{
  "openapi": "3.1.0",
  "info": {
    "title": "Hybrid Cortex registered-client platform",
    "version": "2026-10-20.preview.1",
    "description": "Experimental, disabled by default. Compatible Hybrid ID and Cortex implementations are deployed with gates closed; genuine owner/client commissioning remains open. Generic personal participation and mutual introductions, not private-file search, business Vault authority, unlimited background execution, payments or bulk account provisioning."
  },
  "servers": [
    {
      "url": "https://hybrid-cortex.com"
    }
  ],
  "paths": {
    "/api/platform/v1/status": {
      "get": {
        "operationId": "cortexPlatformStatus",
        "summary": "Read platform admission status",
        "responses": {
          "200": {
            "description": "Readiness metadata only; not owner authorization."
          }
        }
      }
    },
    "/api/platform/v1": {
      "post": {
        "operationId": "cortexPlatformOperation",
        "summary": "Perform one exact app/owner or exact-agent operation",
        "security": [
          {
            "registeredApplication": []
          }
        ],
        "requestBody": {
          "required": true,
          "content": {
            "application/json": {
              "schema": {
                "oneOf": [
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "onboarding.begin",
                        "description": "Create or resume a private app/owner checkpoint. No public Cortex membership, native account or Vault key is created."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [],
                        "properties": {}
                      }
                    },
                    "x-required-permission": "cortex:platform:onboarding",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "onboarding.status",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "id"
                        ],
                        "properties": {
                          "id": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:onboarding",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input",
                      "approval_token"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "onboarding.bind-agent",
                        "description": "Bind an existing canonical owner-controlled personal agent; no responder is started."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "id",
                          "agent",
                          "revision"
                        ],
                        "properties": {
                          "id": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "agent": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "revision": {
                            "type": "integer",
                            "minimum": 0
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:onboarding",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input",
                      "approval_token"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "onboarding.register-agent",
                        "description": "Reuse an existing linked Cortex profile or prepare a private profile for an existing canonical owner-controlled personal agent. Exact owner review required. No native identity, public introduction, protection key or runtime is created."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "id",
                          "native_agent",
                          "name",
                          "role",
                          "revision"
                        ],
                        "properties": {
                          "id": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "native_agent": {
                            "type": "string",
                            "pattern": "^[a-f0-9]{32}$"
                          },
                          "name": {
                            "type": "string",
                            "minLength": 1,
                            "maxLength": 100
                          },
                          "role": {
                            "type": "string",
                            "minLength": 1,
                            "maxLength": 120
                          },
                          "revision": {
                            "type": "integer",
                            "minimum": 0
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:onboarding",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "space.create",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "name",
                          "purpose",
                          "expires_at"
                        ],
                        "properties": {
                          "name": {
                            "type": "string",
                            "minLength": 1,
                            "maxLength": 120
                          },
                          "purpose": {
                            "type": "string",
                            "pattern": "^[a-z][a-z0-9-]{0,47}$"
                          },
                          "expires_at": {
                            "type": "integer",
                            "description": "UTC Unix milliseconds; must fit the space and current authority."
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "space.status",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "space"
                        ],
                        "properties": {
                          "space": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input",
                      "approval_token"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "space.archive",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "space",
                          "revision"
                        ],
                        "properties": {
                          "space": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "revision": {
                            "type": "integer",
                            "minimum": 0
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input",
                      "approval_token"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "participation.approve",
                        "description": "Owner approves exact event projection, expiry and proposed contact card. This does not approve an introduction or private file access."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "space",
                          "purpose",
                          "agent",
                          "revision",
                          "expires_at",
                          "offers",
                          "seeks",
                          "disclosure",
                          "reviewed"
                        ],
                        "properties": {
                          "space": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "purpose": {
                            "type": "string",
                            "pattern": "^[a-z][a-z0-9-]{0,47}$",
                            "description": "Exact immutable space purpose, included in the owner-reviewed request."
                          },
                          "agent": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "revision": {
                            "type": "integer",
                            "minimum": 0
                          },
                          "expires_at": {
                            "type": "integer",
                            "description": "UTC Unix milliseconds; must fit the space and current authority."
                          },
                          "offers": {
                            "type": "array",
                            "maxItems": 24,
                            "uniqueItems": true,
                            "items": {
                              "type": "string",
                              "pattern": "^[a-z][a-z0-9-]{0,47}$"
                            }
                          },
                          "seeks": {
                            "type": "array",
                            "maxItems": 24,
                            "uniqueItems": true,
                            "items": {
                              "type": "string",
                              "pattern": "^[a-z][a-z0-9-]{0,47}$"
                            }
                          },
                          "disclosure": {
                            "type": "object",
                            "additionalProperties": false,
                            "required": [
                              "display_name",
                              "headline",
                              "contact"
                            ],
                            "properties": {
                              "display_name": {
                                "type": "string",
                                "minLength": 1,
                                "maxLength": 80
                              },
                              "headline": {
                                "type": "string",
                                "minLength": 1,
                                "maxLength": 160
                              },
                              "contact": {
                                "type": "string",
                                "minLength": 1,
                                "maxLength": 240
                              }
                            }
                          },
                          "reviewed": {
                            "const": true
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "participation.status",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "participant"
                        ],
                        "properties": {
                          "participant": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input",
                      "approval_token"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "participation.withdraw",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "participant",
                          "revision"
                        ],
                        "properties": {
                          "participant": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "revision": {
                            "type": "integer",
                            "minimum": 0
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "participation.discover",
                        "description": "Currently authorized, opted-in space aliases only. No names, private features, confidence claims or responder availability."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "participant"
                        ],
                        "properties": {
                          "participant": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "after": {
                            "type": "string",
                            "description": "Returned space-local alias cursor; omit on the first page."
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:query",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "query.match",
                        "description": "Exact-pair deterministic comparison of reviewed topic codes. Outputs a bounded match band and fixed reason codes, without the underlying features."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "requester",
                          "target"
                        ],
                        "properties": {
                          "requester": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "target": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:query",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "query.status",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "query"
                        ],
                        "properties": {
                          "query": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:query",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "introduction.request",
                        "description": "Current app/owner-scoped operation."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "query"
                        ],
                        "properties": {
                          "query": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:introductions",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input",
                      "approval_token"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "introduction.decide",
                        "description": "Separate current owner decision over an immutable introduction and exact review terms. Reply auto-approval is irrelevant."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "introduction",
                          "decision",
                          "reviewed",
                          "terms_digest"
                        ],
                        "properties": {
                          "introduction": {
                            "type": "string",
                            "format": "uuid"
                          },
                          "decision": {
                            "enum": [
                              "approve",
                              "decline"
                            ]
                          },
                          "reviewed": {
                            "const": true
                          },
                          "terms_digest": {
                            "type": "string",
                            "pattern": "^[a-f0-9]{64}$",
                            "description": "From your current introduction.status review; binds exact purpose, contact card, recipient and participation versions."
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:introductions",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "introduction.status",
                        "description": "Includes only your own proposed contact card and the review terms digest. The counterparty card remains withheld."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "introduction"
                        ],
                        "properties": {
                          "introduction": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:introductions",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "introduction.disclose",
                        "description": "Both current owners must have approved. Returns only the counterparty card; repeats are reauthorized and do not add another disclosure meter unit. No chat message is sent."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [
                          "introduction"
                        ],
                        "properties": {
                          "introduction": {
                            "type": "string",
                            "format": "uuid"
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:introductions",
                    "x-owner-only": false
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "sync",
                        "description": "Owner-only status notifications; resource reads still require current authorization."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [],
                        "properties": {
                          "cursor": {
                            "type": [
                              "string",
                              "null"
                            ],
                            "maxLength": 512,
                            "description": "Opaque app/owner-bound cursor from sync.next. Omit initially. No global sequence numbers are disclosed."
                          }
                        }
                      }
                    },
                    "x-required-permission": "cortex:platform:participation",
                    "x-owner-only": true
                  },
                  {
                    "type": "object",
                    "additionalProperties": false,
                    "required": [
                      "access_token",
                      "operation",
                      "request_id",
                      "input"
                    ],
                    "properties": {
                      "approval_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Exact owner-device decision from Hybrid ID. Required for sensitive owner decisions; never accepted merely from a backend checkbox."
                      },
                      "access_token": {
                        "type": "string",
                        "minLength": 16,
                        "maxLength": 4096,
                        "writeOnly": true,
                        "description": "Transient purpose-scoped Hybrid ID connection, never a native owner session."
                      },
                      "operation": {
                        "const": "usage",
                        "description": "Owner-only observation counters and sanitized monitoring. No charge, wallet debit or canonical Data Vault capacity claim."
                      },
                      "request_id": {
                        "type": "string",
                        "format": "uuid"
                      },
                      "input": {
                        "type": "object",
                        "additionalProperties": false,
                        "required": [],
                        "properties": {}
                      }
                    },
                    "x-required-permission": "cortex:platform:usage",
                    "x-owner-only": true
                  }
                ],
                "discriminator": {
                  "propertyName": "operation"
                }
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Current authorized result or retained non-sensitive mutation receipt. Read status after an uncertain result. Contact cards only from authorized status/disclosure reads, never the retry ledger.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "schema",
                    "request_id",
                    "result"
                  ],
                  "properties": {
                    "schema": {
                      "const": "hybrid.cortex-platform-response.v1"
                    },
                    "request_id": {
                      "type": "string",
                      "format": "uuid"
                    },
                    "result": {
                      "type": "object",
                      "description": "Operation result. Match bands: no-match, possible-fit, strong-fit. Introduction states: awaiting-approval, accepted, declined. Discovery returns space aliases. No operation starts a responder or sends a chat message."
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Invalid fields, changed review terms or forbidden browser context."
          },
          "401": {
            "description": "Missing/expired authentication; obtain fresh authority while retaining exact operation IDs."
          },
          "403": {
            "description": "Denied, withdrawn, changed or unadmitted authority. Never silently renew on denial."
          },
          "404": {
            "description": "Resource unavailable in this app/owner scope."
          },
          "409": {
            "description": "Revision/content/state conflict. Do not replace an uncertain operation ID."
          },
          "413": {
            "description": "Body exceeds 16384 bytes."
          },
          "415": {
            "description": "Use application/json."
          },
          "429": {
            "description": "Temporary safety rate limit, not a priced allowance."
          },
          "503": {
            "description": "Feature disabled or current dependency cannot be verified. No stale-success fallback."
          }
        }
      }
    }
  },
  "components": {
    "securitySchemes": {
      "registeredApplication": {
        "type": "http",
        "scheme": "basic",
        "description": "Registered confidential app authentication from its backend only. Together with explicit purpose-scoped owner/agent connection; never sufficient alone."
      }
    }
  },
  "x-status": "deployed-default-off; commissioning-open; activation-disabled",
  "x-ownership": "Hybrid ID identities/consent; Core canonical Vault/storage/billing; Cortex scoped workflow; client application experience.",
  "x-response-readiness": "An introduction acceptance, disclosure, chat delivery, connected responder, storage receipt and proof finality are distinct states.",
  "x-privacy": "AES-256-GCM sealed reviewed projections; no source files, owner passwords/private keys, raw features in matching output, contact cards in event/retry/metering logs or global sequence cursors."
}