📄️ Authentication
Trinitite authentication contract — Bearer-token auth that accepts both session tokens (human users) and long-lived API keys (machine principals). Supports per-key scope lists, revocation, organization-derived tenancy, and an optional NHI header set for autonomous AI agents. Covers request/response error envelope, rate limit headers, and the API key CRUD surface.
📄️ Sessions API
List and revoke active login sessions on the Trinitite platform. Powers "sign out everywhere" workflows and incident response. Each session is short-lived, refreshable, and individually revocable; revocations write to the Glass Box Ledger.
📄️ Errors, rate limits & conventions
Cross-cutting conventions every Trinitite endpoint shares — the error envelope, HTTP status usage, async polling, rate-limit headers, cursor pagination, idempotency, resource ID prefixes, and the versioning/deprecation policy.
📄️ Verdict vocabulary
The three-outcome contract every Trinitite-governed call returns — passed, corrected, or blocked — plus the receipt fields, correction_diff shape, and determinism guarantees that travel with every verdict.
📄️ Webhooks
Trinitite webhook delivery — signed event payloads for verdicts, async job completion, policy changes, and governance-control state transitions. Covers endpoint registration, event types, payload shape, signature verification, retries, and idempotency.