{
  "openapi": "3.1.0",
  "info": {
    "title": "Mirror operator API",
    "version": "1.0.0",
    "summary": "Privacy-blind cross-institution trade reconciliation. The operator compares salted band commitments and signs verdicts; it never holds a value, a band, a corridor price or a salt.",
    "description": "Generated by server/openapi.js and drift-tested against the operator (server/openapi.test.js). Stability: /stability-policy.md. Error codes: /signals.json. Refusals: GET /cannot. Every request schema forbids the raw trade fields the operator refuses (value, unit_qty, band, corridor_edges, shared_secret, salt, quantity, unit_price, total_value, quantity_edges, unit_price_edges, total_value_edges, receipt_secret, measured_kg, declared_kg, table_edges, fine_edges, reference_price, measured_grade, declared_grade, certificate_secret, doc_salt, container, container_number, cargo_key). Verdicts are reconciled, divergent or undetermined - never a score, never a filing decision.",
    "license": {
      "name": "Proprietary - evaluation terms"
    }
  },
  "servers": [
    {
      "url": "https://mirror-operator.vasileburuian94.workers.dev",
      "description": "The live demonstration operator (Cloudflare Worker)"
    }
  ],
  "tags": [
    {
      "name": "Health and keys"
    },
    {
      "name": "Perpetual KYC"
    },
    {
      "name": "Evidence and conformance"
    },
    {
      "name": "Reconciliation"
    },
    {
      "name": "Sign-in"
    },
    {
      "name": "Governance"
    },
    {
      "name": "Witnesses and recall"
    },
    {
      "name": "Webhooks"
    },
    {
      "name": "Transparency log"
    },
    {
      "name": "Disputes and resolution"
    },
    {
      "name": "Disclosure and supervision"
    },
    {
      "name": "Flows and structure"
    }
  ],
  "security": [],
  "paths": {
    "/health": {
      "get": {
        "operationId": "getHealth",
        "tags": [
          "Health and keys"
        ],
        "summary": "Liveness and posture: leg-authentication mode, join-key posture, every route, how this host delivers webhooks.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/jwks": {
      "get": {
        "operationId": "getJwks",
        "tags": [
          "Health and keys"
        ],
        "summary": "The operator's public ES256 signing keys. Everything the operator signs verifies against this, offline.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/registry": {
      "get": {
        "operationId": "getRegistry",
        "tags": [
          "Health and keys"
        ],
        "summary": "The governance registry as folded from quorum-ratified events: members, witnesses, corridors.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/public/registry": {
      "get": {
        "operationId": "getPublicRegistry",
        "tags": [
          "Health and keys"
        ],
        "summary": "The public transparency registry: table hashes, member keys and the log head. Leak-checked before it serves; signed.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true
      }
    },
    "/keys": {
      "get": {
        "operationId": "getKeys",
        "tags": [
          "Health and keys"
        ],
        "summary": "The key registry folded from signed key.register / rotate / revoke events.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/roadmap": {
      "get": {
        "operationId": "getRoadmap",
        "tags": [
          "Health and keys"
        ],
        "summary": "The roadmap's Refused list, binding under change control, with the published page pinned by hash. Signed.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true
      }
    },
    "/cannot": {
      "get": {
        "operationId": "getCannot",
        "tags": [
          "Health and keys"
        ],
        "summary": "The refusal list as a contract: every refusal, its code, what enforces it. Change-controlled and signed.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true
      }
    },
    "/residency": {
      "get": {
        "operationId": "getResidency",
        "tags": [
          "Health and keys"
        ],
        "summary": "Where this operator processes and stores what it receives: a jurisdiction per fact, whether it is observed at runtime or only declared, and what the statement does not cover. Check it with mirror-residency meets(). Signed.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true
      }
    },
    "/pkyc/bases": {
      "get": {
        "operationId": "getPkycBases",
        "tags": [
          "Perpetual KYC"
        ],
        "summary": "The legal bases under which a cross-institution trigger may be shared.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        }
      }
    },
    "/conformance/challenge": {
      "get": {
        "operationId": "getConformanceChallenge",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "A conformance challenge (inputs only). Compute the commitments with your own code and POST them to /conformance/attest.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "seed",
            "in": "query",
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "n",
            "in": "query",
            "schema": {
              "type": "integer"
            }
          }
        ]
      }
    },
    "/corridor/certificate": {
      "get": {
        "operationId": "getCorridorCertificate",
        "tags": [
          "Reconciliation"
        ],
        "summary": "The geometry certificate of a ratified corridor: the widest mispricing that still reconciles, as a ratio and per unit. Query: product, version.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "parameters": [
          {
            "name": "product",
            "in": "query",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "version",
            "in": "query",
            "required": true,
            "schema": {
              "type": "integer"
            }
          }
        ]
      }
    },
    "/auth/challenge": {
      "post": {
        "operationId": "postAuthChallenge",
        "tags": [
          "Sign-in"
        ],
        "summary": "Ask for a single-use challenge for a ratified member key.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/AuthChallengeRequest"
              }
            }
          }
        }
      }
    },
    "/auth/session": {
      "post": {
        "operationId": "postAuthSession",
        "tags": [
          "Sign-in"
        ],
        "summary": "Present the signed challenge; receive a short-lived member session.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/AuthSessionRequest"
              }
            }
          }
        }
      }
    },
    "/auth/whoami": {
      "post": {
        "operationId": "postAuthWhoami",
        "tags": [
          "Sign-in"
        ],
        "summary": "Which member (if any) this credential identifies - and, for a delegated desk key, its scopes.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Empty"
              }
            }
          }
        }
      }
    },
    "/time": {
      "post": {
        "operationId": "postTime",
        "tags": [
          "Health and keys"
        ],
        "summary": "The operator's clock, signed and bound to your nonce. Bound the offset from your own round trip (mirror-clock assess).",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/TimeRequest"
              }
            }
          }
        }
      }
    },
    "/reconcile": {
      "post": {
        "operationId": "postReconcile",
        "tags": [
          "Reconciliation"
        ],
        "summary": "Reconcile one shipment's committed legs. Signed verdict: reconciled, divergent or undetermined - never a score. Pushes verdict.signed to the proven parties.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/ReconcileRequest"
              }
            }
          }
        }
      }
    },
    "/reconcile/dimensions": {
      "post": {
        "operationId": "postReconcileDimensions",
        "tags": [
          "Reconciliation"
        ],
        "summary": "Reconcile quantity and unit price separately; clears only if both agree.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/ReconcileDimensionsRequest"
              }
            }
          }
        }
      }
    },
    "/verify": {
      "post": {
        "operationId": "postVerify",
        "tags": [
          "Reconciliation"
        ],
        "summary": "Verify a signed record against the operator JWKS and the refusal list.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/SignedRecord"
              }
            }
          }
        }
      }
    },
    "/verify-at": {
      "post": {
        "operationId": "postVerifyAt",
        "tags": [
          "Reconciliation"
        ],
        "summary": "Was the signing key valid at the moment the record was signed?",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/undetermined": {
      "post": {
        "operationId": "postUndetermined",
        "tags": [
          "Reconciliation"
        ],
        "summary": "The undetermined burn-down: why verdicts could not be reached, by reason, in counts.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/independence": {
      "post": {
        "operationId": "postIndependence",
        "tags": [
          "Reconciliation"
        ],
        "summary": "What a clear actually rests on: which parties, by ratified class.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/autopsy": {
      "post": {
        "operationId": "postAutopsy",
        "tags": [
          "Reconciliation"
        ],
        "summary": "The synthetic autopsy: the operator measuring its own blind spot on planted cases.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/certificate": {
      "post": {
        "operationId": "postCertificate",
        "tags": [
          "Reconciliation"
        ],
        "summary": "A reconciliation track record as a portable, offline-checkable certificate.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/book": {
      "post": {
        "operationId": "postBook",
        "tags": [
          "Reconciliation"
        ],
        "summary": "The corridor book: the full ratified lineage of a corridor, signed.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/corridor/drift": {
      "post": {
        "operationId": "postCorridorDrift",
        "tags": [
          "Reconciliation"
        ],
        "summary": "Has a ratified price table fallen behind the market? Measured from the operator's own signed verdicts.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/corridor/geometry": {
      "post": {
        "operationId": "postCorridorGeometry",
        "tags": [
          "Reconciliation"
        ],
        "summary": "How much mispricing an agreed table cannot see, per band. Pure arithmetic on the table you send.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/bander/agreement": {
      "post": {
        "operationId": "postBanderAgreement",
        "tags": [
          "Reconciliation"
        ],
        "summary": "Did every leg come from a bander both parties recognise? Standalone agreement and attestation check.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/replay": {
      "post": {
        "operationId": "postReplay",
        "tags": [
          "Reconciliation"
        ],
        "summary": "A period of history as one bound, signed report.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/registry/event": {
      "post": {
        "operationId": "postRegistryEvent",
        "tags": [
          "Governance"
        ],
        "summary": "Submit a member-signed governance event (propose, ratify, suspend...). Folded by quorum. A witness suspended at quorum pushes recall.notice.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/RegistryEventRequest"
              }
            }
          }
        }
      }
    },
    "/charter/build": {
      "post": {
        "operationId": "postCharterBuild",
        "tags": [
          "Governance"
        ],
        "summary": "Build a corridor charter: make the next corridor a countersignature, not a committee.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/charter/status": {
      "post": {
        "operationId": "postCharterStatus",
        "tags": [
          "Governance"
        ],
        "summary": "Where a corridor charter stands.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/ceremony/confirm": {
      "post": {
        "operationId": "postCeremonyConfirm",
        "tags": [
          "Governance"
        ],
        "summary": "Confirm the corridor setup ceremony: proof of possession of the shared corridor key.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/ceremony/assess": {
      "post": {
        "operationId": "postCeremonyAssess",
        "tags": [
          "Governance"
        ],
        "summary": "Assess whether a corridor's setup ceremony is complete.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/demo/genesis": {
      "post": {
        "operationId": "postDemoGenesis",
        "tags": [
          "Governance"
        ],
        "summary": "DEMO ONLY: mint a member identity in the browser. 404 unless the operator runs in demo mode.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/recall/notice": {
      "post": {
        "operationId": "postRecallNotice",
        "tags": [
          "Witnesses and recall"
        ],
        "summary": "Which of MY clears rested on a witness that has fallen? Per member, signed. Never a re-judgement.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/RecallRequest"
              }
            }
          }
        }
      }
    },
    "/recall/summary": {
      "post": {
        "operationId": "postRecallSummary",
        "tags": [
          "Witnesses and recall"
        ],
        "summary": "Cross-member recall totals, withheld below k.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/RecallRequest"
              }
            }
          }
        }
      }
    },
    "/witness/forks": {
      "post": {
        "operationId": "postWitnessForks",
        "tags": [
          "Witnesses and recall"
        ],
        "summary": "Did a witness key sign two histories? Folds the bulletin heads in the ledger plus any you bring.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WitnessForksRequest"
              }
            }
          }
        }
      }
    },
    "/coverage/ghost": {
      "post": {
        "operationId": "postCoverageGhost",
        "tags": [
          "Witnesses and recall"
        ],
        "summary": "The ghost-corridor coverage certificate: where a required leg is structurally absent, in counts.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/path/certificate": {
      "post": {
        "operationId": "postPathCertificate",
        "tags": [
          "Witnesses and recall"
        ],
        "summary": "The cargo path: one certificate per cargo, in counts, with inclusion proofs.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/audit/export": {
      "post": {
        "operationId": "postAuditExport",
        "tags": [
          "Witnesses and recall"
        ],
        "summary": "Your own signed records as SIEM lines (application/x-ndjson in `ndjson`), with a cursor to pull on a schedule. Every line names a signed record; the batch is signed.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/AuditExportRequest"
              }
            }
          }
        }
      }
    },
    "/webhooks/subscribe": {
      "post": {
        "operationId": "postWebhooksSubscribe",
        "tags": [
          "Webhooks"
        ],
        "summary": "Register an https endpoint for signed pushes. Idempotent per (member, url, events). Returns a signed receipt.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookSubscribeRequest"
              }
            }
          }
        }
      }
    },
    "/webhooks/list": {
      "post": {
        "operationId": "postWebhooksList",
        "tags": [
          "Webhooks"
        ],
        "summary": "Your subscriptions and your recent deliveries (state, attempts, next attempt).",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Empty"
              }
            }
          }
        }
      }
    },
    "/webhooks/unsubscribe": {
      "post": {
        "operationId": "postWebhooksUnsubscribe",
        "tags": [
          "Webhooks"
        ],
        "summary": "Remove one of your subscriptions.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookIdRequest"
              }
            }
          }
        }
      }
    },
    "/webhooks/ping": {
      "post": {
        "operationId": "postWebhooksPing",
        "tags": [
          "Webhooks"
        ],
        "summary": "Queue a signed test delivery to one of your subscriptions.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookIdRequest"
              }
            }
          }
        }
      }
    },
    "/webhooks/redeliver": {
      "post": {
        "operationId": "postWebhooksRedeliver",
        "tags": [
          "Webhooks"
        ],
        "summary": "Requeue one of your dead or gone deliveries.",
        "security": [
          {
            "memberSession": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential - a member session is required; the shared pilot token names no institution.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookRedeliverRequest"
              }
            }
          }
        }
      }
    },
    "/anchor/head": {
      "post": {
        "operationId": "postAnchorHead",
        "tags": [
          "Transparency log"
        ],
        "summary": "The signed tree head over the verdict ledger (Certificate-Transparency shaped).",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/anchor/consistency": {
      "post": {
        "operationId": "postAnchorConsistency",
        "tags": [
          "Transparency log"
        ],
        "summary": "Prove a later head extends an earlier one.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/anchor/order": {
      "post": {
        "operationId": "postAnchorOrder",
        "tags": [
          "Transparency log"
        ],
        "summary": "Prove one entry was logged before another existed.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/anchor/witness": {
      "post": {
        "operationId": "postAnchorWitness",
        "tags": [
          "Transparency log"
        ],
        "summary": "Witness cosignatures over a head.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/anchor/gossip": {
      "post": {
        "operationId": "postAnchorGossip",
        "tags": [
          "Transparency log"
        ],
        "summary": "Members compare the signed heads they were shown; a split view is evidence.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/absence/head": {
      "post": {
        "operationId": "postAbsenceHead",
        "tags": [
          "Transparency log"
        ],
        "summary": "The head of the absence log.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/absence/prove": {
      "post": {
        "operationId": "postAbsenceProve",
        "tags": [
          "Transparency log"
        ],
        "summary": "Prove you never cleared a given reference.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/archive": {
      "post": {
        "operationId": "postArchive",
        "tags": [
          "Transparency log"
        ],
        "summary": "The sealed verification bundle a regulator keeps.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/escrow/bundle": {
      "post": {
        "operationId": "postEscrowBundle",
        "tags": [
          "Transparency log"
        ],
        "summary": "Alias of /archive: the sealed verification bundle.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/dispute/open": {
      "post": {
        "operationId": "postDisputeOpen",
        "tags": [
          "Disputes and resolution"
        ],
        "summary": "Open a dispute on a divergence.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/dispute/respond": {
      "post": {
        "operationId": "postDisputeRespond",
        "tags": [
          "Disputes and resolution"
        ],
        "summary": "Respond to a dispute.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/dispute/close": {
      "post": {
        "operationId": "postDisputeClose",
        "tags": [
          "Disputes and resolution"
        ],
        "summary": "Close a dispute.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/resolution/record": {
      "post": {
        "operationId": "postResolutionRecord",
        "tags": [
          "Disputes and resolution"
        ],
        "summary": "Record how a divergence resolved, in a closed vocabulary (never a filing decision).",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/resolution/ledger": {
      "post": {
        "operationId": "postResolutionLedger",
        "tags": [
          "Disputes and resolution"
        ],
        "summary": "The resolution ledger, in counts.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/disclosure/request": {
      "post": {
        "operationId": "postDisclosureRequest",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Request a disclosure under a stated basis.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/disclosure/grant": {
      "post": {
        "operationId": "postDisclosureGrant",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Grant a disclosure request.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/disclosure/refuse": {
      "post": {
        "operationId": "postDisclosureRefuse",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Refuse a disclosure request.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/disclosure/ledger": {
      "post": {
        "operationId": "postDisclosureLedger",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "The disclosure ledger.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/disclose": {
      "post": {
        "operationId": "postDisclose",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Redactable disclosure: prove one field of a verdict, withhold the rest.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/verify-disclosure": {
      "post": {
        "operationId": "postVerifyDisclosure",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Verify a redactable disclosure.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/supervisor/feed": {
      "post": {
        "operationId": "postSupervisorFeed",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "The supervisor seat: everything a regulator watches, in one call.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/supervise": {
      "post": {
        "operationId": "postSupervise",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Regulator read-only node: consistency proofs and equivocation detection over heads you bring.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/supervise/crosscheck": {
      "post": {
        "operationId": "postSuperviseCrosscheck",
        "tags": [
          "Disclosure and supervision"
        ],
        "summary": "Cross-check two supervisors' views.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/pkyc/trigger": {
      "post": {
        "operationId": "postPkycTrigger",
        "tags": [
          "Perpetual KYC"
        ],
        "summary": "Propagate a trigger about an entity commitment (opaque; never a name or a reason).",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/pkyc/score": {
      "post": {
        "operationId": "postPkycScore",
        "tags": [
          "Perpetual KYC"
        ],
        "summary": "Fold your view of an entity commitment against the network triggers.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/pkyc/corroborate": {
      "post": {
        "operationId": "postPkycCorroborate",
        "tags": [
          "Perpetual KYC"
        ],
        "summary": "Which parties did two independent institutions flag?",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/flow/cycles": {
      "post": {
        "operationId": "postFlowCycles",
        "tags": [
          "Flows and structure"
        ],
        "summary": "Closed trade loops over an opaque flow graph.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/flow/gate": {
      "post": {
        "operationId": "postFlowGate",
        "tags": [
          "Flows and structure"
        ],
        "summary": "The k-anonymity gate in front of the flow graph.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/attribute/reconcile": {
      "post": {
        "operationId": "postAttributeReconcile",
        "tags": [
          "Flows and structure"
        ],
        "summary": "Blind attribute reconciliation (ESG, dual-use, sanctions attributes).",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/chain/assess": {
      "post": {
        "operationId": "postChainAssess",
        "tags": [
          "Flows and structure"
        ],
        "summary": "N-party chain balance: hop adjacency and accumulated tolerance drift.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/exposure/commit": {
      "post": {
        "operationId": "postExposureCommit",
        "tags": [
          "Flows and structure"
        ],
        "summary": "Commit your financing exposure on one opaque document (duplicate-financing detection).",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/exposure/collisions": {
      "post": {
        "operationId": "postExposureCollisions",
        "tags": [
          "Flows and structure"
        ],
        "summary": "Ask about a document you committed: is anyone else financing it?",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/macro": {
      "post": {
        "operationId": "postMacro",
        "tags": [
          "Flows and structure"
        ],
        "summary": "Mirror statistics: divergence rate and velocity per corridor, k-gated, every rate with its denominator.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/weather": {
      "post": {
        "operationId": "postWeather",
        "tags": [
          "Flows and structure"
        ],
        "summary": "Cross-corridor structure counts, released only above the k-anonymity gate.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/pack": {
      "post": {
        "operationId": "postPack",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "The examiner pack: evidence that checks out with the operator switched off.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/digest": {
      "post": {
        "operationId": "postDigest",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "The completeness digest: a signed anti-cherry-pick commitment over a period.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/dossier": {
      "post": {
        "operationId": "postDossier",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "The model-validation dossier.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/cbom": {
      "post": {
        "operationId": "postCbom",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "The cryptographic bill of materials.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/conformance/attest": {
      "post": {
        "operationId": "postConformanceAttest",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Submit your implementation's answers to a challenge; all must match for a signed certificate.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/conformance/directory": {
      "post": {
        "operationId": "postConformanceDirectory",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "The public directory of certified implementations, each re-verified.",
        "security": [],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/cosign": {
      "post": {
        "operationId": "postCosign",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Combine independently signed verdicts from several operators (k-of-n).",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/release/timing": {
      "post": {
        "operationId": "postReleaseTiming",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Was the money released before screening finished?",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/provenance/verify": {
      "post": {
        "operationId": "postProvenanceVerify",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Who chose these band edges, and from what?",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/succession/verify": {
      "post": {
        "operationId": "postSuccessionVerify",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Verify an operator succession handover.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/billing/statement": {
      "post": {
        "operationId": "postBillingStatement",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "A billing statement from governance facts and your rate card. No per-verdict or volume line exists.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "A signed record: verify offline against /jwks.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/SignedRecord"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "x-mirror-signed": true,
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/escrow/seal": {
      "post": {
        "operationId": "postEscrowSeal",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Store an opaque, member-sealed salt-continuity blob the operator cannot open.",
        "security": [
          {
            "memberSession": []
          },
          {
            "pilotToken": []
          }
        ],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "401": {
            "description": "Missing or wrong credential.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "403": {
            "description": "A delegated desk key without the scope this route needs (`scope`; `needs` names it).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    },
    "/escrow/prove": {
      "post": {
        "operationId": "postEscrowProve",
        "tags": [
          "Evidence and conformance"
        ],
        "summary": "Prove an escrow envelope is held.",
        "security": [],
        "responses": {
          "200": {
            "description": "OK",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object"
                }
              }
            }
          },
          "400": {
            "description": "Refused: a malformed request, raw trade data (raw_leaked), a filing decision (sar_wall), or a route-specific refusal.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          },
          "503": {
            "description": "The operator cannot sign, or its store is unavailable.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/Error"
                }
              }
            }
          }
        },
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/Object"
              }
            }
          }
        }
      }
    }
  },
  "webhooks": {
    "verdict.signed": {
      "post": {
        "summary": "A verdict was signed on a shipment where YOUR leg authenticated.",
        "description": "Delivered at least once, by the operator, to members subscribed to `verdict.signed`. Headers: Mirror-Delivery (the id), Mirror-Event, Mirror-Attempt. Answer 2xx to acknowledge (a duplicate too); 410 retires the endpoint and pauses the subscription; anything else is retried at 0s, 30s, 2m, 10m, 1h, 6h, 24h (plus up to 10% jitter), then the delivery is dead and stays listable.",
        "parameters": [
          {
            "name": "Mirror-Delivery",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Mirror-Event",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Mirror-Attempt",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookDelivery"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Acknowledged (including a duplicate)"
          },
          "410": {
            "description": "The endpoint is retired: the subscription is paused"
          }
        }
      }
    },
    "recall.notice": {
      "post": {
        "summary": "A witness your clears rested on was suspended at quorum: your own signed recall notice.",
        "description": "Delivered at least once, by the operator, to members subscribed to `recall.notice`. Headers: Mirror-Delivery (the id), Mirror-Event, Mirror-Attempt. Answer 2xx to acknowledge (a duplicate too); 410 retires the endpoint and pauses the subscription; anything else is retried at 0s, 30s, 2m, 10m, 1h, 6h, 24h (plus up to 10% jitter), then the delivery is dead and stays listable.",
        "parameters": [
          {
            "name": "Mirror-Delivery",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Mirror-Event",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Mirror-Attempt",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookDelivery"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Acknowledged (including a duplicate)"
          },
          "410": {
            "description": "The endpoint is retired: the subscription is paused"
          }
        }
      }
    },
    "webhook.ping": {
      "post": {
        "summary": "A test delivery you asked for with /webhooks/ping.",
        "description": "Delivered at least once, by the operator, to members subscribed to `webhook.ping`. Headers: Mirror-Delivery (the id), Mirror-Event, Mirror-Attempt. Answer 2xx to acknowledge (a duplicate too); 410 retires the endpoint and pauses the subscription; anything else is retried at 0s, 30s, 2m, 10m, 1h, 6h, 24h (plus up to 10% jitter), then the delivery is dead and stays listable.",
        "parameters": [
          {
            "name": "Mirror-Delivery",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Mirror-Event",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "Mirror-Attempt",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            }
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/WebhookDelivery"
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Acknowledged (including a duplicate)"
          },
          "410": {
            "description": "The endpoint is retired: the subscription is paused"
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "Error": {
        "type": "object",
        "required": [
          "error",
          "code"
        ],
        "properties": {
          "error": {
            "type": "string"
          },
          "code": {
            "type": "string",
            "description": "A stable code; the full taxonomy is /signals.json."
          },
          "hint": {
            "type": "string"
          }
        }
      },
      "Proof": {
        "type": "object",
        "required": [
          "alg",
          "kid",
          "signature"
        ],
        "properties": {
          "alg": {
            "const": "ES256"
          },
          "kid": {
            "type": "string"
          },
          "signature": {
            "type": "string",
            "description": "base64url, low-S"
          },
          "canonicalization": {
            "type": "string"
          },
          "note": {
            "type": "string"
          }
        }
      },
      "SignedRecord": {
        "type": "object",
        "required": [
          "record",
          "proof"
        ],
        "properties": {
          "record": {
            "type": "object",
            "description": "Verify as ES256 over the record's canonical JSON (recursively sorted keys) against /jwks, matching proof.kid."
          },
          "proof": {
            "$ref": "#/components/schemas/Proof"
          }
        }
      },
      "Object": {
        "type": "object",
        "description": "See the protocol specification (/mirror-protocol-spec.md) for this route's fields.",
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "Empty": {
        "type": "object",
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "AuthChallengeRequest": {
        "type": "object",
        "required": [
          "kid"
        ],
        "properties": {
          "kid": {
            "type": "string"
          },
          "delegation": {
            "$ref": "#/components/schemas/SignedRecord",
            "description": "for a desk key: the member root's signed delegation (mirror-delegation)"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "AuditExportRequest": {
        "type": "object",
        "properties": {
          "cursor": {
            "type": "string",
            "pattern": "^\\d+:[0-9a-f]{64}$"
          },
          "since_ms": {
            "type": "integer"
          },
          "limit": {
            "type": "integer",
            "maximum": 5000
          },
          "include_records": {
            "type": "boolean"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "TimeRequest": {
        "type": "object",
        "required": [
          "nonce"
        ],
        "properties": {
          "nonce": {
            "type": "string",
            "pattern": "^[0-9a-f]{16,64}$"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "AuthSessionRequest": {
        "type": "object",
        "required": [
          "challenge",
          "signature"
        ],
        "properties": {
          "challenge": {
            "type": "object"
          },
          "signature": {
            "type": "string",
            "description": "ES256 over the canonical assertion record (mirror-auth assertionRecord)"
          },
          "kid": {
            "type": "string"
          },
          "delegation": {
            "$ref": "#/components/schemas/SignedRecord"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "Leg": {
        "type": "object",
        "required": [
          "role",
          "commitments"
        ],
        "description": "One party's committed leg. Commitments are salted band hashes computed party-side; the operator never sees a value, a band or a salt.",
        "properties": {
          "role": {
            "type": "string"
          },
          "commitments": {
            "type": "array",
            "items": {
              "type": "string",
              "pattern": "^[0-9a-f]{64}$"
            }
          },
          "shipment_ref": {
            "type": "string"
          },
          "attest": {
            "type": "object",
            "description": "the member's ES256 attestation over the leg envelope"
          },
          "bander": {
            "type": "object"
          },
          "physical": {
            "type": "object"
          },
          "quality": {
            "type": "object"
          },
          "origin": {
            "type": "object"
          },
          "fine": {
            "type": "object"
          },
          "basis_commitment": {
            "type": "string",
            "pattern": "^[0-9a-f]{64}$"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "ReconcileRequest": {
        "type": "object",
        "required": [
          "legs"
        ],
        "properties": {
          "shipment_ref": {
            "type": "string",
            "description": "An opaque locator commitment (l:<64 hex>). A plaintext reference is refused after 2026-12-01."
          },
          "legs": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/Leg"
            }
          },
          "policy": {
            "type": "object",
            "properties": {
              "required_roles": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "corridor_ref": {
                "type": "object",
                "properties": {
                  "product": {
                    "type": "string"
                  },
                  "version": {
                    "type": "integer"
                  }
                }
              }
            }
          },
          "physical_measurements": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/SignedRecord"
            },
            "description": "Witness-signed measurements (terminal, weighbridge, assayer...)"
          },
          "cargo": {
            "type": "object"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "ReconcileDimensionsRequest": {
        "type": "object",
        "required": [
          "legs"
        ],
        "properties": {
          "shipment_ref": {
            "type": "string"
          },
          "locator": {
            "type": "string"
          },
          "legs": {
            "type": "array",
            "items": {
              "type": "object"
            }
          },
          "policy": {
            "type": "object"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "RegistryEventRequest": {
        "type": "object",
        "required": [
          "event"
        ],
        "properties": {
          "event": {
            "type": "object",
            "required": [
              "type",
              "by",
              "sig"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "by": {
                "type": "string"
              },
              "seq": {
                "type": "integer"
              },
              "at": {
                "type": "string"
              },
              "sig": {
                "type": "string",
                "description": "ES256 by `by` over the canonical event minus sig"
              }
            }
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "RecallRequest": {
        "type": "object",
        "required": [
          "witness_kid"
        ],
        "properties": {
          "witness_kid": {
            "type": "string"
          },
          "k_min": {
            "type": "integer",
            "minimum": 3
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "WitnessForksRequest": {
        "type": "object",
        "properties": {
          "heads": {
            "type": "array",
            "maxItems": 500,
            "items": {
              "$ref": "#/components/schemas/SignedRecord"
            }
          },
          "links": {
            "type": "array",
            "items": {
              "type": "object"
            }
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "WebhookSubscribeRequest": {
        "type": "object",
        "required": [
          "url"
        ],
        "properties": {
          "url": {
            "type": "string",
            "format": "uri",
            "description": "https, a public DNS name, no credentials"
          },
          "events": {
            "type": "array",
            "items": {
              "enum": [
                "verdict.signed",
                "recall.notice"
              ]
            }
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "WebhookIdRequest": {
        "type": "object",
        "required": [
          "id"
        ],
        "properties": {
          "id": {
            "type": "string"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "WebhookRedeliverRequest": {
        "type": "object",
        "required": [
          "delivery_id"
        ],
        "properties": {
          "delivery_id": {
            "type": "string"
          }
        },
        "not": {
          "anyOf": [
            {
              "required": [
                "value"
              ]
            },
            {
              "required": [
                "unit_qty"
              ]
            },
            {
              "required": [
                "band"
              ]
            },
            {
              "required": [
                "corridor_edges"
              ]
            },
            {
              "required": [
                "shared_secret"
              ]
            },
            {
              "required": [
                "salt"
              ]
            },
            {
              "required": [
                "quantity"
              ]
            },
            {
              "required": [
                "unit_price"
              ]
            },
            {
              "required": [
                "total_value"
              ]
            },
            {
              "required": [
                "quantity_edges"
              ]
            },
            {
              "required": [
                "unit_price_edges"
              ]
            },
            {
              "required": [
                "total_value_edges"
              ]
            },
            {
              "required": [
                "receipt_secret"
              ]
            },
            {
              "required": [
                "measured_kg"
              ]
            },
            {
              "required": [
                "declared_kg"
              ]
            },
            {
              "required": [
                "table_edges"
              ]
            },
            {
              "required": [
                "fine_edges"
              ]
            },
            {
              "required": [
                "reference_price"
              ]
            },
            {
              "required": [
                "measured_grade"
              ]
            },
            {
              "required": [
                "declared_grade"
              ]
            },
            {
              "required": [
                "certificate_secret"
              ]
            },
            {
              "required": [
                "doc_salt"
              ]
            },
            {
              "required": [
                "container"
              ]
            },
            {
              "required": [
                "container_number"
              ]
            },
            {
              "required": [
                "cargo_key"
              ]
            }
          ]
        }
      },
      "WebhookDelivery": {
        "type": "object",
        "required": [
          "record",
          "proof"
        ],
        "description": "Signed by the operator. Verify with mirror-webhook verifyDelivery(): signature, recipient, freshness, the payload's own signature, and the id's derivation.",
        "properties": {
          "proof": {
            "$ref": "#/components/schemas/Proof"
          },
          "record": {
            "type": "object",
            "required": [
              "v",
              "type",
              "id",
              "event",
              "to",
              "attempt",
              "sent_at_ms",
              "payload"
            ],
            "properties": {
              "v": {
                "const": 1
              },
              "type": {
                "const": "mirror.webhook-delivery"
              },
              "id": {
                "type": "string",
                "description": "stable across retries AND across a retried verdict - dedupe on it"
              },
              "event": {
                "enum": [
                  "verdict.signed",
                  "recall.notice",
                  "webhook.ping"
                ]
              },
              "to": {
                "type": "string",
                "description": "the member kid this was sent to - refuse it if it is not you"
              },
              "subscription": {
                "type": "string"
              },
              "attempt": {
                "type": "integer",
                "minimum": 1,
                "maximum": 7
              },
              "sent_at_ms": {
                "type": "integer"
              },
              "payload": {
                "$ref": "#/components/schemas/SignedRecord"
              },
              "disclaimer": {
                "type": "string"
              }
            }
          }
        }
      }
    },
    "securitySchemes": {
      "memberSession": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "mirror-session",
        "description": "Minted by POST /auth/session after proving possession of a ratified member key. Short-lived; membership is re-checked on every request."
      },
      "pilotToken": {
        "type": "apiKey",
        "in": "header",
        "name": "X-Mirror-Token",
        "description": "The shared pilot token. Identifies no institution; kept for pilots in flight. The Node host also accepts it as Authorization: Bearer."
      }
    }
  },
  "x-mirror": {
    "spec": "/mirror-protocol-spec.md",
    "refusals": "/cannot",
    "signals": "/signals.json",
    "stability": "/stability-policy.md",
    "generated_by": "server/openapi.js"
  }
}