{"name":"SIL Access Broker","version":"1.4","description":"Starts a narrowly scoped, Cloudflare-isolated access workflow. The public edge cannot spend money, execute arbitrary code, specify callbacks/destinations, or reach SIL private infrastructure. READY may include only a short-lived non-secret capability attestation previously verified by SIL.","endpoint":"/access-agent/v1/requests","status_endpoint":"/access-agent/v1/status","method":"POST","status_method":"GET","request_auth":"Authorization: Bearer <request_capability>","status_auth":"Authorization: Bearer <request_capability>","request_capability":"caller-generated 256-bit cryptographically random lowercase-hex value; reuse the same value for retries and status polling; keep it private","retry_semantics":"Retry the identical POST with the identical request capability. The same Workflow instance is reused during the 3-day retention window.","content_type":"application/json","max_body_bytes":4096,"request_schema":{"service":"required lowercase slug, max 64 chars","capability":"required lowercase slug, max 64 chars","purpose":"optional plain text, max 280 chars; URLs/control characters are rejected"},"response":"202 accepted with non-secret request_id and fixed status_endpoint; the request capability is never returned by SIL","ready_status_fields":["state","reason_code","evidence_class","capabilities","capability_ref","verified_at_utc","valid_until_utc"],"ready_semantics":"READY from verified_capability_snapshot is an expiring non-secret attestation of a capability that SIL previously verified. It does not expose credentials/session handles and does not itself perform a provider action.","callbacks":false,"synchronous_execution":false,"credentials_in_request":false}