Mocó Internal Operations API

Process probes, deployment-scoped authorization administration, and a restricted request audit ledger for security observability. The audit operation is not a reconciliation/change feed; controllers and operators use the public watch endpoint and relist contract for convergence. A bounded local retention operation removes events before an operator-supplied cutoff without changing public resource history. The encryption operations report the shared root-key state and perform bounded online rewraps of vault data keys under the configured active root-key era; key material is supplied only by deployment configuration and is never accepted or returned by this API. Administrative operations are intended for a restricted deployment origin; they never expose bearer token digests or request payloads.

Source

internal.yaml

Revision

41097190f12c

Active snapshot

c4d6ac249d50