API reference
Three endpoints. Every decision returns a signed, single-use PASETO receipt that anyone can re-verify. The full contract is live at barycenters-admit.fly.dev.
Admits a proposed action against the bound policy — here, a deployment. Returns a decision and a signed PASETO receipt proving what was decided, when, and why.
Request body
domain — the action's domain (e.g. infrastructure.compute_deploy)
environment — target environment (e.g. staging, production)
service — the service being changed
image_digest — the exact artifact, sha256: + 64 hex
requested_by — who is requesting it (audited)
Response
decision (ACCEPT / REFUSE), policy_version, proposal_hash, reason_code, and token — a signed PASETO receipt, consumable exactly once, that records the decision in the audit chain.
Health check. Returns the service's real state: issuer key status, bound boundaries, steward trust, policy version. Fail-closed: returns 503 until a real key is provisioned.
The signed audit checkpoint — the current transparency-log head, independently re-verifiable by anyone. Bound boundaries are reported by /readyz.