{"endpoint":"POST /api/v1/authorize","auth":"agent API credential (X-API-Key or Authorization: Bearer qtrn_sk_...)","modes":["dry_run","binding"],"decisions":["AUTHORIZED","APPROVAL_REQUIRED","DENIED","NEEDS_INFORMATION"],"action_types":["economic_action","hire_agent","marketplace_purchase","payment","purchase","service_call","subscription"],"execution":["auto","quattrino","external"],"task_constraints":{"max_amount_minor":"int","total_order_max_minor":"int","quantity_max":"int","merchants":"[str]","categories":"[str]","product":"str","service_id":"str","recurring_allowed":"bool","subscription_allowed":"bool","valid_from":"iso8601","valid_until":"iso8601","destination":"str","geography":"[ISO-3166 alpha-2]","prohibited_side_effects":["account_creation","financing","subscription","recurring_charge","data_sharing","add_on_purchase","warranty_purchase","membership_enrollment","marketing_consent"],"approval_threshold_minor":"int","instruction":"str (evidence only, never interpreted)"},"disclosure_scopes":["billing_address","business_name","contact_email","contact_phone","email","name","phone","shipping_address","tax_id"],"disclosure_decisions":["RELEASE_ALLOWED","DENIED","ASK_OWNER"],"pipeline":["INTENT","NORMALIZE","IDENTITY","DELEGATION","AUTHORITY_INTERSECTION","POLICY","RISK","DISCLOSURE","APPROVAL","AUTHORIZATION","EXECUTION_PLAN","EXECUTE_OR_ATTEST","OUTCOME","EVIDENCE"],"rules":["a task may narrow standing authority, never expand it","no child / sub-agent may expand inherited authority","ambiguity never expands authority -> NEEDS_INFORMATION","binding authorizations expire, are revocable, single-consumption and replay-resistant","external executors may record outcomes but can never rewrite the authorization"],"lifecycle":{"binding_statuses":["AUTHORIZED","APPROVAL_PENDING","CONSUMED","EXPIRED","REVOKED","APPROVAL_REJECTED","DENIED","NEEDS_INFORMATION"],"dry_run_status":"DRY_RUN"},"phase30":{"principle":"Quattrino may infer meaning. It must never infer consequential permission.","compile":"POST /api/v1/intents/compile {statement, proposal?} -> CompiledIntent + AuthorityEnvelope v1","envelope_dimensions":["purpose","money","commitment","data","delegation","counterparty","time","resources"],"action_classes":["NON_CONSEQUENTIAL_RESEARCH","EXTERNAL_COMMUNICATION","DATA_DISCLOSURE","ECONOMIC_COMMITMENT","PAYMENT","DELEGATION","ACCOUNT_OR_SUBSCRIPTION_COMMITMENT"],"non_consequential_classes":["EXTERNAL_COMMUNICATION","NON_CONSEQUENTIAL_RESEARCH"],"commitments":["ONE_TIME","RECURRING","SUBSCRIPTION","AUTO_RENEWAL","ACCOUNT_CREATION","CONTRACT","WARRANTY","TRIAL_THAT_CONVERTS","UNKNOWN_COMMITMENT"],"commitment_rule":"UNKNOWN_COMMITMENT on a consequential action under an envelope/restricting task -> NEEDS_INFORMATION; never silently ONE_TIME","data_postures":["RELEASE","RELEASE_ONCE","RELEASE_REDACTED","ASK_OWNER","DENY"],"disclosure_decisions":["RELEASE","RELEASE_ONCE","RELEASE_REDACTED","ASK_OWNER","DENY"],"disclosure_rule":"a field must be necessary for the purpose/fulfilment of THIS action; RELEASE_ONCE is consumed atomically via POST /authorizations/{id}/disclosures/{scope}/release","subaction_verdicts":["AUTHORIZED_NOW","NOT_YET_AUTHORIZED","NEEDS_INFORMATION_BEFORE_CONSEQUENCE","BLOCKED"],"latest_safe_question":"question_required / question{question, requested_delta_minor, requested_permission, why_needed, how_to_obtain, safe_actions_remaining} - never weakens the verdict","compliance_findings":["COMPLIANT","MATERIAL_MISMATCH","UNAUTHORIZED_COMMITMENT","UNAUTHORIZED_DISCLOSURE","UNAUTHORIZED_DELEGATION","COUNTERPARTY_MISMATCH","AMOUNT_EXCEEDED","TIME_VIOLATION","PURPOSE_OUT_OF_SCOPE"],"drift_codes":["PURPOSE_OUT_OF_SCOPE","COUNTERPARTY_MISMATCH","COMMITMENT_DRIFT","AMOUNT_DRIFT","DATA_SCOPE_DRIFT","DELEGATION_DRIFT"],"envelope_rules":["an agent may only narrow its envelope or propose a change","widening requires the owner and is bounded by the standing policy","every version is immutable with provenance; a superseded version invalidates unconsumed authorizations","delegated authority is conserved at issuance: children can never add up to more than the parent"],"discovery":"GET /api/v1/authority/me ; POST /api/v1/authority/gap (dry run + missing_authority, no policy internals)"}}