← back to dashboard · playground · simulator · cross-border
The API is local-dev-shaped: stdlib-only Python http.server, Postgres-backed, no auth (loopback only). Eighteen endpoints across six tags (corpus / rules / rule-runs / routing / authoring / ingestion). Every POST /api/rule_run writes a row to the audit log; module/scope/filename inputs are alphabet-restricted; /api/rule_save is gated by HABEAS_ADMIN_MODE=1.