What this documentation covers

• Authentication and authorization model.
• Run and workflow lifecycle endpoints.
• Tool registration and schema definitions.
• Webhook event payloads and signing.
• Error codes and retry semantics.
• Audit and observability export endpoints (where applicable).

Who this is for

• Developers integrating the platform into services, UIs, and automation pipelines.

Operational expectations

• Examples favor deterministic behavior and explicit contracts (schemas, IDs, correlation).
• Security is treated as a default: least privilege, audit logs, and safe fallbacks.
• Changes are versioned; breaking changes should be announced via /docs/changelog.