POST /api/v1/verify
Request: { publicId, fixtureKey? }. Response: canonical credential in data and explicit Test Mode metadata. Invalid requests return 400. Unknown records return 404.
GET /api/v1/registry/{publicId}
Returns the public registry projection. Human and machine fields are tested for parity after every supported public action.
GET /api/v1/events
Returns deterministic signed events for a public ID. Event chaining uses previousEventHash and eventHash fields.
POST /api/v1/webhooks/replay
Creates a deterministic manual replay linked to an original attempt ID. Replay requires an operator reason.
Errors
Errors are structured as { error: { code, message or details }, meta }. Negative states remain inspectable and do not impersonate live production outcomes.