?, liaison }",
                  "value": {
                    "title": "Migrate the billing schema",
                    "resource": "db:billing",
                    "by": "did:web:acme.example:agent:billing"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { stub, desk, title, claim, contest?, liaison }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/metering/snapshot": {
      "get": {
        "operationId": "metering_snapshot",
        "summary": "Metered usage by workspace: What the plane has counted for your workspace, meter by meter.",
        "x-intramedial-description-key": "actions.metering.snapshot.description",
        "tags": [
          "admission"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { meters, billingMeterIds }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/coordination/approve": {
      "post": {
        "operationId": "coordination_approve",
        "summary": "Human approval queue: Intents that reach a human gate wait here for a person.",
        "x-intramedial-description-key": "actions.coordination.approve.description",
        "tags": [
          "admission"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string"
                  },
                  "reason": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { approval, ledgered }",
                  "value": {
                    "id": "apr_1",
                    "reason": "expected batch"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { approval, ledgered }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/dual-control/scopes": {
      "get": {
        "operationId": "dual_control_scopes",
        "summary": "Two-person dual control: Destructive actions wait for a second person.",
        "x-intramedial-description-key": "actions.dual-control.scopes.description",
        "tags": [
          "admission"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { scopes, seal, open }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/mandates/compile": {
      "post": {
        "operationId": "mandates_compile",
        "summary": "Mandate studio and replay: Write an agent's charter as code: what it is for, what it may touch, at what priority and under whose authority.",
        "x-intramedial-description-key": "actions.mandates.compile.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "source": {
                    "type": "string"
                  },
                  "apply": {
                    "type": "boolean"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { mandate, applied, snapshot, previewDigest }",
                  "value": {
                    "source": "mandate billing-writes\nallow write on repo:payments/main for did:web:acme.example:agent:billing",
                    "apply": false
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { mandate, applied, snapshot, previewDigest }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/settings": {
      "get": {
        "operationId": "civics_settings",
        "summary": "Workspace constitution: How fast a human must answer when an agent asks for help, and who is on call to do it.",
        "x-intramedial-description-key": "actions.civics.settings.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { workspace, platform, effective, urgencies }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/change-trains/list": {
      "get": {
        "operationId": "change_trains_list",
        "summary": "Staged change trains: A change to a policy, a pack, a role or an adapter reaches the fleet in stages, with a measured check between each one and a way back.",
        "x-intramedial-description-key": "actions.change-trains.list.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { trains, stages }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/packs/list": {
      "get": {
        "operationId": "packs_list",
        "summary": "Signed pack registry: The packs your workspace can load – parley formats, drill scenarios, yard templates: what each one grants, who wrote it, how well it conforms, and the rules for letting a new one in.",
        "x-intramedial-description-key": "actions.packs.list.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { packs }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/lenses/run": {
      "post": {
        "operationId": "lenses_run",
        "summary": "Governance lenses: Install deterministic governance lenses from a curated catalogue and run one over whatever you send it.",
        "x-intramedial-description-key": "actions.lenses.run.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "installId": {
                    "type": "string"
                  },
                  "input": {
                    "type": "object",
                    "additionalProperties": true
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { result: { status, findings, evidence } }",
                  "value": {
                    "installId": "install_7c2e",
                    "input": {
                      "leases": [
                        {
                          "id": "l1",
                          "resource": "repo:payments/main",
                          "holder": "did:web:acme.example:agent:billing",
                          "start": "2026-11-01T09:00:00Z",
                          "end": "2026-11-01T10:00:00Z"
                        },
                        {
                          "id": "l2",
                          "resource": "repo:payments/main",
                          "holder": "did:web:acme.example:agent:refunds",
                          "start": "2026-11-01T09:30:00Z",
                          "end": "2026-11-01T10:30:00Z"
                        }
                      ]
                    }
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { result: { status, findings, evidence } }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/attestation/policy": {
      "get": {
        "operationId": "attestation_policy",
        "summary": "Artifact build attestation: Who built a policy snapshot or a detector pack, as opposed to who wrote it.",
        "x-intramedial-description-key": "actions.attestation.policy.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { policy, kinds, attested }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/pack-revenue/balances": {
      "get": {
        "operationId": "pack_revenue_balances",
        "summary": "Pack revenue ledger: The earnings ledger behind the pack registry.",
        "x-intramedial-description-key": "actions.pack-revenue.balances.description",
        "tags": [
          "policy"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { balances, currency }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/mcp/enforce": {
      "post": {
        "operationId": "mcp_enforce",
        "summary": "MCP gateway enforcement: A front for any MCP server.",
        "x-intramedial-description-key": "actions.mcp.enforce.description",
        "tags": [
          "enforcement"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "actorDid": {
                    "type": "string"
                  },
                  "tool": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { allow, reason, action, llm }",
                  "value": {
                    "actorDid": "did:web:acme.example:agent:support",
                    "tool": "fs.write"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { allow, reason, action, llm }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/github/enforce": {
      "post": {
        "operationId": "github_enforce",
        "summary": "GitHub write gate: Writes to your repositories go through the plane.",
        "x-intramedial-description-key": "actions.github.enforce.description",
        "tags": [
          "enforcement"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "repo": {
                    "type": "string"
                  },
                  "actorDid": {
                    "type": "string"
                  },
                  "action": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { allow, reason, commitStatus, checkRun }",
                  "value": {
                    "repo": "acme/payments",
                    "actorDid": "did:web:acme.example:agent:billing",
                    "action": "write"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { allow, reason, commitStatus, checkRun }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/saas/admit": {
      "post": {
        "operationId": "saas_admit",
        "summary": "SaaS connector admission: Actions on ticketing, CRM, messaging and storage tools pass the same admission as code and data.",
        "x-intramedial-description-key": "actions.saas.admit.description",
        "tags": [
          "enforcement"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "source": {
                    "type": "string"
                  },
                  "actorDid": {
                    "type": "string"
                  },
                  "action": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { result: { allow, reason }, llm: false }",
                  "value": {
                    "source": "github",
                    "actorDid": "did:web:acme.example:agent:support",
                    "action": "write"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { result: { allow, reason }, llm: false }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/iam/assume": {
      "post": {
        "operationId": "iam_assume",
        "summary": "Cloud credential broker: Agents hold no standing cloud credentials.",
        "x-intramedial-description-key": "actions.iam.assume.description",
        "tags": [
          "enforcement"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "roleArn": {
                    "type": "string"
                  },
                  "actorDid": {
                    "type": "string"
                  },
                  "sessionName": {
                    "type": "string"
                  },
                  "webIdentityToken": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { assumed, leaseId, expirationMs, accessKeyId, secretAccessKey, sessionToken }",
                  "value": {
                    "roleArn": "arn:aws:iam::123456789012:role/deploy",
                    "actorDid": "did:web:acme.example:agent:release",
                    "sessionName": "release-agent",
                    "webIdentityToken": "eyJ…"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { assumed, leaseId, expirationMs, accessKeyId, secretAccessKey, sessionToken }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/coordination/halt": {
      "post": {
        "operationId": "coordination_halt",
        "summary": "Emergency stop switches: Stop an agent, a mandate, a resource or the whole workspace in one step, and lift the stop again when it is safe.",
        "x-intramedial-description-key": "actions.coordination.halt.description",
        "tags": [
          "enforcement"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "scope": {
                    "type": "string"
                  },
                  "target": {
                    "type": "string"
                  },
                  "reason": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { ok, halt, created, ledgered }",
                  "value": {
                    "scope": "agent",
                    "target": "did:web:acme.example:agent:billing",
                    "reason": "runaway writes"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { ok, halt, created, ledgered }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/coordination/quarantine": {
      "post": {
        "operationId": "coordination_quarantine",
        "summary": "Agent quarantine: Take one agent out of play without stopping the rest of the fleet.",
        "x-intramedial-description-key": "actions.coordination.quarantine.description",
        "tags": [
          "enforcement"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "did": {
                    "type": "string"
                  },
                  "warrant": {
                    "type": "object",
                    "additionalProperties": true
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { ok, did, kind }",
                  "value": {
                    "did": "did:web:acme.example:agent:billing",
                    "warrant": {
                      "kind": "dual-control",
                      "id": "dc_3a91"
                    }
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { ok, did, kind }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/detection/run": {
      "post": {
        "operationId": "detection_run",
        "summary": "Conflict detection: Detectors that look for agents getting in each other's way: overlapping claims, flip-flop edits, stampedes, actions that differ from what was declared.",
        "x-intramedial-description-key": "actions.detection.run.description",
        "tags": [
          "detection"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string"
                  },
                  "forceInline": {
                    "type": "boolean"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { detector, hits, conflicts, llm, filed, suppressed, filedOn }",
                  "value": {
                    "id": "lease-overlap",
                    "forceInline": true
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { detector, hits, conflicts, llm, filed, suppressed, filedOn }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/conflict-audit/latest": {
      "get": {
        "operationId": "conflict_audit_latest",
        "summary": "Conflict audit report: Intramedial's own audit of the conflicts your workspace has recorded: who contended, how complete the evidence behind each dataset is, and which resources could move from observe toward enforce.",
        "x-intramedial-description-key": "actions.conflict-audit.latest.description",
        "tags": [
          "detection"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { report }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/drills/counterfactual": {
      "post": {
        "operationId": "drills_counterfactual",
        "summary": "Counterfactual simulation: Rehearse a change before making it.",
        "x-intramedial-description-key": "actions.drills.counterfactual.description",
        "tags": [
          "detection"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "packId": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { packId, probes, before, after, result, llm }",
                  "value": {
                    "packId": "pack_counterfactual"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { packId, probes, before, after, result, llm }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/drills/frt": {
      "get": {
        "operationId": "drills_frt",
        "summary": "Turf-war drills: Chaos engineering for agent fleets.",
        "x-intramedial-description-key": "actions.drills.frt.description",
        "tags": [
          "detection"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { results, llm }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/watchdog/check": {
      "get": {
        "operationId": "watchdog_check",
        "summary": "Issuance watchdog: An independent check on how fast leases are taken and credentials issued.",
        "x-intramedial-description-key": "actions.watchdog.check.description",
        "tags": [
          "detection"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { at, findings, scanned, background, watched }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/conformity/sweep": {
      "get": {
        "operationId": "conformity_sweep",
        "summary": "SI/AI disclosure conformity: Whether every agent that may talk to a person carries the SI/AI disclosure label the EU AI Act asks for, and what a change to the fleet would do to that before you make it.",
        "x-intramedial-description-key": "actions.conformity.sweep.description",
        "tags": [
          "detection"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { report, findings, undeclared, basis, llm }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/negotiate/propose": {
      "post": {
        "operationId": "negotiate_propose",
        "summary": "Structured negotiation: Where the parties to a conflict try to settle before it goes to an arbiter.",
        "x-intramedial-description-key": "actions.negotiate.propose.description",
        "tags": [
          "arbitration"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string"
                  },
                  "actorDid": {
                    "type": "string"
                  },
                  "text": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { session }",
                  "value": {
                    "id": "neg_1",
                    "actorDid": "did:web:acme.example:agent:release",
                    "text": "Split the deploy window 60/40"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { session }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/arbitration/arbiter": {
      "post": {
        "operationId": "arbitration_arbiter",
        "summary": "Bounded arbiter: When the parties cannot settle, an arbiter rules with bounded authority.",
        "x-intramedial-description-key": "actions.arbitration.arbiter.description",
        "tags": [
          "arbitration"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string"
                  },
                  "conflictId": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { case, precedents, workflowId, llm, appealPath }",
                  "value": {
                    "id": "arb_1",
                    "conflictId": "cfl_1"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { case, precedents, workflowId, llm, appealPath }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/courts/file": {
      "post": {
        "operationId": "courts_file",
        "summary": "Courts and precedent: File a case between agents, add evidence, cite precedent and follow it from hearing to ruling.",
        "x-intramedial-description-key": "actions.courts.file.description",
        "tags": [
          "arbitration"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "title": {
                    "type": "string"
                  },
                  "parties": {
                    "type": "array",
                    "items": {
                      "type": "string"
                    }
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { item }",
                  "value": {
                    "title": "Deploy slot dispute",
                    "parties": [
                      "did:web:acme.example:agent:release",
                      "did:web:acme.example:agent:cost"
                    ]
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { item }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/forum": {
      "post": {
        "operationId": "civics_forum",
        "summary": "Resource-bound forum: Discussion between people and agents, bound to the resource it is about.",
        "x-intramedial-description-key": "actions.civics.forum.description",
        "tags": [
          "arbitration"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "title": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { topic, guard, llm, liaison }",
                  "value": {
                    "title": "Freeze on payments deploys"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { topic, guard, llm, liaison }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/treaties": {
      "get": {
        "operationId": "civics_treaties",
        "summary": "Treaties between parties: Written agreements between parties: what each side may do on shared ground, in which version, and who has accepted it.",
        "x-intramedial-description-key": "actions.civics.treaties.description",
        "tags": [
          "arbitration"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { treaties }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/asks": {
      "get": {
        "operationId": "civics_asks",
        "summary": "Human liaison desk: Where agents ask the humans a question instead of guessing.",
        "x-intramedial-description-key": "actions.civics.asks.description",
        "tags": [
          "arbitration"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { asks, sla, oncall, you }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/parley/open": {
      "post": {
        "operationId": "parley_open",
        "summary": "Parley neutral arenas: Neutral ground any agent can summon: a bounded arena where parties meet to negotiate or work out a dispute, under a pack of rules both accept.",
        "x-intramedial-description-key": "actions.parley.open.description",
        "tags": [
          "arenas"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "topic": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { arena } (no `ok` field; `ok: true` is the response envelope, not part of the module's own data)",
                  "value": {
                    "topic": "deploy freeze"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { arena } (no `ok` field; `ok: true` is the response envelope, not part of the module's own data)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/directory/lookup": {
      "post": {
        "operationId": "directory_lookup",
        "summary": "Gatehouse front door: The door other organizations' agents knock on.",
        "x-intramedial-description-key": "actions.directory.lookup.description",
        "tags": [
          "arenas"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "query": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { hits } (the `lookup` action returns `hits`; `entries` is what `directory.list` returns)",
                  "value": {
                    "query": "did:web:acme.example"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { hits } (the `lookup` action returns `hits`; `entries` is what `directory.list` returns)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/yards/list": {
      "get": {
        "operationId": "yards_list",
        "summary": "Registered yards: Persistent, governed environments where a fleet does real work under one constitution.",
        "x-intramedial-description-key": "actions.yards.list.description",
        "tags": [
          "arenas"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { yards }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/roles/charters": {
      "get": {
        "operationId": "roles_charters",
        "summary": "Roles and posts: Who holds each post in a yard.",
        "x-intramedial-description-key": "actions.roles.charters.description",
        "tags": [
          "arenas"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { utility, application, names } (there is no `charters` field; `utility` lists the seven frozen posts and `application` lists the ones a yard has declared)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/previews/list": {
      "get": {
        "operationId": "previews_list",
        "summary": "Pull request preview arenas: An arena per pull request, forked from a real yard with participants hidden and only a sample of data.",
        "x-intramedial-description-key": "actions.previews.list.description",
        "tags": [
          "arenas"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { previews, summary } (summary carries live, reaped, expiringWithin24h and oldestLiveKey counts, left out of the catalogue sample)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/settlement/list": {
      "get": {
        "operationId": "settlement_list",
        "summary": "Settlement and escrow: When parties seal a commitment that involves money, a settlement holds the evidence: an escrow against an AP2 mandate, what was delivered, and any dispute.",
        "x-intramedial-description-key": "actions.settlement.list.description",
        "tags": [
          "arenas"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { settlements, fundsMoved: false } (list and get always carry the fundsMoved sentinel alongside settlements)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/civics/records": {
      "get": {
        "operationId": "civics_records",
        "summary": "Public records search: Ask the record what happened.",
        "x-intramedial-description-key": "actions.civics.records.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { projection, disclosureLevel, events } (filtering by resource also adds lastTouch, unknown and why)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/ledger/blame": {
      "post": {
        "operationId": "ledger_blame",
        "summary": "Ledger, replay and blame: Every intent, lease, action, conflict and ruling lands in an append-only ledger, batched under Merkle roots.",
        "x-intramedial-description-key": "actions.ledger.blame.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "resource": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { projection, resource, events, lastTouch, unknown, why } (not a bare { events })",
                  "value": {
                    "resource": "repo:payments/main"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { projection, resource, events, lastTouch, unknown, why } (not a bare { events })",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/ledger-bundles/snapshot": {
      "post": {
        "operationId": "ledger_bundles_snapshot",
        "summary": "Signed evidence bundles: Seal a snapshot of your workspace's audit chain into a signed bundle that an auditor can download and check offline, without asking Intramedial anything.",
        "x-intramedial-description-key": "actions.ledger-bundles.snapshot.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {},
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { bundle }",
                  "value": {}
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { bundle }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/remediation/blast": {
      "post": {
        "operationId": "remediation_blast",
        "summary": "Blast map and remediation: Map what an agent's admitted actions touched downstream, and who consumed it, before you undo anything.",
        "x-intramedial-description-key": "actions.remediation.blast.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "runId": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { run, blastMap } (no touched field exists anywhere in the module)",
                  "value": {
                    "runId": "run_1"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { run, blastMap } (no touched field exists anywhere in the module)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/portmind/memory/{agentId}": {
      "get": {
        "operationId": "portmind_memory",
        "summary": "Agent memory snapshots: Inspect what an agent remembers, add or remove entries, and take a Merkle snapshot of its memory, the exact input a memory receipt would later sign.",
        "x-intramedial-description-key": "actions.portmind.memory.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "agentId",
            "in": "path",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { entry: { agentRef, key, value, contentSha256, tags, version, createdAt, updatedAt } } for one key (add ?agentRef=); 404 if no live entry. The no-key list route returns { entries }",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/rehoming/plan": {
      "post": {
        "operationId": "rehoming_plan",
        "summary": "Region rehoming: Where this workspace's coordination records live, and a guarded way to move them to another region.",
        "x-intramedial-description-key": "actions.rehoming.plan.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "to": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { from, to, pinDOs, doClasses, targetWorker, euBound, status, workflowId, llm } (flat; the { plan } wrapper is what rehoming.status returns, not rehoming.plan)",
                  "value": {
                    "to": "weur"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { from, to, pinDOs, doClasses, targetWorker, euBound, status, workflowId, llm } (flat; the { plan } wrapper is what rehoming.status returns, not rehoming.plan)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/exit/objectives": {
      "get": {
        "operationId": "exit_objectives",
        "summary": "Exit and export: The no-hostage clause, made checkable.",
        "x-intramedial-description-key": "actions.exit.objectives.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { objectives, unverified, missed, classes } (no top-level measured field; each objective's measured value is at objectives[].observed)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/compliance/pack": {
      "post": {
        "operationId": "compliance_pack",
        "summary": "Compliance evidence packs: Fourteen controls mapped to the EU AI Act and NIST AI RMF, measured against evidence this workspace actually has.",
        "x-intramedial-description-key": "actions.compliance.pack.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$schema": "https://json-schema.org/draft/2020-12/schema",
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string"
                  }
                },
                "required": [],
                "additionalProperties": true
              },
              "examples": {
                "example_0": {
                  "summary": "→ 200 { pack, wraps, invoked, artifacts } (not { controls, gaps } – that shape belongs to coverage and evidence-pack, different actions)",
                  "value": {
                    "id": "art12"
                  }
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { pack, wraps, invoked, artifacts } (not { controls, gaps } – that shape belongs to coverage and evidence-pack, different actions)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "mutation",
        "x-intramedial-confirmation-policy": "ask",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_invocation",
        "x-intramedial-idempotent": false,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    },
    "/api/v1/acp/outcomes/summary": {
      "get": {
        "operationId": "outcomes_summary",
        "summary": "Impact HQ outcomes: Connect governed agent activity to outcomes you can measure.",
        "x-intramedial-description-key": "actions.outcomes.summary.description",
        "tags": [
          "record"
        ],
        "parameters": [
          {
            "name": "X-Idempotency-Key",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "maxLength": 120
            },
            "description": "Required for mutating non-idempotent actions; recommended otherwise. Echo to retry a request without double-effect."
          },
          {
            "name": "X-Intramedial-Confirmation",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^conf_[0-9A-Z]{20,}$"
            },
            "description": "Step-up confirmation token, obtained from a prior 412 challenge or from the dashboard's elevation flow."
          },
          {
            "name": "X-Intramedial-Intent",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "pattern": "^intent_[0-9A-Z]{20,}$"
            },
            "description": "Optional intent-claim id — anti-confused-deputy primitive. Required for any cross-workspace agentic delegation."
          },
          {
            "name": "Intramedial-Workspace-Id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "pattern": "^(iml-)?ws_[0-9A-Za-z]{20,}$"
            },
            "description": "Active workspace id. Required for any workspace-scoped action."
          },
          {
            "name": "DPoP",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string"
            },
            "description": "RFC 9449 DPoP proof JWS — required when calling with a DPoP-bound token. The gateway rejects mismatched proofs."
          }
        ],
        "responses": {
          "200": {
            "description": "Success.",
            "content": {
              "application/json": {
                "schema": {
                  "$schema": "https://json-schema.org/draft/2020-12/schema",
                  "type": "object",
                  "properties": {},
                  "additionalProperties": true
                },
                "examples": {
                  "example_0": {
                    "summary": "→ 200 { window, assumptionVersion, metrics, comparison? } (no top-level outcomes or assumptions; the full assumptions object comes from assumptions.get, assumptions.history or export)",
                    "value": {}
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid request body.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "401": {
            "description": "Unauthenticated.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "403": {
            "description": "Forbidden — missing permission or kill-switch active.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "409": {
            "description": "Idempotency conflict.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "412": {
            "description": "Confirmation required. Obtain `X-Intramedial-Confirmation` and retry.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ConfirmationRequired"
                }
              }
            }
          },
          "429": {
            "description": "Rate-limited.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          },
          "500": {
            "description": "Server error.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorEnvelope"
                }
              }
            }
          }
        },
        "security": [
          {
            "BearerPat": []
          },
          {
            "OAuth2": []
          },
          {
            "WorkspaceApiKey": []
          }
        ],
        "x-intramedial-safety-level": "read",
        "x-intramedial-confirmation-policy": "none",
        "x-intramedial-rate-class": "default",
        "x-intramedial-audit-kind": "agent_read",
        "x-intramedial-idempotent": true,
        "x-intramedial-surfaces": [
          "rest",
          "mcp",
          "chatgpt_app",
          "gemini",
          "perplexity",
          "claude_cowork",
          "claude_skill",
          "a2a",
          "nlweb"
        ]
      }
    }
  },
  "components": {
    "schemas": {
      "ErrorEnvelope": {
        "type": "object",
        "required": [
          "error"
        ],
        "properties": {
          "error": {
            "type": "object",
            "required": [
              "code",
              "message"
            ],
            "properties": {
              "code": {
                "type": "string",
                "description": "Machine-readable error code."
              },
              "message": {
                "type": "string",
                "description": "Human-readable error message."
              },
              "details": {
                "type": "object",
                "additionalProperties": true
              },
              "requestId": {
                "type": "string",
                "description": "Server-assigned request id for support."
              }
            }
          }
        }
      },
      "ConfirmationRequired": {
        "type": "object",
        "required": [
          "error",
          "confirmation"
        ],
        "properties": {
          "error": {
            "$ref": "#/components/schemas/ErrorEnvelope/properties/error"
          },
          "confirmation": {
            "type": "object",
            "required": [
              "challengeId",
              "confirmationUrl",
              "expiresAt"
            ],
            "properties": {
              "challengeId": {
                "type": "string"
              },
              "confirmationUrl": {
                "type": "string",
                "format": "uri"
              },
              "expiresAt": {
                "type": "string",
                "format": "date-time"
              },
              "reason": {
                "type": "string"
              }
            }
          }
        }
      }
    },
    "securitySchemes": {
      "BearerPat": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "Intramedial PAT (itml_pat_*)",
        "description": "Personal access token. Scopes are derived from the actor's org + workspace roles."
      },
      "OAuth2": {
        "type": "oauth2",
        "description": "OAuth 2.1 + PKCE + DPoP — for agentic apps acting on behalf of an Intramedial user.",
        "flows": {
          "authorizationCode": {
            "authorizationUrl": "https://intramedial.com/auth/authorize",
            "tokenUrl": "https://api.intramedial.com/api/v1/oauth/token",
            "scopes": {}
          }
        }
      },
      "WorkspaceApiKey": {
        "type": "apiKey",
        "in": "header",
        "name": "Authorization",
        "description": "Workspace-scoped API key. Sent as `Authorization: Bearer <key>`."
      }
    }
  }
}
