● Reference

Changelog

Every change to the contract, by date version. Breaking changes ship only under a new MD-Version date, with a migration note here. Keys stay pinned to their version until you move them.

2026-06-12 — Rate limits

Additive. Per-key rate limits are now enforced: sandbox 25 req/s (burst 50), production 100 req/s (burst 200). Exceeding them returns 429 rate_limited with Retry-After; every response carries MD-RateLimit-Limit and MD-RateLimit-Remaining. Numbers are provisional pre-launch and enforcement is best-effort at the edge. Details on the Errors page.

2026-06-12 — Webhook endpoints resource · judgment.created

Additive. New /v1/webhook_endpoints resource: create, list, retrieve, update, delete — per-endpoint signing secret (returned once on create), enabled_events filter, enable/disable. Deliveries now go to registered endpoints; the operator-set org URL remains as fallback. Two new scopes (webhook_endpoints:read/write); the surface is now 108 operations, 62 scopes, 20 resources. The judgment.intaken event is renamed judgment.created; the old name is accepted as an enabled_events alias under 2026-06-11.

2026-06-12 — Cursor pagination on every list

Every list operation now returns the list envelope — { "object": "list", "data": [...], "has_more": bool } — and takes limit (1–100, default 20), starting_after, and ending_before cursors. This replaces the bare items array and ships under 2026-06-11: the protocol is pre-launch and the contract policy is now stable + additive, so the shape change lands before the first production key is issued. See Pagination.

2026-06-12 — Full error contract

Additive. The error envelope now names ten codes: not_found (404) on every operation that addresses a specific resource, conflict (409) when an Idempotency-Key is reused with a different request body, and internal_error (500) for failures on our side. The three domain gates return 409. All 56 resource-addressing operations document their 404 in openapi.yaml.

2026-06-11 — v1 surface ships

Initial public version of the Kinetic Anvil Protocol: 103 operations across 19 groups, 32 webhook events, 60 scopes. Endpoint paths, event names, error codes, and the three domain gates are stable; the surface grows additively from here. Full surface in openapi.yaml.

Additive changes ship anytime and land here. When a breaking change ships under a new date version, the migration note lands here first.