{"components":{"responses":{"ErrorResponse":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ErrorEnvelope"}}},"description":"Shared Genesis Mesh API error envelope."}},"schemas":{"ErrorEnvelope":{"properties":{"error":{"properties":{"code":{"description":"Machine-readable error code.","type":"string"},"details":{"additionalProperties":true,"description":"Optional sanitized structured details.","type":"object"},"message":{"description":"Human-readable safe error message.","type":"string"},"request_id":{"description":"Correlation ID also returned as X-Request-ID.","type":"string"}},"required":["code","message","details","request_id"],"type":"object"}},"required":["error"],"type":"object"}},"securitySchemes":{"NodeProof":{"description":"Node proof-of-possession or signed request body.","in":"header","name":"X-Genesis-Node-Proof","type":"apiKey"},"OperatorSignature":{"description":"Operator-signed request headers with replay-protected nonces.","in":"header","name":"X-Genesis-Operator-Signature","type":"apiKey"}}},"info":{"description":"Read-only generated protocol surface metadata for this Network Authority.","title":"Genesis Mesh Network Authority API","version":"pilot"},"openapi":"3.0.3","paths":{"/admin/attestations":{"post":{"description":"Issue portable membership evidence.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Issue attestation","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/attestations/{attestation_id}/revoke":{"post":{"description":"Publish sovereign-level attestation revocation.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Revoke attestation","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/boundary-policies":{"get":{"description":"List every stored boundary policy version. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Boundary policy versions","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"},"post":{"description":"Sign and store a new inactive boundary policy version. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Publish boundary policy","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/boundary-policies/active":{"get":{"description":"Active policy set, its health, and the enforcement mode. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Active boundary policies","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/boundary-policies/validate":{"post":{"description":"Dry-run a boundary policy against the trusted gate registry. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Validate boundary policy","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/boundary-policies/{policy_id}/activate":{"post":{"description":"Re-verify and activate a version; also the rollback path. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Activate boundary policy","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/boundary-policies/{policy_id}/deactivate":{"post":{"description":"Deactivate an active boundary policy version. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Deactivate boundary policy","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/boundary-policies/{policy_id}/history":{"get":{"description":"Every stored version of one boundary policy. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Boundary policy history","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/boundary/evaluate":{"post":{"description":"Evaluate built-in gates and active boundary policies under an agreement or an NA-issued attestation; returns a signed decision and justification proof. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Policy-aware boundary evaluation","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence":{"get":{"description":"Search stored decisions and execution evidence by vendor, attestation, capability, resource, outcome or time. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Search evidence","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/executor-keys":{"post":{"description":"Register a controller's executor signing key; list with GET, retire with /<key_id>/retire. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Register executor key","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged)","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/export":{"get":{"description":"gm.evidence.event JSON Lines from a store sequence, for SIEM pipelines. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Export evidence","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/resources/<resource_id>":{"get":{"description":"Full history of one resource (for example a secret), decision to execution, verified. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Resource history","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/retention/apply":{"post":{"description":"Remove a verifiable prefix of old entries behind a signed retention checkpoint. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Apply evidence retention","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged)","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/status":{"get":{"description":"Store mode, size, last sequence and latest retention checkpoint. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Evidence store status","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/vendors/<vendor_id>":{"get":{"description":"A vendor's decisions and the evidence under them, verified. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Vendor history","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/evidence/verify":{"get":{"description":"Verify every stored entry, chain and signature. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Verify evidence store","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/invite":{"post":{"description":"Create a scoped enrollment token.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Invite","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature"}},"/admin/operator-keys/{key_id}/revoke":{"post":{"description":"Switch an operator key off at runtime without restarting. Terminal; refuses the last usable key. Rate limit: 30/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Revoke operator key","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)","x-genesis-mesh-rate-limit":"30/min per IP"}},"/admin/policy":{"post":{"description":"Activate a signed policy version.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Policy publish","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/policy/history":{"get":{"description":"Inspect persisted policy versions.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Policy history","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature"}},"/admin/policy/rollback":{"post":{"description":"Reactivate a previous policy.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Policy rollback","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/recognition-policy":{"post":{"description":"Set portable trust acceptance policy.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Set recognition policy","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/recognition-treaties":{"post":{"description":"Create a direct-recognition treaty for another sovereign.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Issue treaty","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/recognition-treaties/{treaty_id}/revoke":{"post":{"description":"End a persisted recognition treaty.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Revoke treaty","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/revoke":{"post":{"description":"Publish a new signed CRL.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Revoke","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/admin/sovereign-revocation-feeds/import":{"post":{"description":"Import revoked trust material from a recognized sovereign.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Import revocation feed","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Operator signature (privileged tier)"}},"/agents":{"get":{"description":"Discover agent descriptors by capability. Without a capability filter, returns a count only. Pass capability= to receive descriptors; the unfiltered form does not enumerate the registry.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Agent discovery","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"},"post":{"description":"Publish an authenticated agent descriptor.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"NodeProof":[]}],"summary":"Register agent","tags":["node_agent"],"x-genesis-mesh-access":"node_signed","x-genesis-mesh-auth-hint":"Node PoP"}},"/agents/{node_public_key}":{"delete":{"description":"Delete an authenticated descriptor.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"NodeProof":[]}],"summary":"Remove agent","tags":["node_agent"],"x-genesis-mesh-access":"node_signed","x-genesis-mesh-auth-hint":"Node PoP"},"get":{"description":"Read one agent descriptor.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Agent lookup","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/agreements/verify":{"post":{"description":"Verify signatures on a relationship agreement. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify agreement","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/api-reference":{"get":{"description":"Read-only HTTP API reference.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"API reference","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/atlas":{"get":{"description":"Read-only recognition graph explorer with evidence overlay.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Trust Atlas","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/atlas.json":{"get":{"description":"Machine-readable Atlas summary with graph digest.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Atlas JSON","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/attestations":{"get":{"description":"List issued portable membership attestations.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Membership attestations","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/attestations/verify":{"post":{"description":"Verify a signed membership attestation. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify attestation","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/attestations/verify-with-treaty":{"post":{"description":"Verify an attestation using a recognition treaty. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify with treaty","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/boundary-policies/verify":{"post":{"description":"Verify a signed BoundaryPolicy. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify boundary policy","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/boundary/verify":{"post":{"description":"Verify a signed BoundaryDecision. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify boundary decision","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/cli-reference":{"get":{"description":"Generated CLI command reference.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"CLI reference","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/connectome":{"get":{"description":"Human-readable recognition and revocation view.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Connectome","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/connectome.json":{"get":{"description":"Machine-readable Connectome summary.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Connectome JSON","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/connectome/trust-path":{"get":{"description":"Explain recognition between two sovereigns. Requires from and to query parameters.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Trust path","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/consensus/verify":{"post":{"description":"Verify a K-of-N consensus proof. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify consensus proof","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/crl":{"get":{"description":"Current signed certificate revocation list.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Revocation list","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/dashboard":{"get":{"description":"Read-only sovereign health and trust view.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Sovereign dashboard","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/dashboard.json":{"get":{"description":"Machine-readable sovereign health and trust summary.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Dashboard JSON","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/data-usage/verify":{"post":{"description":"Verify a signed data-usage record. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify data usage","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/disclosure/verify":{"post":{"description":"Verify a selective-disclosure capability proof. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify disclosure","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/evidence/execution":{"post":{"description":"Controllers submit signed ExecutionEvidence after acting; the NA validates it, links it to its decision and appends it to the evidence store (v0.59, opt-in). Rate limit: 120/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"OperatorSignature":[]}],"summary":"Submit execution evidence","tags":["operator"],"x-genesis-mesh-access":"operator_signed","x-genesis-mesh-auth-hint":"Registered executor key signature","x-genesis-mesh-rate-limit":"120/min per IP"}},"/genesis":{"get":{"description":"Signed network trust root.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Genesis","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/health":{"get":{"description":"Expanded service health summary.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Health summary","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/healthz":{"get":{"description":"Process-level health probe.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Liveness","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/heartbeat":{"post":{"description":"Update authenticated node liveness.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"NodeProof":[]}],"summary":"Heartbeat","tags":["node_agent"],"x-genesis-mesh-access":"node_signed","x-genesis-mesh-auth-hint":"Node PoP"}},"/join":{"post":{"description":"Issue a certificate from a single-use invite.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"NodeProof":[]}],"summary":"Join","tags":["node_agent"],"x-genesis-mesh-access":"node_signed","x-genesis-mesh-auth-hint":"Node PoP"}},"/metrics":{"get":{"description":"Prometheus-compatible runtime metrics. Internal: bind to the management interface, do not expose publicly.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Metrics","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"Internal network only"}},"/nodes":{"get":{"description":"Active node count. The per-node roster (keys, roles, remote addresses) requires operator authentication.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Nodes","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None for counts; operator signature for the roster"}},"/policy":{"get":{"description":"Active DB-backed policy manifest.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Policy","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/readyz":{"get":{"description":"Database and migration readiness.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Readiness","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/recognition-graph":{"get":{"description":"Source graph for trust explanations.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Recognition graph","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/recognition-policy":{"get":{"description":"Current portable-trust acceptance policy.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Recognition policy","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/recognition-treaties":{"get":{"description":"List persisted sovereign treaties.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Recognition treaties","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/recognition-treaties/verify":{"post":{"description":"Verify a signed recognition treaty. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify treaty","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}},"/renew":{"post":{"description":"Renew a non-revoked node certificate.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"security":[{"NodeProof":[]}],"summary":"Renew","tags":["node_agent"],"x-genesis-mesh-access":"node_signed","x-genesis-mesh-auth-hint":"Node PoP"}},"/sovereign-revocation-feed":{"get":{"description":"Export revocations issued by a sovereign.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Sovereign revocation feed","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/sovereign.json":{"get":{"description":"Operator-safe public trust material.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Sovereign metadata","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/surfaces":{"get":{"description":"Grouped map of every HTTP and CLI surface.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Surface map","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/swagger.json":{"get":{"description":"Generated HTTP protocol surface metadata.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"OpenAPI metadata","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None"}},"/trust-evidence/verify":{"post":{"description":"Verify a signed TrustEvidence record. Rate limit: 60/min per IP.","responses":{"200":{"content":{"application/json":{"schema":{"type":"object"}}},"description":"Successful response"},"400":{"$ref":"#/components/responses/ErrorResponse"},"401":{"$ref":"#/components/responses/ErrorResponse"},"403":{"$ref":"#/components/responses/ErrorResponse"},"404":{"$ref":"#/components/responses/ErrorResponse"},"409":{"$ref":"#/components/responses/ErrorResponse"},"422":{"$ref":"#/components/responses/ErrorResponse"},"429":{"$ref":"#/components/responses/ErrorResponse"},"500":{"$ref":"#/components/responses/ErrorResponse"}},"summary":"Verify trust evidence","tags":["safe"],"x-genesis-mesh-access":"browser_safe","x-genesis-mesh-auth-hint":"None","x-genesis-mesh-rate-limit":"60/min per IP"}}},"servers":[{"url":"https://104-248-139-182.sslip.io"}],"x-genesis-mesh-note":"Generated reference only; this service does not expose browser try-it execution."}