{"name":"compliance","stage":"ga","description":"Package compliance is your KYC/KYB onboarding, accreditation records, and the evidence trail behind them.","operations":[{"operationId":"get_compliance_accreditation","method":"GET","href":"/v1/compliance/accreditation","summary":"Returns the org's tracked accreditation-state records, newest first — evidence entries the org keeps, never a platform certification."},{"operationId":"post_compliance_accreditation","method":"POST","href":"/v1/compliance/accreditation","summary":"Records an ASSERTED accreditation state for a subject — the subject's own assertion, with no verifier."},{"operationId":"get_compliance_accreditation_by_id","method":"GET","href":"/v1/compliance/accreditation/{id}","summary":"Returns one tracked accreditation record."},{"operationId":"post_compliance_accreditation_by_id_decision","method":"POST","href":"/v1/compliance/accreditation/{id}/decision","summary":"Records an org reviewer's decision on an accreditation record — a reviewer confirmation, a provider verification the reviewer has evidence of (a CPA/attorney letter, a verifier report), a rejection, or an expiry."},{"operationId":"get_compliance_audit","method":"GET","href":"/v1/compliance/audit","summary":"AuditRead is the compliance read of the SHARED tamper-evident audit plane — the SOC 2 posture surface (privileged actions: who started/decided what, when)."},{"operationId":"get_compliance_health","method":"GET","href":"/v1/compliance/health","summary":"Reports subsystem liveness and the wired verification provider."},{"operationId":"get_compliance_records","method":"GET","href":"/v1/compliance/records","summary":"ListRecords is the unified compliance-record view for the org: its verifications and accreditation records together, each provider-reported or tracked, never platform-asserted."},{"operationId":"get_compliance_status","method":"GET","href":"/v1/compliance/status","summary":"Status is the org's honest posture read: the wired provider and the per-status tally of its verifications."},{"operationId":"get_compliance_subjects","method":"GET","href":"/v1/compliance/subjects","summary":"Returns the org's subjects as PII-MINIMIZED summaries — no name or email, only whether an email is on file."},{"operationId":"post_compliance_subjects","method":"POST","href":"/v1/compliance/subjects","summary":"Records a party the org is verifying as part of its own onboarding/compliance — a team member, vendor, customer, or counterparty."},{"operationId":"get_compliance_subjects_by_id","method":"GET","href":"/v1/compliance/subjects/{id}","summary":"Returns one subject WITH its contact PII — the only surface that returns it, and only to the owning org."},{"operationId":"get_compliance_verifications","method":"GET","href":"/v1/compliance/verifications","summary":"Returns the org's KYC/KYB verifications, newest first — opaque subject references and provider-reported statuses only, no subject PII."},{"operationId":"post_compliance_verifications","method":"POST","href":"/v1/compliance/verifications","summary":"Begins a KYC/KYB verification of a subject through the wired provider — an existing subject by id, or one created inline from the request."},{"operationId":"post_compliance_verifications_webhook","method":"POST","href":"/v1/compliance/verifications/webhook","summary":"Provider push that settles a verification, authenticated by HMAC signature"},{"operationId":"get_compliance_verifications_by_id","method":"GET","href":"/v1/compliance/verifications/{id}","summary":"Returns one verification — its opaque subject reference and provider-reported status, no subject PII."},{"operationId":"post_compliance_verifications_by_id_decision","method":"POST","href":"/v1/compliance/verifications/{id}/decision","summary":"Records a privileged reviewer's MANUAL decision on a verification — the human-in-the-loop path, and the ONLY route to a passing status when no real provider is wired."},{"operationId":"post_compliance_verifications_by_id_refresh","method":"POST","href":"/v1/compliance/verifications/{id}/refresh","summary":"Polls the wired provider for its current decision and records it, ATTRIBUTED to the provider — the internal PULL reconcile."}],"_links":{"describedby":{"href":"/v1/openapi.json?capability=compliance"},"self":{"href":"/v1/compliance"},"up":{"href":"/v1"}}}