invinoveritas API

openapi: 3.1.0
info:
  title: invinoveritas
  description: 'The **verification layer for autonomous agents** — a neutral verdict before an irreversible action (`/review`), a signed proof after (`/prove`), and a public, on-chain-verifiable track record (`/ledger`) you can audit without trusting us. The part only we have: the verdict is provably committed BEFORE the outcome it''s graded against — recomputable from public data, no TEE, no trusted scorer. Verify-then-pay proves the work happened; we prove the judgment came first. We also run the open conformance registry where agent verifiers are graded against the same recomputable bar — ours included, no green by assertion. Competitors conform to and certify against our suite, across more than one anchoring mechanism; we report our own gaps in the open. Model-agnostic by construction: we verify the output, not the model that produced it. As inference commoditizes and agents route to the cheapest interchangeable model, output-quality variance — not capability — becomes the risk on an
    irreversible action, and the one thing an agent cannot self-serve is a verdict on its own correctness. This matters most exactly where it''s least obvious: a local or open-weight model has no vendor safety layer, no ToS enforcement, no accountable party upstream — the independent check matters MORE, not less, the further a model runs from a hosted, policed provider. Route to any model, local or hosted; verify before you act. Dogfooded on our own important decisions. A reasoning / structured-decision / agent-memory / sandboxed-execution / Lightning-native-marketplace stack runs underneath as supporting infrastructure. Pay-per-use via Lightning Network — Bearer Token (recommended) or L402, plus x402 (USDC on Base) or card. Free registration (api_key); top-up and withdrawal flows; agent-to-agent coordination primitives; agent Lightning addresses (agent_id@api.babyblueviper.com); BearerProvider for LangChain.'
  contact:
    name: invinoveritas
    url: https://api.babyblueviper.com/
    email: contact@agents.babyblueviper.com
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0.html
  version: 1.13.0
  x-guidance: 'invinoveritas — the VERIFICATION LAYER for autonomous agents: a neutral verdict before an irreversible action, a signed proof after, and a public, on-chain-verifiable track record of those verdicts you can audit without trusting us — the oversight + judgment the agent can''t self-issue. Pay-per-call services settled in USDC via x402 on Base (also Lightning/L402 or a funded Bearer balance). Paid resources carry x-payment-info and answer an unauthenticated probe with a 402 challenge; send the JSON body in the operation schema, then retry with the X-PAYMENT header. Good entry points: POST /review (capital-scale-aware verdict before an agent ships an irreversible action), POST /prove (signed, independently-verifiable attestation of a prior execution), GET /ledger (the public signed verdict track record). Routes marked security:[] are free or Bearer/identity-gated and are not x402 resources.'
paths:
  /register:
    post:
      tags:
      - credit
      summary: Register Account
      description: Create new account — GET for info, POST to register. Pass ?ref=CODE to credit a referrer.
      operationId: register_account_register_post
      parameters:
      - name: label
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Label
      - name: ref
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Ref
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
    get:
      tags:
      - credit
      summary: Register Account
      description: Create new account — GET for info, POST to register. Pass ?ref=CODE to credit a referrer.
      operationId: register_account_register_post
      parameters:
      - name: label
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Label
      - name: ref
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Ref
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /grant_first_call:
    post:
      tags:
      - credit
      summary: Grant First Call
      description: 'Redeem a ''first call on us'' grant token for the target api_key.


        REAL BUG FOUND+FIXED (2026-09-01, real recipient hit it live -- a signed grant token

        minted and posted to a collaborator returned {"detail":"Not Found"} on redemption):

        this endpoint was only ever implemented on bridge.py (port 8081, internal-only, never

        proxied by nginx''s location / block which forwards everything to app.py on 8000). Every

        other bridge-only endpoint actually reachable from the public API (/register,

        /referral/info, /topup, /withdraw, etc.) has its own thin httpx-proxy route here in

        routes/credit.py -- this one was simply missing, so a real, publicly-documented feature

        (see routes/pages.py''s quickstart copy, which has always described "redeem via

        /grant_first_call") 404''d for every external caller since it was built. Same proxy

        pattern as /register above: forward the status code, don''t launder an upstream error

        into a 200 (the exact class of bug 2026-07-30''s /register fix already closed once).'
      operationId: grant_first_call_grant_first_call_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GrantFirstCallRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /topup:
    get:
      tags:
      - credit
      summary: Topup Account
      description: Top up Bearer account via Lightning.
      operationId: topup_account_topup_post
      requestBody:
        content:
          application/json:
            schema:
              anyOf:
              - additionalProperties: true
                type: object
              - type: 'null'
              title: Data
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
    post:
      tags:
      - credit
      summary: Topup Account
      description: Top up Bearer account via Lightning.
      operationId: topup_account_topup_post
      requestBody:
        content:
          application/json:
            schema:
              anyOf:
              - additionalProperties: true
                type: object
              - type: 'null'
              title: Data
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /balance:
    get:
      tags:
      - credit
      summary: Get Balance
      description: Check current balance and usage.
      operationId: get_balance_balance_get
      parameters:
      - name: api_key
        in: query
        required: true
        schema:
          type: string
          title: Api Key
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /verify:
    get:
      tags:
      - meta
      summary: Verify Panel
      description: 'In-browser recompute panel for the PQ key binding (2026-07-30). Closes a real gap flagged

        the same day the binding shipped: /verify-proof and /.well-known/pq-key-binding.json are both

        JSON APIs -- every "verify this yourself" claim meant "curl this," not "click a link and watch

        it recompute in front of you." Two cards now (2026-07-30, same day): ours (ML-DSA-65, NIP-01

        carrier) and trustless-ai/KYA-L4''s (SLH-DSA-SHA2-192s, on-chain OCP-anchored, no carrier) --

        the full symmetric mirror of Merlini''s own panel (ai.verticecriativo.pt/quantum), which already

        verifies ours. Neither side trusts the other''s UI; both independently recompute from raw bytes,

        fetched live (CORS-enabled) from each origin. Uses vendored @noble/post-quantum@0.4.1 +

        @noble/hashes@1.8.0 (static/vendor/, see its README) served from our own origin, not a CDN --

        a "don''t trust, recompute" page shouldn''t itself require trusting a third party. Scope is the

        hash-recompute + PQ companion-signature verify + tamper check, same as the shared

        pq-key-binding-v0 conformance profile''s documented split; the classical signature (Schnorr for

        ours, the on-chain record() sender for KYA-L4) and the anchor-vs-chain read are the separate

        "deeper lane" (POST /verify-proof for ours; read the tx directly for theirs).'
      operationId: verify_panel_verify_get
      responses:
        '200':
          description: Successful Response
          content:
            text/html:
              schema:
                type: string
      security: []
    post:
      tags:
      - credit
      summary: Verify Account
      description: Atomic verification + debit before tool execution.
      operationId: verify_account_verify_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/VerifyRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /register/confirm:
    post:
      tags:
      - credit
      summary: Confirm Payment
      description: Confirm Lightning payment and create/credit bearer account.
      operationId: confirm_payment_register_confirm_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ConfirmRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /settle-topup:
    post:
      tags:
      - credit
      summary: Settle Topup Proxy
      description: Settle a paid top-up invoice for wallets that expose preimages.
      operationId: settle_topup_proxy_settle_topup_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SettleTopupProxyRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /topup/status:
    get:
      tags:
      - credit
      summary: Topup Status Proxy
      description: Poll top-up invoice status and auto-credit when settled.
      operationId: topup_status_proxy_topup_status_get
      parameters:
      - name: api_key
        in: query
        required: true
        schema:
          type: string
          title: Api Key
      - name: payment_hash
        in: query
        required: true
        schema:
          type: string
          title: Payment Hash
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /withdraw:
    post:
      tags:
      - credit
      summary: Withdraw Proxy
      description: Withdraw account balance to a Lightning invoice.
      operationId: withdraw_proxy_withdraw_post
      parameters:
      - name: authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WithdrawProxyRequest'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /withdraw-to-address:
    post:
      tags:
      - credit
      summary: Withdraw To Address
      description: 'Withdraw to a Lightning address (LNURL-pay).


        Resolves user@domain → LNURL-pay metadata → fetches BOLT11 from callback →

        pays via the same path as /withdraw. Auth: Bearer api_key (the account

        being debited).


        Use cases: treasury → external payee (LN Markets deposit, exchange,

        contractor). Single API call replaces the prior manual flow

        (curl LNURL → request BOLT11 → POST /withdraw).'
      operationId: withdraw_to_address_withdraw_to_address_post
      parameters:
      - name: authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/WithdrawToAddressRequest'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /wallet-status:
    get:
      tags:
      - meta
      summary: Wallet Status
      description: Current payment options and recommendations.
      operationId: wallet_status_wallet_status_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /reason:
    post:
      tags:
      - inference
      summary: Reason
      operationId: reason_reason_post
      requestBody:
        content:
          application/json:
            schema:
              anyOf:
              - $ref: '#/components/schemas/ReasoningRequest'
              - type: 'null'
              title: Data
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.105652'
        protocols:
        - x402: {}
  /decision:
    post:
      tags:
      - inference
      summary: Decision
      operationId: decision_decision_post
      requestBody:
        content:
          application/json:
            schema:
              anyOf:
              - $ref: '#/components/schemas/DecisionRequest'
              - type: 'null'
              title: Data
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.190173'
        protocols:
        - x402: {}
  /review:
    post:
      tags:
      - inference
      summary: Review
      operationId: review_review_post
      requestBody:
        content:
          application/json:
            schema:
              anyOf:
              - $ref: '#/components/schemas/ReviewRequest'
              - type: 'null'
              title: Data
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.211303'
        protocols:
        - x402: {}
  /review/known-bad:
    get:
      tags:
      - inference
      summary: Review Known Bad Registry
      description: 'Public, free, no-auth read of the deterministic known-bad-address registry (services/

        known_bad_registry.py, 2026-08-01) that /review''s known_bad_registry gate checks against. Exists

        so the "byte-reproducible without trusting the LLM" claim on a registry-hit reject is checkable

        by anyone, not just assertable — pull this, pull the artifact you''re verifying, confirm a match

        yourself. Self-building: grows automatically whenever a real /review call rejects an

        onchain_action/sanctions_screening artifact containing a new address.'
      operationId: review_known_bad_registry_review_known_bad_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /review/external:
    post:
      tags:
      - inference
      summary: Review External
      operationId: review_external_review_external_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ReviewRequest'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.950865'
        protocols:
        - x402: {}
  /agent-economy-brief:
    post:
      tags:
      - inference
      summary: Agent Economy Brief
      description: Latest ecosystem research brief — observational only. Paid Bearer or L402.
      operationId: agent_economy_brief_agent_economy_brief_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.068267'
        protocols:
        - x402: {}
  /agent-economy-brief/preview:
    get:
      tags:
      - analytics
      - markets
      summary: Agent Economy Brief Preview
      description: 'FREE teaser — source breadth + churn count (the shop-window). No payment.

        Lives at /preview (not /agent-economy-brief) because the paid path is intercepted by the

        x402 probe middleware regardless of method — mirrors /signals (free) vs /signals/full (paid).'
      operationId: agent_economy_brief_preview_agent_economy_brief_preview_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /audit/agent-readiness:
    post:
      tags:
      - inference
      summary: Audit Agent Readiness
      description: Agent-readiness / verifiability audit of a target URL. Paid x402 / Bearer / L402 (S199).
      operationId: audit_agent_readiness_audit_agent_readiness_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '1.162168'
        protocols:
        - x402: {}
  /audit/agent-readiness/preview:
    get:
      tags:
      - analytics
      summary: Audit Agent Readiness Preview
      description: FREE teaser — what the audit checks + max weights. No payment, no fetch.
      operationId: audit_agent_readiness_preview_audit_agent_readiness_preview_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /x402/seller-intel:
    post:
      tags:
      - inference
      summary: X402 Seller Intel
      description: x402 Bazaar seller intelligence — buyer-wallet behavior OR discoverability audit. Paid (S199).
      operationId: x402_seller_intel_x402_seller_intel_post
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.190173'
        protocols:
        - x402: {}
  /x402/seller-intel/preview:
    get:
      tags:
      - analytics
      summary: X402 Seller Intel Preview
      description: FREE teaser — the two modes + the catalog-ranking framework (the specific analysis is paid).
      operationId: x402_seller_intel_preview_x402_seller_intel_preview_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /regime:
    get:
      tags:
      - analytics
      summary: Get Regime
      description: Paid macro risk-regime data feed (x402 USDC on Base or Bearer credits).
      operationId: get_regime_regime_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.024381'
        protocols:
        - x402: {}
  /signals:
    get:
      tags:
      - analytics
      - markets
      summary: Get Signals Teaser
      description: FREE teaser — the BTC vol-expansion regime read (the shop-window). No payment.
      operationId: get_signals_teaser_signals_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /signals/full:
    get:
      tags:
      - analytics
      - markets
      summary: Get Signals Full
      description: PAID full multi-coin signal set (x402 USDC on Base or Bearer credits).
      operationId: get_signals_full_signals_full_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.032508'
        protocols:
        - x402: {}
  /markets/act:
    post:
      tags:
      - analytics
      - markets
      summary: Markets Act
      description: 'Markets Bundle: regime + live signals + brief + optional governance review, one call.'
      operationId: markets_act_markets_act_post
      parameters:
      - name: authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MarketsActRequest'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.085334'
        protocols:
        - x402: {}
  /governance-record:
    get:
      tags:
      - markets
      summary: Governance Record
      operationId: governance_record_governance_record_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
      security: []
  /residence/act:
    post:
      tags:
      - residence
      summary: Residence Act
      description: 'Governed-orchestrator bundle: reason + govern + remember, in one call, for your home.'
      operationId: residence_act_residence_act_post
      parameters:
      - name: authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ResidenceActRequest'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
        '402':
          description: Payment Required — pay in USDC via x402 (or Lightning/L402) and retry with the X-PAYMENT header.
      x-payment-info:
        price:
          mode: fixed
          currency: USD
          amount: '0.190173'
        protocols:
        - x402: {}
  /billing/checkout:
    post:
      summary: Create Checkout
      description: Create a hosted Stripe Checkout Session (subscription mode). Returns {url}.
      operationId: create_checkout_billing_checkout_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CheckoutBody'
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /billing/portal:
    post:
      summary: Create Portal
      description: 'Stripe customer portal (manage/cancel). Body: {stripe_customer_id}.


        REAL SECURITY GAP FOUND + FIXED 2026-08-13 (Grok codebase sweep, independently verified):

        this endpoint has no Bearer/signature/session auth at all -- it used to also accept a bare

        {email}, look the customer up by it, and hand back a live Billing Portal URL (which can

        cancel the subscription, change the card, or change seat count). Anyone who merely knows a

        subscriber''s email got their portal. The email-lookup path is removed: stripe_customer_id

        (a cus_... id) is not publicly knowable the way an email address is, so requiring it directly

        closes the practical attack path without a broader auth redesign. A stricter fix (binding

        this to the caller''s own invinoveritas api_key via client_reference_id) is a real follow-up,

        not done here -- this endpoint may currently have no legitimate self-serve caller passing an

        api_key at all, and guessing that contract wrong risks breaking real subscription management.'
      operationId: create_portal_billing_portal_post
      requestBody:
        content:
          application/json:
            schema:
              additionalProperties: true
              type: object
              title: Body
        required: true
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema: {}
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
      security: []
  /billing/status:
    get:
      summary: Billing Status
      description: 'Subscription status for an email (gate check / UI).


        LOCALHOST ONLY (2026-08-13 security sweep). This used to be a public

        unauthenticated lookup: anyone who guessed a subscriber email learned

        their plan, status, and period end. No in-repo caller. Bind to

        trusted_client_ip (X-Real-IP), not raw peer — nginx makes every

        proxied request look like 127.0.0.1 on request.client.host.'
      operationId: billing_status_billing_status_get
      parameters:
      - name: email
        in: query
        required: false
        schema:
          type: string
          default: ''
          title: Email
      response

# --- truncated at 32 KB (227 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/babyblueviper-com/refs/heads/main/openapi/babyblueviper-com-openapi.yml