# AIRUS Gateway

> OpenAI-совместимый LLM Gateway для российского B2B: рубли, prepaid-ledger, receipts, роутинг, batch, webhooks, BYOK, IAM, AI Firewall, RAG.
> Base URL: https://airus.world/v1  |  Auth: Authorization: Bearer $AIRUS_API_KEY

## Начало
- [Разработчикам (agent-readable)](https://airus.world/developers/agents): AGENTS.md, llms.txt, verified snippets
- [Быстрый старт и миграция](https://airus.world/developers): первый запрос за 5 минут, Migration Cockpit
- [Документация](https://airus.world/docs): полное описание API
- [Полный машинный контекст](https://airus.world/llms-full.txt): все эндпоинты, ошибки, алиасы
- [OpenAPI](https://airus.world/openapi.json): машинный контракт

## Core (OpenAI-совместимо)
- POST /v1/chat/completions — Chat Completions (streaming через stream:true), airus_routing/airus_slo/airus_firewall receipts в ответе [api_key]
- POST /v1/embeddings — Embeddings (OpenAI-совместимо) [api_key]
- GET /v1/models — Каталог доступных моделей и алиасов [api_key]

## Auth и ключи
- POST /auth/register — Регистрация: создаёт тенант, проект, рублёвый счёт, owner [public]
- POST /auth/login — Вход, возвращает JWT accessToken [public]
- POST /auth/accept-invite — Вход по инвайт-токену организации (IAM) [public]
- GET /me — Профиль пользователя и тенанта [jwt]
- GET /projects — Проекты тенанта [jwt]
- GET /api-keys — API-ключи (список) [jwt]
- POST /api-keys — Создать ключ (keyType: standard|agent|service); полный ключ показывается один раз [jwt]
- DELETE /api-keys/:id — Отозвать ключ (мгновенно) [jwt]

## Биллинг и receipts
- GET /billing/balance — Баланс, план, SLA-класс, commit [jwt]
- POST /billing/top-up/manual — Ручное пополнение (dev/тест; на проде 403 без ALLOW_MANUAL_TOPUP) [jwt]
- GET /billing/ledger — Append-only журнал операций [jwt]
- GET /usage — События использования (metadata-only) [jwt]

## Политики
- GET /v1/airus/policies — Политики проектов [jwt]
- POST /v1/airus/policies — Создать политику (бюджеты, allow-list, лимиты, hybrid, firewall) [jwt]
- PATCH /v1/airus/policies/:id — Обновить политику [jwt]

## FinOps и SLO
- GET /v1/airus/cost/summary — Сводка затрат [jwt]
- GET /v1/airus/cost/by-feature — Затраты по metadata.feature (CSV через format=csv) [jwt]
- GET /v1/airus/cost/by-client — Затраты по metadata.client_id (перевыставление) [jwt]
- GET /v1/airus/cost/anomalies — Аномалии затрат [jwt]
- GET /v1/airus/slo/summary — SLO: p50/p95/p99, error rate, TTFT по маршрутам [jwt]
- GET /v1/airus/observability/summary — Наблюдаемость и health score [jwt]
- GET /v1/airus/observability/drift — Дрифт-правила (окно vs базлайн) [jwt]
- GET /v1/airus/observability/metrics — Prometheus-экспорт метрик тенанта (requests/errors/latency/cost/tokens) [jwt]
- GET /v1/airus/observability/cacheability — Cacheability report: hit-rate по фичам + рекомендации по кэшированию [jwt]
- GET /v1/airus/value/summary — Value Dashboard: стоимость за результат по вертикалям (тендеры/звонки/документы/креативы/знания) [jwt]

## valueops
- GET /v1/airus/value/event-types — Типы value events и decision-метки (scale/fix/pause/kill) [public]
- POST /v1/airus/value/events — Записать бизнес-результат AI (ticket_deflected/document_processed/...) [api_key]
- GET /v1/airus/value/roi — ROI Receipt по use case: value/cost/net/roi% + recommendation [jwt]
- GET /v1/airus/value/dashboard — Executive Value Dashboard: портфель use case с ROI и решениями [jwt]

## Batch
- GET /v1/airus/batches/templates — Каталог batch-шаблонов (use-case → jobType + SLA + модель) [public]
- POST /v1/airus/batches — Создать batch-задание (скидки economy −30%/standard −15%) [jwt]
- POST /v1/airus/batches/estimate — Калькулятор экономии до запуска [jwt]
- GET /v1/airus/batches/:id — Статус батча [jwt]
- GET /v1/airus/batches/:id/results — Результаты NDJSON [jwt]
- GET /v1/airus/batches/:id/receipt — Чек экономии [jwt]
- POST /v1/airus/batches/:id/cancel — Отменить батч [jwt]

## approved_ai
- GET /v1/airus/approved-ai/employee-templates — Employee-safe prompt templates по отделам (соблюдают политику) [public]

## Инструменты разработчика
- POST /v1/airus/roi/estimate — ROI-калькулятор: экономия ручной обработки vs стоимость AI [public]
- GET /v1/airus/providers — Upstream Provider Registry: Cloud.ru Evolution (RU-модели) со статусом configured/adapter_ready [public]
- GET /v1/airus/providers/:id — Провайдер + каталог моделей (GigaChat/DeepSeek/GLM/Kimi/MiniMax) с ценами ₽/1M и capability-флагами [public]
- GET /v1/airus/providers/:id/models — Каталог моделей провайдера [public]
- GET /v1/airus/errors — Error Doctor: каталог кодов с диагнозом [public]
- POST /v1/airus/migrations/check — Migration Cockpit: живая проверка совместимости ключом [public]
- GET /v1/airus/evals — Eval Pack (методология) [public]
- GET /v1/airus/docs/quality-gate — Docs Quality Gate: drift между документацией и роутером [public]
- GET /v1/airus/docs/snippets — Verified snippets каталог [public]
- GET /v1/airus/docs/endpoints — Машинный список эндпоинтов (source of truth) [public]
- POST /mcp — Docs MCP Server (JSON-RPC 2.0): search_airus_docs, explain_airus_error, get_airus_snippet для AI-агентов [public]

## trust
- GET /v1/airus/trust/overview — Security/SLA/Incident posture (реальные контроли + roadmap) [public]
- GET /v1/airus/trust/subprocessors — Model/Subprocessor Register: маршруты, классы данных, хранение [public]
- GET /v1/airus/trust/data-flow — Data Flow Diagram v0 (узлы/рёбра пути запроса) [public]
- GET /v1/airus/trust/artifacts — Trust Artifacts: документы центра доверия (видимость/статус) [public]
- GET /v1/airus/trust/questionnaire — AI Vendor Questionnaire с преднаполненными ответами + missing_evidence [public]
- GET /v1/airus/trust/vendor-pack — Vendor Assurance Pack: единый пакет для закупки [public]

## partner
- GET /v1/airus/partner/blueprints — Partner Launch Kit: готовые AI-внедрения (CRM/RAG/тендеры/документы/звонки) [public]
- GET /v1/airus/partner/tiers — Партнёрские уровни и модель маржи + режимы биллинга [public]
- GET /v1/airus/partner/margin — Partner Margin Receipt по клиентскому проекту (себестоимость → цена клиента → маржа) [jwt]
- GET /v1/airus/partner/report — White-label отчёт для клиента: usage по вертикалям + маржа партнёра [jwt]

## toolops
- GET /v1/airus/tools/registry-reference — ToolOps reference: verbs, risk levels, approval statuses, connector registry (http_webhook/simulated доступны; MCP/CRM/1С — roadmap) [public]
- POST /v1/airus/tools/register — Регистрация Tool Contract (tool_key, verbs, risk, destructive, requires_approval, endpoint_url) [jwt]
- GET /v1/airus/tools — Реестр зарегистрированных инструментов тенанта [jwt]
- POST /v1/airus/tools/preview — Preview-before-execute: governance-решение + blast radius, БЕЗ исполнения [api_key]
- POST /v1/airus/tools/execute — Исполнение действия через action policy: allow→адаптер / needs_approval→pending / block [api_key]
- GET /v1/airus/tools/approvals — Очередь pending-действий, ожидающих одобрения (ИБ/админ) [jwt]
- POST /v1/airus/tools/calls/:id/approve — Одобрить pending-действие → исполнение через адаптер [jwt]
- POST /v1/airus/tools/calls/:id/reject — Отклонить pending-действие [jwt]
- GET /v1/airus/tools/calls/:id/receipt — Tool Call Receipt: verb, решение, blast radius, latency, rollback [jwt]
- GET /v1/airus/tools/calls — Action Log: журнал действий агентов (фильтр по approval status) [jwt]

## blueprints
- GET /v1/airus/blueprints — Каталог готовых AI-workflow blueprints (фильтр ?category=) [public]
- GET /v1/airus/blueprints/reference — Blueprint reference: категории, платформы, типы шагов, политики, integration registry, readiness-критерии [public]
- GET /v1/airus/blueprints/:id — Blueprint detail: манифест (шаги/модели/политики/fallback), readiness score, lint [public]
- POST /v1/airus/blueprints/:id/run — Sandbox-прогон blueprint → Blueprint Run Receipt (шаги, стоимость, fallback, business_result) [api_key]
- POST /v1/airus/blueprints/:id/deploy — Sandbox deploy: детерминированная валидация → Deployment Receipt (tests, readiness, missing_items, decision) [jwt]
- GET /v1/airus/blueprints/deployments — Список deployment-квитанций тенанта [jwt]
- GET /v1/airus/blueprints/deployments/:id — Blueprint Deployment Receipt по id [jwt]
- GET /v1/airus/blueprints/runs — Журнал прогонов blueprints (фильтр ?blueprint_id=) [jwt]
- GET /v1/airus/blueprints/runs/:id — Blueprint Run Receipt по id [jwt]

## promptops
- GET /v1/airus/prompts/reference — PromptOps reference: prompt states, lifecycle-переходы, gate-проверки, data classes [public]
- POST /v1/airus/prompts — Создать Prompt Package (prompt_key, owner_team, use_case, context_policy) [jwt]
- GET /v1/airus/prompts — Реестр prompt packages тенанта [jwt]
- GET /v1/airus/prompts/:id — Prompt Package detail: версии, статус, lifecycle [jwt]
- POST /v1/airus/prompts/:id/versions — Новая версия промпта (template, variables, output_schema, model_variants) [jwt]
- GET /v1/airus/prompts/:id/versions — История версий [jwt]
- GET /v1/airus/prompts/:id/diff — Diff двух версий (?from=&to=): added/removed строки и переменные [jwt]
- POST /v1/airus/prompts/:id/promote — Promote по lifecycle (draft→review→staging→production→deprecated) [jwt]
- POST /v1/airus/prompts/:id/rollback — Rollback current_version на предыдущую [jwt]
- POST /v1/airus/prompts/:id/test — Детерминированный prompt-gate → Prompt Receipt (gate_status, schema_valid, checks, cost) [api_key]
- GET /v1/airus/prompts/:id/receipts — Prompt receipts (история прогонов gate) [jwt]
- POST /v1/airus/context-policies — Создать Context Policy (allow/block sources, data classes, token budget, freshness/citation/provenance) [jwt]
- GET /v1/airus/context-policies — Список context policies [jwt]
- POST /v1/airus/context-policies/:id/evaluate — Context governance dry-run: проверка context pack против политики → allow/block + violations [jwt]

## migrationops
- GET /v1/airus/migration/reference — MigrationOps reference: source-провайдеры, capabilities, режимы миграции [public]
- POST /v1/airus/migration/import-config — Импорт конфига (.env/OpenAI SDK/n8n): детект провайдера, base_url, модель (ключ не сохраняется) [public]
- POST /v1/airus/migration/projects — Создать migration project (source_provider, base_url, use_cases, mode, rollback) [jwt]
- GET /v1/airus/migration/projects — Реестр миграционных проектов [jwt]
- GET /v1/airus/migration/projects/:id — Migration project detail: scan, receipt, cutover checklist, rollback plan [jwt]
- POST /v1/airus/migration/projects/:id/compatibility-scan — Compatibility scan: детерминированная оценка гэпов по capabilities → score + known_gaps [jwt]
- POST /v1/airus/migration/projects/:id/compare — Compare → Migration Receipt: cost delta (реальный), quality delta (EvalOps), cutover decision [jwt]
- GET /v1/airus/migration/projects/:id/receipt — Migration Receipt + rollback plan (для CTO/CFO/ИБ) [jwt]
- POST /v1/airus/migration/projects/:id/cutover — Cutover checklist + решение (blocked при hold) [jwt]
- POST /v1/airus/migration/projects/:id/rollback — Rollback plan + возврат статуса (старый base_url/модель/ключ) [jwt]

## routeeconomics
- GET /v1/airus/routing/reference — RouteEconomics reference: complexities, objective modes, nominal scorecards [public]
- POST /v1/airus/routing/policies — Route Policy (objective, min quality, max cost/latency, fallback) [jwt]
- GET /v1/airus/routing/policies — Список route policies [jwt]
- POST /v1/airus/routing/model-scorecards — Model Scorecard по use case (quality/cost/latency; source EvalOps/declared) [jwt]
- GET /v1/airus/routing/model-scorecards — Scorecards (фильтр ?use_case=) [jwt]
- POST /v1/airus/routing/simulate — Routing Simulator: classify + cheapest-passing-model dry-run (без записи) [jwt]
- POST /v1/airus/routing/decide — Routing Decision → Routing Receipt (selected route, rejected reasons, cost saved) [api_key]
- GET /v1/airus/routing/decisions/:id/receipt — Routing Receipt по id [jwt]
- GET /v1/airus/routing/portfolio — RouteEconomics portfolio: cost saved, premium avoided %, savings по use case [jwt]

## adaptiveroutingops
- GET /v1/airus/adaptive-routing/reference — AdaptiveRouting reference: modes (FIXED/BALANCED/QUALITY_FIRST/COST_CONTROLLED/ASSURED/BATCH), exploration-forbidden, hard gates, roadmap [public]
- POST /v1/airus/adaptive-routing/simulate — What-if routing decision (без записи): hard gates → utility → margin firewall → exploration/hysteresis; commercial_influence:none [public]
- POST /v1/airus/adaptive-routing/decide — Routing decision → sealed tamper-evident Routing Receipt (seal-once по request_id) [api_key]
- POST /v1/airus/adaptive-routing/outcomes — Routing Outcome (accepted/cost/latency после факта) — источник live_measured портфеля [api_key]
- POST /v1/airus/adaptive-routing/contracts — Routing Contract (append-only версии: quality_floor/allowlists/margin/exploration/mode) [jwt]
- GET /v1/airus/adaptive-routing/contracts — Список версий контрактов (фильтр ?contract_key=) [jwt]
- POST /v1/airus/adaptive-routing/kill-switch — Router Kill Switch: ACTIVE/EXPLORATION_OFF/PINNED/FROZEN/ROLLED_BACK [jwt]
- GET /v1/airus/adaptive-routing/kill-switch — Текущее состояние kill-switch (?scope_key=) [jwt]
- GET /v1/airus/adaptive-routing/portfolio — live_measured портфель: acceptance_rate из routing_outcomes в окне (пусто → cannot_certify) [jwt]
- GET /v1/airus/adaptive-routing/receipts/:id — Routing Receipt по id (uuid-guard) [jwt]
- GET /v1/airus/adaptive-routing/receipts/:id/verify — verify-from-sealed: пересчёт sha256 из запечатанной строки [jwt]

## workloadshapeops
- GET /v1/airus/workloads/reference — WorkloadShape reference: interaction classes, hard rules (tenant в cache, semantic fail-closed, C3 no free summary), roadmap [public]
- POST /v1/airus/workloads/compile — Token Budget Compiler (покомпонентный) + context priority prune-план (MUST не выбрасывается) [public]
- POST /v1/airus/workloads/classify — Async eligibility (сомнение→REALTIME) + reasoning budget + compression plan (C3/C4 без free summary) [public]
- POST /v1/airus/workloads/cache-plan — Cache Identity (tenant обязателен) + Semantic Cache decision (fail-closed C3/C4/write/personalized) [public]
- POST /v1/airus/workloads/retrieval-plan — Retrieval Budget Governor + Progressive (minimum sufficient evidence) [public]
- POST /v1/airus/workloads/output-plan — Output Budget plan (enum/schema/stop → потолок) [public]
- POST /v1/airus/workloads/admission — Admission Control: accepted/recommend_async/rejected+retry_after [public]
- POST /v1/airus/workloads/simulate-transform — What-if Context Transform ПРОЕКЦИЯ (без записи) [public]
- POST /v1/airus/workloads/transform — Context Transform → sealed ПРОЕКЦИЯ receipt (computed/estimated, authoritative:false, seal-once) [api_key]
- POST /v1/airus/workloads/document-dedup — Content-addressable dedup eligibility-план: reuse-eligibility при совпадении checksum+parser+tenant+policy+encryption (fail-closed; server artifact-store lookup=roadmap) [api_key]
- POST /v1/airus/workloads/contracts — Workload Shape Contract (append-only версии) [jwt]
- GET /v1/airus/workloads/contracts — Список версий контрактов (?contract_key=) [jwt]
- GET /v1/airus/workloads/receipts/:id — Context Transform Receipt по id (uuid-guard) [jwt]
- GET /v1/airus/workloads/receipts/:id/verify — verify-from-sealed: пересчёт sha256 из запечатанной проекции [jwt]

## uniteconomicsops
- GET /v1/airus/unit-economics/reference — FinOps reference: allocation confidence, cost categories, budget ladder, hard rules (provenance по метрике) [public]
- POST /v1/airus/unit-economics/vat — НДС нормализация: net/vat/gross раздельно [public]
- POST /v1/airus/unit-economics/cost-category — Failed cost taxonomy: accepted/failed_delivery/retry/wasted (failed имеет себестоимость) [public]
- POST /v1/airus/unit-economics/shared-pool — Shared Cost Pool аллокация по утверждённому driver (без units → cannot_allocate) [public]
- POST /v1/airus/unit-economics/reconcile — Invoice Reconciliation lifecycle (estimated↔reported↔invoiced; нет инвойса → cannot_certify) [public]
- POST /v1/airus/unit-economics/budget-ladder — Budget Action Ladder (6 ступеней: alert→restrict_premium→disable_exploration→force_batch→read_only→hard_stop) [public]
- POST /v1/airus/unit-economics/velocity — Cost Velocity: burn/hour + time-to-exhaustion [public]
- POST /v1/airus/unit-economics/profitability — Customer Profitability Map (margin-driven; нет ledger → CANNOT_CLASSIFY) [public]
- POST /v1/airus/unit-economics/engineering-cost-gate — Engineering Cost Gate: COGS before/after delta (ПРОЕКЦИЯ, authoritative:false) [public]
- POST /v1/airus/unit-economics/margin-leakage — Margin Leakage Detector (reuse marginops; ledger-backed→live_measured) [public]
- POST /v1/airus/unit-economics/cost-events — Ingest Universal Cost Event (server-side attribution + allocation confidence; append-only) [api_key]
- POST /v1/airus/unit-economics/allocate — Allocation confidence (tenant server-side; client-tag → максимум ESTIMATED) [api_key]
- GET /v1/airus/unit-economics/coverage — live_measured allocated coverage = DIRECT/total (пусто → cannot_certify не 98%) [jwt]
- POST /v1/airus/unit-economics/finops-receipt — Sealed FinOps Receipt: провенанс по каждой метрике (allocated_coverage/invoice_variance/forecast_error/margin_leakage), seal-once по period [jwt]
- GET /v1/airus/unit-economics/receipts/:id — FinOps Receipt по id (uuid-guard) [jwt]
- GET /v1/airus/unit-economics/receipts/:id/verify — verify-from-sealed: пересчёт sha256 [jwt]

## pricingarchitectureops
- GET /v1/airus/price-book/reference — Price Book reference: canonical planы + hard rules (одна правда, quote=forward, floor из записанной policy) [public]
- POST /v1/airus/price-book/quote — Quote = FORWARD projection (expected/P80/P95/worst + contribution margin, authoritative:false — не измеренный счёт) [public]
- POST /v1/airus/price-book/floor-gate — Price Floor Gate из ЗАПИСАННОГО плана (reuse MarginOps, не quote body); below-floor → blocking [public]
- POST /v1/airus/price-book/discount — Discount governance: только platform_fee + Give-to-Get + cap по плану (pass-through usage запрещён) [public]
- POST /v1/airus/price-book/paid-pilot — Paid Pilot: платный + production decision date + credit при подписании [public]
- POST /v1/airus/price-book/partner-rebate — Partner rebate с СОБРАННОГО positive gross profit (debt/volume/negative блокируют) [public]
- POST /v1/airus/price-book/plans — Publish canonical plan (append-only versioned price book) [jwt]
- GET /v1/airus/price-book/plans — List canonical plans по price_book_version [jwt]
- POST /v1/airus/price-book/receipts — Sealed Price Book Receipt: quote→floor gate из записанного плана→seal; below-floor BLOCKED, hypothesis NOT_FOR_CONTRACT, seal-once по quote_ref [jwt]
- GET /v1/airus/price-book/receipts/:id — Price Book Receipt по id (uuid-guard) [jwt]
- GET /v1/airus/price-book/receipts/:id/verify — verify-from-sealed: пересчёт sha256 [jwt]

## commercialexperimentops
- GET /v1/airus/commercial/reference — Commercial reference: WTP-статусы, исходы (win/loss/no_decision), причины, hard rules (VALIDATED только из ledger) [public]
- POST /v1/airus/commercial/wtp/what-if — WTP what-if: всегда DECLARED (authoritative:false; тело НЕ поднимает до VALIDATED) [public]
- POST /v1/airus/commercial/outcome — Классификация исхода: win/loss/no_decision (no_decision ≠ loss) [public]
- POST /v1/airus/commercial/win-rate — Win-rate = won/(won+lost); no_decision вне знаменателя [public]
- POST /v1/airus/commercial/experiment — Заключение A/B fail-closed: малое n/вырожденная выборка → CANNOT_CONCLUDE; иначе DIRECTIONAL лидер (не significance/optimal price) [public]
- POST /v1/airus/commercial/experiment/assign — Назначение варианта (reuse packagingops.experimentAssignVariant) [public]
- POST /v1/airus/commercial/wtp — Записать WTP-гипотезу (declared, append-only) [jwt]
- POST /v1/airus/commercial/wtp/validate — live_measured: VALIDATED/REFUTED/DECLARED из РЕАЛЬНО уплаченного tenant (ledger top_up), server-side [jwt]
- GET /v1/airus/commercial/wtp — Список WTP-гипотез tenant (по deal_ref) [jwt]
- POST /v1/airus/commercial/outcomes — Записать исход сделки (win/loss/no_decision, append-only) [jwt]
- GET /v1/airus/commercial/outcomes/win-rate — live_measured win-rate из записанных исходов (no_decision вне знаменателя) [jwt]
- POST /v1/airus/commercial/receipts — Sealed Commercial Receipt: WTP validation из ledger, seal-once по deal_ref [jwt]
- GET /v1/airus/commercial/receipts/:id — Commercial Receipt по id (uuid-guard) [jwt]
- GET /v1/airus/commercial/receipts/:id/verify — verify-from-sealed: пересчёт sha256 [jwt]

## billingintegrityops
- GET /v1/airus/billing-integrity/reference — Billing Integrity reference: checks (completeness/dual-meter/replay), hard rules (два независимых следа ledger↔usage, cannot_certify) [public]
- POST /v1/airus/billing-integrity/completeness/what-if — Completeness what-if из counts тела (declared, НЕ live_measured); нет independent source → CANNOT_CERTIFY [public]
- POST /v1/airus/billing-integrity/dual-meter/what-if — Dual meter what-if: ledger ₽ vs usage ₽; нет пар → CANNOT_CERTIFY, расхождение → MISMATCH [public]
- POST /v1/airus/billing-integrity/replay/what-if — Financial replay what-if: реплей из ledger vs usage; нет ledger → CANNOT_CERTIFY, вне допуска → DISCREPANCY [public]
- GET /v1/airus/billing-integrity/completeness — live_measured completeness: join ledger↔usage по request_id в окне (orphan/double/dangling; пусто → cannot_certify) [jwt]
- GET /v1/airus/billing-integrity/dual-meter — live_measured dual meter: finalize ₽ vs usage ₽ по request_id (MATCHED/MISMATCH/cannot_certify) [jwt]
- GET /v1/airus/billing-integrity/replay — live_measured financial replay из ledger (authoritative) vs usage (RECONCILED/DISCREPANCY) [jwt]
- POST /v1/airus/billing-integrity/receipts — Sealed Integrity Receipt: composite fail-closed (доказанное нарушение > недостаточно данных > HEALTHY), seal-once по period [jwt]
- GET /v1/airus/billing-integrity/receipts/:id — Integrity Receipt по id (uuid-guard) [jwt]
- GET /v1/airus/billing-integrity/receipts/:id/verify — verify-from-sealed: пересчёт sha256 [jwt]

## pricingops
- GET /v1/airus/finops/reference — PricingOps reference: budget scopes, on-cap actions, anomaly types, cost dimensions + unit prices [public]
- POST /v1/airus/finops/budgets — Budget по scope (use_case/route/partner_client/agent_session): hard_cap, soft_alerts, on_cap_reached [jwt]
- GET /v1/airus/finops/budgets — Список бюджетов [jwt]
- POST /v1/airus/finops/budgets/:id/check — Budget guard: current_spend vs cap → decision (allow/block/degrade/require_approval) [api_key]
- POST /v1/airus/finops/forecast — Pre-run Cost Forecast по юнитам → optimistic/base/worst + risk flags + approval [jwt]
- POST /v1/airus/finops/cost-receipts — Cost Receipt: итемизированный breakdown токенов/tools/retries/fallback + markup → total [api_key]
- GET /v1/airus/finops/cost-receipts — Список cost receipts (фильтр ?use_case_id=) [jwt]
- GET /v1/airus/finops/cost-receipts/:id — Cost Receipt по id [jwt]
- POST /v1/airus/finops/anomaly-rules — Cost Anomaly Rule (retry_loop/context_explosion/fallback_cost_spike/spend_over_forecast/...) [jwt]
- GET /v1/airus/finops/anomaly-rules — Список anomaly rules [jwt]
- POST /v1/airus/finops/anomaly-rules/:id/evaluate — Оценка метрик по правилу → triggered + action (pause/approval) [api_key]
- GET /v1/airus/finops/dashboard — PricingOps dashboard: бюджеты, receipts, cost total, forecasts, активные rules [jwt]

## devexops
- GET /v1/airus/devex/reference — DevExOps reference: стеки, use cases, capability note [public]
- GET /v1/airus/devex/model-capabilities — Model Capability Matrix: text/vision/audio/embeddings/tools/json/streaming + russian quality/latency/cost tier [public]
- GET /v1/airus/devex/model-capabilities/:id — Capability по маршруту [public]
- GET /v1/airus/devex/quickstart — Quickstart по стеку (?stack=python/node/curl/...): шаги + snippet + agent-readable docs [public]
- POST /v1/airus/devex/debug — Request Debug: нормализация метаданных запроса + error explainer (Error Doctor) + warnings [public]
- POST /v1/airus/devex/onboarding — Onboarding tracking: milestones (api_key/first_request/budget/fallback/quickstart) + checklist [api_key]
- GET /v1/airus/devex/onboarding/:id/receipt — Onboarding Receipt: time_to_first_success, production checklist, next step [jwt]

## integrationops
- GET /v1/airus/integrations/connectors/catalog — Connector marketplace: Bitrix24/amoCRM/1С/n8n/Telegram/webhook/email/drive/csv (actions, risk, auth, status) [public]
- GET /v1/airus/integrations/connectors/catalog/:id — Connector detail [public]
- GET /v1/airus/integrations/reference — IntegrationOps reference: risk classes, action lifecycle, approval rules [public]
- POST /v1/airus/integrations/actions/preview — Action Preview: proposed_changes (old→new) + risk_level + approval_required (без изменения системы) [api_key]
- POST /v1/airus/integrations/actions/execute — Execute по preview_id: решение (auto/after_approval/pending/blocked) → Action Receipt (simulated) [api_key]
- GET /v1/airus/integrations/actions — Журнал действий (фильтр ?status=) [jwt]
- GET /v1/airus/integrations/actions/:id/receipt — Action Receipt: connector, changed_fields, decision, rollback, cost [jwt]

## abuseops
- GET /v1/airus/abuse/reference — AbuseOps reference: ephemeral scopes, incident types, key actions, risk signals [public]
- POST /v1/airus/abuse/ephemeral-tokens — Выпуск ephemeral token (TTL, scope, allowed_models, max_requests/cost) — для frontend/mobile/demo [api_key]
- POST /v1/airus/abuse/ephemeral-tokens/validate — Broker-валидация ephemeral token: TTL + квота → remaining + scope (инкремент requests) [api_key]
- GET /v1/airus/abuse/ephemeral-tokens — Список выпущенных ephemeral tokens [jwt]
- POST /v1/airus/abuse/risk-scan — Key Risk Score (identity-composite): age/rotation/scope/spend/ip → score + signals + recommended_action + spend_at_risk [jwt]
- GET /v1/airus/abuse/keys/:ref/risk — Последний risk score ключа [jwt]
- POST /v1/airus/abuse/incidents — Abuse Incident: type, actions_taken, requests_blocked, cost_saved → next_action [jwt]
- GET /v1/airus/abuse/incidents — Журнал инцидентов [jwt]
- GET /v1/airus/abuse/incidents/:id/receipt — Abuse Incident Receipt [jwt]

## workspaceops
- GET /v1/airus/workspaces/reference — WorkspaceOps reference: отделы, adoption-события, режимы маршрутов, default policy + ссылки на существующие слои (employee-templates/apply-pack/members/budgets) [public]
- POST /v1/airus/workspaces — Создать Employee Workspace: отделы, approved routes (fast/balanced/document), машинная policy (data classes/actions/бюджет на пользователя) [jwt]
- GET /v1/airus/workspaces — Список workspace [jwt]
- GET /v1/airus/workspaces/:id — Workspace detail + policy [jwt]
- POST /v1/airus/workspaces/:id/departments — Включить department workspaces (sales/hr/legal/finance/...) [jwt]
- POST /v1/airus/workspaces/adoption-events — Adoption-событие: employee_invited/first_request/prompt_pack_used/policy_block/task_completed (+time_saved) [api_key]
- GET /v1/airus/workspaces/:id/dashboard — Workspace dashboard/receipt: active users, отделы, requests, policy blocks, time saved, top pack [jwt]

## certificationops
- GET /v1/airus/certification/reference — CertificationOps reference: 8 badges (required gates/renewal), 9 review gates, partner tiers (из PartnerOps) [public]
- GET /v1/airus/marketplace/listings — Публичный marketplace: listed-листинги с certified badges (?type=app/connector/mcp_tool/blueprint) [public]
- GET /v1/airus/certification/verify/:id — Публичная верификация badge (customer-visible receipt): gates, версия, срок действия [public]
- POST /v1/airus/marketplace/listings — Создать листинг (app/connector/mcp_tool/blueprint) — фундамент marketplace [jwt]
- GET /v1/airus/marketplace/my-listings — Свои листинги (все статусы) с badges [jwt]
- POST /v1/airus/marketplace/listings/:id/publish — Публикация листинга (гейт: требуется ≥1 certified badge) [jwt]
- POST /v1/airus/certification/reviews — Начать review на badge; mcp_safe+tool_key → реальный MCP-audit живого Tool Contract (ToolOps) [jwt]
- POST /v1/airus/certification/reviews/:id/gates — Ревьюер сабмитит пройденные gates → детерминированное решение certified/rejected + score [jwt]
- GET /v1/airus/certification — Список сертификаций (?status=) [jwt]
- GET /v1/airus/certification/renewals-due — Сертификации к продлению (valid_until < 30 дней) [jwt]
- GET /v1/airus/certification/:id/receipt — Certification Receipt: badge, gates passed/failed, score, версия, срок [jwt]

## revops
- GET /v1/airus/revenue/reference — RevOps reference: 10 PQL-событий, revenue stages, sales tasks, CPQ-пакеты + ссылки на смежные слои [public]
- POST /v1/airus/revenue/events — PQL-событие по СВОЕМУ аккаунту/клиенту (first_workflow/roi_receipt/budget_cap_hit/...) [api_key]
- GET /v1/airus/revenue/pql/:accountRef — PQL Score: fit/intent/usage/trust + stage recommendation (детерминированно) [jwt]
- POST /v1/airus/revenue/signals/derive/:accountRef — Derive revenue-сигналов из событий (правила: cap-hit×3/7д, ROI+procurement, второй отдел...) [jwt]
- GET /v1/airus/revenue/signals — Открытые сигналы с recommended_action + crm_payload (Bitrix24/amoCRM deal) [jwt]
- POST /v1/airus/revenue/signals/:id/resolve — Закрыть сигнал: won/lost/dismissed [jwt]
- POST /v1/airus/revenue/quotes — CPQ package-quote: цена + себестоимость + margin_estimate + guardrail <25% [jwt]
- GET /v1/airus/revenue/quotes — Список package-квот [jwt]
- POST /v1/airus/revenue/partners/attributions — Partner attribution: source/activated/paid/MRR/commission → commission_due [jwt]
- GET /v1/airus/revenue/partners/:partnerRef/summary — Partner revenue summary: клиенты, MRR, commission due, expansion [jwt]
- GET /v1/airus/revenue/pipeline — Pipeline dashboard: стадии аккаунтов, top signals, quotes, partner MRR, forecast [jwt]

## analytics
- GET /v1/airus/analytics/events — Allowlist product-событий фронта [public]
- POST /v1/airus/analytics/beacon — First-party beacon: анонимное product-событие (без cookies/PII, rate-limit по IP) [public]
- GET /v1/airus/analytics/dashboard — Агрегат аналитики: события, уникальные сессии, топ путей/рефереров (только platform-admin — ADMIN_EMAILS) [jwt]

## procurementops
- GET /v1/airus/procurement/reference — ProcurementOps reference: типы пакетов, каталог документов (source generated/template_ref/roadmap), статусы, ЭДО-провайдеры, секции анкеты [public]
- POST /v1/airus/procurement/packs — Собрать закупочный пакет (pilot/enterprise): договор/счёт/SLA/DPA-152ФЗ/security/RF-only/zero-log [jwt]
- GET /v1/airus/procurement/packs — Список закупочных пакетов [jwt]
- GET /v1/airus/procurement/packs/:id — Пакет: документы + статусы source [jwt]
- POST /v1/airus/procurement/packs/:id/status — Статус пакета: ready/legal_review/security_review/invoice_sent/edo_sent/signed/paid/blocked [jwt]
- GET /v1/airus/procurement/packs/:id/documents/:docType — Текст документа: rf_only/zero_log/data_routing — генерируются правдиво; юридические — template_ref/roadmap [jwt]
- POST /v1/airus/procurement/packs/:id/security-questionnaire — Заполнить security questionnaire (преднаполнено правдиво) → completion_score [jwt]
- GET /v1/airus/procurement/packs/:id/security-questionnaire — Security questionnaire пакета [jwt]
- POST /v1/airus/procurement/packs/:id/edo — EDO flow tracker (diadoc/saby/pdf_email): статусы contract/invoice/act/upd. Реальный push — roadmap [jwt]
- GET /v1/airus/procurement/packs/:id/receipt — Procurement Receipt: readiness, blocking_items, days_saved_estimate [jwt]

## auditops
- GET /v1/airus/audit/reference — AuditOps reference: audit-действия (AI-native), risk levels, incident/evidence типы, hash algo + смежные слои [public]
- POST /v1/airus/audit/events — Append audit-события в hash-цепочку (prev_hash→event_hash, SHA-256); privacy-safe (без тела промптов) [api_key]
- GET /v1/airus/audit/events — Лента audit-событий (фильтры action/risk_level) [jwt]
- GET /v1/airus/audit/integrity — Integrity check: пересчёт цепочки — ловит правку/удаление/переупорядочивание + digest [jwt]
- GET /v1/airus/audit/receipts/:requestId — Audit Receipt по request_id: события + hash_chain_valid + export_ready [jwt]
- POST /v1/airus/audit/incidents — Создать инцидент (тип/severity/root_cause/event_ids/affected_resources) [jwt]
- GET /v1/airus/audit/incidents — Список инцидентов [jwt]
- GET /v1/airus/audit/incidents/:id/timeline — Incident timeline: события + actor_chain + resource_chain [jwt]
- POST /v1/airus/audit/evidence — Evidence Vault: снимок с content_hash (tamper-evident), retention, access policy [jwt]
- GET /v1/airus/audit/evidence — Список evidence [jwt]
- GET /v1/airus/audit/evidence/:id/verify — Проверка целостности evidence (пересчёт content_hash) [jwt]

## incidentops
- GET /v1/airus/incidentops/reference — IncidentOps reference: severities SEV1-4, типы, semantic signals (пороги), containment actions, lifecycle [public]
- POST /v1/airus/incidentops/detect — Semantic detection: метрики (json_validity/tool_call/citation/p95/cost) → инцидент даже при HTTP 200 [api_key]
- POST /v1/airus/incidentops/incidents — Создать managed-инцидент (severity авто из metrics; affected providers/models/workspaces/requests) [jwt]
- GET /v1/airus/incidentops/incidents — Список инцидентов (?status=) [jwt]
- GET /v1/airus/incidentops/incidents/:id — Инцидент: blast radius, fallback rate, breaches [jwt]
- POST /v1/airus/incidentops/incidents/:id/status — Статус: detected/investigating/contained/recovering/resolved [jwt]
- POST /v1/airus/incidentops/incidents/:id/receipts — Customer Incident Receipt: impact по workspace + service_credit (расчёт по SLA) [jwt]
- GET /v1/airus/incidentops/incidents/:id/receipts — Receipts инцидента (service credits) [jwt]
- POST /v1/airus/incidentops/containment-policies — Containment policy: trigger → actions, respect_rf_only, cost-guard [jwt]
- GET /v1/airus/incidentops/containment-policies — Список containment-политик [jwt]
- POST /v1/airus/incidentops/containment-policies/:id/evaluate — Policy-aware containment decision: разрешённые/заблокированные действия (RF-only + cost) [jwt]
- GET /v1/airus/incidentops/autopilot/reference — Autopilot reference: command roles, mitigation modes, close-rule, tenant-scope + advisory boundary [jwt]
- POST /v1/airus/incidentops/incidents/:id/impact — Impact node + Customer Impact Score (бизнес-ущерб, не % ошибок) [jwt]
- GET /v1/airus/incidentops/incidents/:id/impact — Impact Graph: blast radius (workflows tenant, critical/high, max score) [jwt]
- POST /v1/airus/incidentops/incidents/:id/command — Incident Command System: авто-назначение ролей war room по severity [jwt]
- GET /v1/airus/incidentops/incidents/:id/command — Назначенные роли war room [jwt]
- POST /v1/airus/incidentops/mitigation/evaluate — Mitigation Decision Engine: failover/queue/brownout/read-only/safe-mode/shutdown + проверка совместимости fallback (advisory) [jwt]
- POST /v1/airus/incidentops/retry-shield/evaluate — Retry Storm Shield: circuit breaker + retry budget + dedup (advisory) [jwt]
- POST /v1/airus/incidentops/financial-safety/evaluate — Financial Safety Mode: hold suspicious charges, critical tenant не блокируется (advisory, ledger не трогаем) [jwt]
- POST /v1/airus/incidentops/agent-safe-mode — Agent Safe Mode по severity: read/draft ок, external writes на паузе, финансы denied (advisory) [jwt]
- POST /v1/airus/incidentops/backlog-replay/plan — Controlled Backlog Replay: rate ≤80% capacity + fairness + dedup (advisory) [jwt]
- POST /v1/airus/incidentops/incidents/:id/customer-update — Customer-specific update: impact своего workflow + требуемое действие + billing protection [jwt]
- GET /v1/airus/incidentops/incidents/:id/customer-updates — История customer-updates инцидента [jwt]
- POST /v1/airus/incidentops/incidents/:id/recovery-receipt — Recovery Receipt: replayed/duplicates_prevented, sla_credit (computeServiceCredit), charges_reversed (pending) [jwt]
- GET /v1/airus/incidentops/incidents/:id/recovery-receipt — Recovery receipt инцидента [jwt]
- POST /v1/airus/incidentops/incidents/:id/corrective-actions — Corrective action (owner/verification_test/due) [jwt]
- POST /v1/airus/incidentops/corrective-actions/:id/verify — Верификация corrective action (нужен verification_test) → verified/failed [jwt]
- POST /v1/airus/incidentops/corrective-actions/:id/status — Статус corrective (verified только через /verify) [jwt]
- GET /v1/airus/incidentops/incidents/:id/corrective-actions — Corrective actions + can_close/unverified [jwt]
- POST /v1/airus/incidentops/incidents/:id/close — Закрыть инцидент (ПРАВИЛО: все corrective actions verified, иначе 400) [jwt]
- GET /v1/airus/incidentops/incidents/:id/learning — Learning Graph: похожие прошлые инциденты (provider/type) + recurrence [jwt]
- GET /v1/airus/incidentops/metrics — MTTD/MTTM/MTTR из timestamps инцидентов [jwt]

## supportops
- GET /v1/airus/support/reference — SupportOps reference: SLA-тиры, severities, категории, integration playbooks + ссылка на Error Doctor [public]
- GET /v1/airus/support/playbooks/:key — Integration playbook: openai_sdk/n8n/cursor/roo_code/claude_code/langchain [public]
- GET /v1/airus/support/errors/:requestId — Error Doctor по РЕАЛЬНОМУ request_id: category/source/retryable, root cause, cost charged, fix snippets [jwt]
- GET /v1/airus/support/debug-bundles/:requestId — Safe Debug Bundle: телеметрия без промптов/ключей (prompt_body_included=false, api_key_redacted) [jwt]
- POST /v1/airus/support/cases — One-click support case: severity/category/request_ids + auto debug bundle + SLA по тиру [jwt]
- GET /v1/airus/support/cases — Список кейсов (?status=) [jwt]
- GET /v1/airus/support/cases/:id — Support case [jwt]
- POST /v1/airus/support/cases/:id/status — Статус кейса: open/in_progress/waiting_customer/resolved/closed [jwt]
- POST /v1/airus/support/fix-verifications — Fix Verification: сверка original vs replay request_id (client-driven replay) [jwt]

## devexp
- GET /v1/airus/compat/reference — DevExperience reference: API profiles, уровни совместимости, contract capabilities, deprecations [public]
- GET /v1/airus/compat/profiles — API Profiles: openai-chat-2024/openai-responses-2026/anthropic-messages-2026/airus-native-v1 (pinning, deprecation policy) [public]
- GET /v1/airus/compat/matrix — Compatibility Matrix: verified/degraded/emulated/unsupported по маршрутам × профилю (?api_profile=) [public]
- POST /v1/airus/compat/validate — Parameter Validator: до отправки — accepted/dropped/mapped/warnings (temperature на reasoning, max_tokens→max_completion_tokens) [public]
- GET /v1/airus/compat/deprecations — Deprecation center: уведомления ≥90 дней [public]
- POST /v1/airus/compat/contract-runs — Прогнать contract-оценку route×profile → capability levels + test_cases_passed/total (persisted) [jwt]
- GET /v1/airus/compat/contract-runs — История contract runs [jwt]
- POST /v1/airus/compat/pin — Зафиксировать API profile (version pinning + ≥90 дней на breaking changes) [jwt]
- GET /v1/airus/compat/pin — Текущий закреплённый API profile [jwt]

## priceops
- GET /v1/airus/price/reference — PricingOps reference: fee-структура (без скрытых коэффициентов), commit-планы, price-lock периоды [public]
- GET /v1/airus/price/commit-plans — Commit ladder: PAYG/50k/250k/1M/enterprise-reserved (скидка+price-lock+SLA+support) [public]
- POST /v1/airus/price/quote — Price Quote до отправки: Price Anatomy (upstream+gateway_fee+reliability+SLA+RF-only+retry) + estimated/maximum_total [public]
- POST /v1/airus/price/fallback-ceiling — Fallback Cost Ceiling: pre-execution guardrail (uplift ≤ лимита? approval? on_limit) [public]
- POST /v1/airus/price/margin — Margin status workflow: gross_margin + healthy/thin/negative [public]
- POST /v1/airus/price/locks — Price Lock: фиксация цены на 30/90/365 дней (+commit plan, VAT) [jwt]
- GET /v1/airus/price/locks — Список price-lock (active-флаг) [jwt]
- GET /v1/airus/price/locks/:id — Price Lock detail [jwt]
- POST /v1/airus/price/changes — Price Change Receipt (versioned): old→new, change%, impact, effective_at, notice≥, recommended_action [jwt]
- GET /v1/airus/price/changes — Журнал изменений цен (Price Change Ledger) [jwt]

## billingops
- GET /v1/airus/billing/reference — BillingOps reference: charging policy (Zero Double-Charge), типы adjustment/dispute, VAT + ссылки на реальный ledger [public]
- GET /v1/airus/billing/charging-policy/:situation — Charging decision: тарифицируется ли ситуация (validation_error/timeout/partial_streaming/duplicate_idempotent...) [public]
- POST /v1/airus/billing/receipts — Выпустить verifiable Billing Receipt: canonical usage + provider+fee+VAT − credits + sha256 hash [jwt]
- GET /v1/airus/billing/receipts — Список billing receipts [jwt]
- GET /v1/airus/billing/receipts/:requestId — Billing Receipt по request_id (раскрытие итога до конкретного запроса) [jwt]
- GET /v1/airus/billing/receipts/:requestId/verify — Математическая верификация receipt (пересчёт hash) [jwt]
- POST /v1/airus/billing/reconciliation — Reconciliation Run: AIRUS receipts vs provider statement → matched/unmatched/difference [jwt]
- GET /v1/airus/billing/reconciliation — История сверок [jwt]
- POST /v1/airus/billing/adjustments — Billing Adjustment: refund/credit/correction/sla_credit/promotional_credit [jwt]
- GET /v1/airus/billing/adjustments — Журнал adjustments [jwt]
- POST /v1/airus/billing/disputes — Dispute by request_id: авто-проверки (idempotency/attempts/status) → verdict + авто-credit [jwt]
- GET /v1/airus/billing/disputes — Список споров [jwt]

## antifraudops
- GET /v1/airus/fraud/reference — AntiFraudOps reference: fraud signals, containment tiers, rotation reasons + ссылки на AbuseOps/Firewall/Billing [public]
- POST /v1/airus/fraud/honey-check — Проверка honey-токена: срабатывание canary = доказательство утечки [public]
- GET /v1/airus/fraud/validity-check/:prefix — Leak validity-check (GitHub-style): honey/unknown статус ключа [public]
- POST /v1/airus/fraud/baselines — Behavioral baseline ключа: spend velocity, model mix, ASN/region, concurrency, active hours [jwt]
- POST /v1/airus/fraud/evaluate — Оценка: observed vs baseline → fraud signals + behavioral risk + adaptive containment (сохраняет production) [jwt]
- GET /v1/airus/fraud/signals — Журнал fraud signals (?key_ref=) [jwt]
- POST /v1/airus/fraud/rotations — Safe Rotation receipt: overlap→migrate→revoke (zero downtime) [jwt]
- GET /v1/airus/fraud/rotations — История ротаций ключей [jwt]
- POST /v1/airus/fraud/honey-keys — Выпустить honey (canary) key для репо/доки/.env (drill) [jwt]
- GET /v1/airus/fraud/honey-keys — Список honey keys (triggered-флаг) [jwt]
- POST /v1/airus/fraud/cases — Fraud Case → Zero Fraud Charge: подтверждённое мошенничество → credit (BillingOps adjustment) [jwt]

## enterpriseops
- GET /v1/airus/enterprise/reference — EnterpriseOps reference: deal stages, buying roles, continuity matrix, capability contract [public]
- POST /v1/airus/enterprise/roi — Pre-sale ROI model: conservative/expected/max сценарии + payback (без auth) [public]
- POST /v1/airus/enterprise/capability-contract — Capability Contract: accuracy/availability/cost/data_residency/latency + exit assurance [public]
- POST /v1/airus/enterprise/accounts — Enterprise account (segment, ARR, use case, stage) [jwt]
- GET /v1/airus/enterprise/accounts — Список аккаунтов (?stage=) [jwt]
- POST /v1/airus/enterprise/accounts/:id/stage — Стадия сделки: discovery/security_review/pilot/procurement/production/expansion [jwt]
- POST /v1/airus/enterprise/accounts/:id/committee — Buying Committee Map: роли → coverage score + missing critical roles [jwt]
- POST /v1/airus/enterprise/accounts/:id/pilots — Pilot Success Contract (правило: без business owner/baseline/decision_date/budget/metrics — 400) [jwt]
- GET /v1/airus/enterprise/accounts/:id/pilots — Пилоты аккаунта [jwt]
- POST /v1/airus/enterprise/pilots/:id/evaluate — Pilot Gate: observed vs targets → pass/fail + production offer [jwt]
- POST /v1/airus/enterprise/accounts/:id/requirements — Procurement Requirement (category → requirement → evidence → owner) [jwt]
- POST /v1/airus/enterprise/requirements/:id/status — Статус требования: open/supported/partial/gap [jwt]
- GET /v1/airus/enterprise/accounts/:id/deal-room — Deal Room: агрегат — committee coverage, pilot gate, requirements, deal risk, blockers, readiness, next action [jwt]

## customersuccessops
- GET /v1/airus/success/reference — CustomerSuccessOps reference: activation-уровни (technical/production/value), веса health, churn-каталог [public]
- GET /v1/airus/success/playbooks — Success playbooks: activation_stalled/usage_drop/quality_drop/commit_underused/champion_replacement [public]
- GET /v1/airus/success/activation-template — 30-дневный шаблон production-активации (фазы + milestones) [public]
- POST /v1/airus/success/accounts/:id/success-plan — Customer Success Plan: business_goal/baseline/target/owner/stakeholders + seed 30-day activation [jwt]
- GET /v1/airus/success/accounts/:id/success-plan — Success plan + прогресс активации [jwt]
- POST /v1/airus/success/accounts/:id/stakeholders — Stakeholder map → coverage score + single_champion_risk [jwt]
- GET /v1/airus/success/accounts/:id/activation — Activation journey: milestones, stalled, production_activated [jwt]
- POST /v1/airus/success/accounts/:id/activation/:key — Обновить milestone (status/owner/blocker/due_at) [jwt]
- POST /v1/airus/success/accounts/:id/value-events — Value Realization event: metric/value/financial_equivalent/evidence/customer_verified [jwt]
- POST /v1/airus/success/value-events/:id/verify — Подтверждение value event клиентом (customer_verified) [jwt]
- GET /v1/airus/success/accounts/:id/value-receipt — Value Receipt: realized/pending savings, net value, value multiple, by workflow/metric [jwt]
- POST /v1/airus/success/accounts/:id/health — Account Health Score: value/stakeholder из своих таблиц + входы → score + reasons + action [jwt]
- GET /v1/airus/success/accounts/:id/health — Последний health snapshot [jwt]
- POST /v1/airus/success/accounts/:id/churn/evaluate — Churn Signal Engine (contextual): usage-decline при стабильных workflows — не сигнал; рост от retries — сигнал [jwt]
- GET /v1/airus/success/accounts/:id/churn — Churn-сигналы аккаунта (?status=open) [jwt]
- POST /v1/airus/success/churn/:id/resolve — Закрыть churn-сигнал [jwt]
- GET /v1/airus/success/accounts/:id/expansion — Expansion graph: рекомендации (?workflow=) или сохранённые возможности [jwt]
- POST /v1/airus/success/accounts/:id/expansion — Добавить expansion opportunity (current→proposed workflow, ARR, launch days, complexity) [jwt]
- POST /v1/airus/success/accounts/:id/renewal — Renewal plan: contract_end → timeline 180/120/60/30 + status [jwt]
- GET /v1/airus/success/accounts/:id/renewal — Renewal timeline + статус (on_track/at_risk/monitoring) [jwt]
- GET /v1/airus/success/accounts/:id/success-room — Success Room: агрегат — plan, activation, health, value, churn, renewal, expansion, next action [jwt]

## advocacyops
- GET /v1/airus/advocacy/reference — AdvocacyOps reference: evidence tiers, consent modes, proof pack requirements, rules (estimated not publishable, honest case, reference quota) [public]
- POST /v1/airus/advocacy/accounts/:id/claims — Evidence Claim: statement/metric/baseline/result/tier (A verified_operational/B customer_verified/C estimated) + evidence_refs [jwt]
- POST /v1/airus/advocacy/claims/:id/verify — Подтверждение claim (customer_approved / tier upgrade / evidence refs) [jwt]
- GET /v1/airus/advocacy/accounts/:id/claims — Evidence claims аккаунта [jwt]
- POST /v1/airus/advocacy/accounts/:id/consent — Advocacy Consent: режим (public_named/public_anonymous/private_reference/evidence_only) + allowed_assets + expiry [jwt]
- POST /v1/airus/advocacy/consent/:id/revoke — Отзыв согласия на публикацию [jwt]
- POST /v1/airus/advocacy/accounts/:id/cases — Case Study (правила: Honest Case Standard = limitations обязательны; consent режима; claims не estimated) [jwt]
- GET /v1/airus/advocacy/accounts/:id/cases — Кейсы аккаунта + freshness (current/due_for_revalidation/historical) [jwt]
- POST /v1/airus/advocacy/cases/:id/refresh — Перепроверка кейса (Case Freshness SLA) → current [jwt]
- POST /v1/airus/advocacy/cases/:id/attribution — Partner Attribution (правило: business_owner обязателен — запрет присвоения результата) [jwt]
- POST /v1/airus/advocacy/accounts/:id/reference — Reference Customer Registry: supported_topics, max calls/quarter, min ARR [jwt]
- POST /v1/airus/advocacy/references/match — Reference Matching: opportunity → score (industry/use_case/topics/security/arr) + best eligible [jwt]
- POST /v1/airus/advocacy/references/:id/request — Reference Request (enforce квоты + минимального ARR) [jwt]
- POST /v1/airus/advocacy/reference-requests/:id/complete — Завершить reference call (списать квоту + feedback) [jwt]
- POST /v1/airus/advocacy/accounts/:id/champion — Champion Network: уровень (contributor/advocate/strategic) по вкладу, не по похвале [jwt]
- POST /v1/airus/advocacy/influence — Advocacy Influence Event: asset → opportunity → influenced ARR [jwt]
- GET /v1/airus/advocacy/influence/report — Influence report: influenced pipeline, by event, proof-assisted win rate [jwt]
- GET /v1/airus/advocacy/accounts/:id/proof-pack — Buyer-specific Proof Pack (?buyer_role=cto/ciso/cfo/product_owner/procurement): required vs available [jwt]
- GET /v1/airus/advocacy/accounts/:id/advocacy-room — Advocacy Room: агрегат — verified claims, consent modes, cases+freshness, reference, champion, next action [jwt]

## trustcenterops
- GET /v1/airus/trust-center/reference — TrustCenter reference: слои (public/customer/machine), SLO defs, availability definition, severity, postmortem поля, boundary с IncidentOps [public]
- GET /v1/airus/trust-center/status — Component-level status (12 компонентов) + availability_30d [public]
- POST /v1/airus/trust-center/status/compute — Калькулятор статуса компонента из метрик (operational/degraded/partial/major/maintenance) [public]
- GET /v1/airus/trust-center/incidents — Публичный incident archive + overdue corrective actions (affected_tenants — счётчик) [public]
- GET /v1/airus/trust-center/incidents/:id — Инцидент: timeline + postmortem + corrective actions + communication SLA [public]
- POST /v1/airus/trust-center/postmortem/validate — Валидатор postmortem по стандарту (impact/root_cause/detection/recovery/corrective/what_worked/what_failed) [public]
- GET /v1/airus/trust-center/slo — SLO definitions + availability definition + SLA credit ladder [public]
- POST /v1/airus/trust-center/slo/evaluate — Verifiable SLO: availability + breach + credit% + реальный sha256 evidence_hash (методику не менять задним числом) [public]
- GET /v1/airus/trust-center/routes — Route Trust Passports: regions/retention/training_usage/fallback/data_classes/SLA/last_verified [public]
- GET /v1/airus/trust-center/routes/:id — Passport конкретного route (rf_zero_log/rf_standard/embeddings_rf/external_fallback) [public]
- GET /v1/airus/trust-center/providers — Provider Health Matrix — ВСЕГДА анонимизировано в public (имена под NDA только через JWT) [public]
- GET /v1/airus/trust-center/providers/named — Provider Health Matrix с именами провайдеров (JWT/NDA) [jwt]
- GET /v1/airus/trust-center/evidence — Security Evidence Registry + freshness; истёкшее исключено (?include_expired=true) [public]
- GET /v1/airus/trust-center/subprocessors — Subprocessor Registry + changelog (30-day notice, geography, effective dates) [public]
- GET /v1/airus/trust-center/disclosure — Responsible Disclosure policy: contact/PGP/scope/prohibited/safe harbor/timeline [public]
- GET /v1/airus/trust-center/security-txt — security.txt (RFC 9116) в text/plain [public]
- GET /v1/airus/trust-center/badge — Trust Badge: overall + availability_30d + last incident (открывает данные, не картинку) [public]
- GET /v1/airus/trust-center/customer-room — Customer Trust Room: платформенный статус + требования tenant + evidence expiry + SLA + инциденты именно его [jwt]
- GET /v1/airus/trust-center/sla/compliance — SLA compliance tenant из OpsIncident (Ф47) [jwt]

## resilienceops
- GET /v1/airus/resilience/reference — ResilienceOps reference: tiers R0–R4, chaos scenarios, recovery groups, control-plane survival, rules [public]
- GET /v1/airus/resilience/tiers — Resilience Tiers R0–R4: RTO/RPO/fallbacks/drill cadence/cost delta [public]
- GET /v1/airus/resilience/failure-domains — Failure Domain Registry (provider/cloud/zone/dns/kms/db + shared_risk_group) [public]
- POST /v1/airus/resilience/failure-domains/shared-risk — Common-mode detection: два маршрута независимы или делят failure domain [public]
- POST /v1/airus/resilience/failover-matrix — Semantic Failover Matrix: primary vs fallback (json/tool/accuracy/latency/cost/rf-only) → pass/warning/fail [public]
- POST /v1/airus/resilience/capacity/headroom — Capacity headroom при эвакуации на fallback → sufficient / load-shedding [public]
- GET /v1/airus/resilience/degradation-profiles — Graceful degradation profiles (normal/degraded/emergency) + priority classes + never-shed [public]
- POST /v1/airus/resilience/degradation/plan — Degradation plan по уровню нагрузки (что снижается, что не режется) [public]
- GET /v1/airus/resilience/recovery-groups — Recovery Dependency Groups: порядок восстановления (core→state→runtime→stateful→ops) [public]
- GET /v1/airus/resilience/control-plane-survival — Control Plane Survival: что продолжает работать при потере control plane [public]
- GET /v1/airus/resilience/cost — Resilience Cost Optimizer: cost delta по tier (?tier=R2) [public]
- POST /v1/airus/resilience/workflows/:id/profile — Resilience Profile: tier/RTO/RPO/min quality/max cost/data policy [jwt]
- GET /v1/airus/resilience/workflows/:id/profile — Resilience profile workflow [jwt]
- POST /v1/airus/resilience/workflows/:id/failover-plan — Failover Plan (ПРАВИЛО: R2+ critical → нужен quality_receipt_id, иначе 400) [jwt]
- GET /v1/airus/resilience/workflows/:id/failover-plan — Failover plans workflow [jwt]
- POST /v1/airus/resilience/chaos/experiments — Chaos Experiment (scenario/scope/blast_radius/abort_conditions) [jwt]
- GET /v1/airus/resilience/chaos/experiments — Chaos experiments [jwt]
- POST /v1/airus/resilience/chaos/experiments/:id/result — Результат drill → оценка abort conditions → passed/aborted [jwt]
- POST /v1/airus/resilience/chaos/experiments/:id/receipt — Resilience Receipt: actual vs target RTO/RPO/quality/cost → certified/failed [jwt]
- GET /v1/airus/resilience/receipts — Resilience receipts (drills) [jwt]
- GET /v1/airus/resilience/room — Resilience Room: профили, планы, chaos pass rate, certified receipts, next action [jwt]
- GET /v1/airus/resilience/metrics — tested_rto, chaos_pass_rate, certified receipts, drills [jwt]

## sovereigntyops
- GET /v1/airus/sovereignty/reference — SovereigntyOps reference: deployment modes, disconnected control plane, rules (три уровня независимости) [public]
- GET /v1/airus/sovereignty/deployment-modes — Deployment Profiles: SaaS/Dedicated RF/Customer VPC/On-prem/Air-gapped [public]
- GET /v1/airus/sovereignty/disconnected-control-plane — Что продолжает работать без внешнего интернета (external routes → unavailable, не блокируют) [public]
- POST /v1/airus/sovereignty/policy/compile — Sovereignty Policy Compiler: rf_only/no_telemetry/offline → model routes/network/storage/logging/toolops/artifacts [public]
- POST /v1/airus/sovereignty/hybrid/schedule — Controlled Hybrid Scheduler: data-class-aware (sensitive→local, critical→reserved, public→burst) [public]
- POST /v1/airus/sovereignty/license-passport — License passport open-weight модели → production_approved (commercial_use + field restrictions) [public]
- POST /v1/airus/sovereignty/artifact-manifest — Artifact manifest + sha256 hash + license check (Sovereign Artifact Vault) [public]
- POST /v1/airus/sovereignty/substitution/preview — Derived статус замены (certified/conditional/warning/gap) без записи [public]
- POST /v1/airus/sovereignty/deployments/:name — Deployment Profile (mode/control_plane_location/inference/external_connectivity/license_mode) [jwt]
- GET /v1/airus/sovereignty/deployments — Deployment profiles tenant [jwt]
- POST /v1/airus/sovereignty/workflows/:id/dependencies — Sovereignty Dependency (component/provider_country/criticality/local_substitute/artifact/offline) [jwt]
- GET /v1/airus/sovereignty/workflows/:id/dependencies — Dependency registry workflow [jwt]
- GET /v1/airus/sovereignty/workflows/:id/sovereignty-score — Sovereignty Score (foreign critical unsubstituted штрафует; ?mode=) + sovereign_ready [jwt]
- POST /v1/airus/sovereignty/workflows/:id/substitutions — Model Substitution (DERIVED статус: certified только с quality_receipt + measured >= floor + schema/tool) [jwt]
- GET /v1/airus/sovereignty/workflows/:id/substitutions — Substitutions workflow [jwt]
- POST /v1/airus/sovereignty/entitlements — Offline Entitlement (valid_until + grace period + allowed capabilities) [jwt]
- GET /v1/airus/sovereignty/entitlements/:id — Проверка entitlement (valid/grace/expired) [jwt]
- POST /v1/airus/sovereignty/workflows/:id/sovereignty-receipt — Sovereignty Receipt (drill): foreign disabled + local substitution + quality/capacity → certified/failed [jwt]
- GET /v1/airus/sovereignty/receipts — Sovereignty receipts (drills) [jwt]
- GET /v1/airus/sovereignty/room — Sovereignty Room: deployments, foreign critical deps, certified substitutions, receipts, next action [jwt]
- GET /v1/airus/sovereignty/metrics — foreign_dependency_count, artifact/offline coverage, certified substitutions/drills [jwt]

## localmodelops
- GET /v1/airus/local-models/reference — LocalModelOps reference: precisions, route classes, rules (variant needs benchmark, adapter lineage, no latest) [public]
- GET /v1/airus/local-models/catalog — Local Model Registry: GigaChat 3.1 Lightning/3.5 Ultra, T-lite/T-pro, YandexGPT (params/context/precisions/runtime) [public]
- GET /v1/airus/local-models/route-classes — Route classes: local/fast|balanced|reasoning|tool-calling|legal|code|offline [public]
- POST /v1/airus/local-models/quantization-gate — Quantization Quality Gate: business_accuracy floor + json/tool/numerical within tol → approved/rejected + memory reduction [public]
- POST /v1/airus/local-models/hardware-fit — Hardware Fit Planner: weights + KV-cache → GPU count/precision/runtime/TCO [public]
- POST /v1/airus/local-models/tco — API-vs-Local TCO + break-even + cost per ACCEPTED result (честно рекомендует API если self-hosting бессмыслен) [public]
- POST /v1/airus/local-models/fine-tune-decision — Fine-tune Decision: prompt/structured/RAG/few-shot/reranker first; НЕ fine-tune для меняющихся данных [public]
- POST /v1/airus/local-models/cascade — Dynamic Model Cascade: confidence/risk/rf_only → route class + escalation [public]
- POST /v1/airus/local-models/optimization/preview — Optimization receipt preview: baseline→selected → production_approved (quality в допуске) [public]
- POST /v1/airus/local-models/benchmarks — Local benchmark run на датасете клиента (business_accuracy/json/tool/numerical) [jwt]
- GET /v1/airus/local-models/benchmarks — Benchmark runs tenant [jwt]
- POST /v1/airus/local-models/variants — Model variant — статус DERIVED из Quality Gate (approved невозможен без прохождения benchmark) [jwt]
- GET /v1/airus/local-models/variants — Model variants (quantization) [jwt]
- POST /v1/airus/local-models/adapters — Model adapter — production требует base_model_version + dataset_version + quality_receipt (lineage) → 400 [jwt]
- POST /v1/airus/local-models/adapters/:id/status — Статус adapter (production enforced lineage) [jwt]
- GET /v1/airus/local-models/adapters — Adapter Registry + lineage [jwt]
- POST /v1/airus/local-models/optimization-receipts — Optimization Receipt (baseline→selected, memory/throughput/quality → production_approved) [jwt]
- GET /v1/airus/local-models/optimization-receipts — Optimization receipts [jwt]
- GET /v1/airus/local-models/room — Local Model Factory Room: benchmarks, approved/rejected variants, adapters, optimizations, next action [jwt]
- GET /v1/airus/local-models/metrics — variants tested/approved, production adapters [jwt]

## gpufinops
- GET /v1/airus/gpu-finops/reference — GPUFinOps reference: gpu types, allocation methods, waste types, efficiency weights, rules [public]
- POST /v1/airus/gpu-finops/unified-cost — Unified GPU cost model: base+bundle+NVLink premium (justified?)+VAT → effective GPU-hour [public]
- POST /v1/airus/gpu-finops/allocate — Распределение cost по долям (gpu-time/vram/token/request) + unallocated [public]
- POST /v1/airus/gpu-finops/accepted-per-gpu-hour — Accepted results per GPU-hour + cost per accepted result [public]
- POST /v1/airus/gpu-finops/efficiency-score — GPU Efficiency Score DERIVED (accepted+throughput=40% → загрузка при плохом качестве не даёт высокий score) [public]
- POST /v1/airus/gpu-finops/waste/detect — Waste Engine: idle/low-util/duplicated model/NVLink/warm pool/stale/underused commitment → findings + monthly waste [public]
- POST /v1/airus/gpu-finops/commitment/evaluate — Commitment decision DERIVED: reject до оптимизации (FP8) или при forecast ниже floor; discount != capacity [public]
- POST /v1/airus/gpu-finops/warm-pool — Warm Pool Optimizer: required replicas под QPS + idle cost [public]
- POST /v1/airus/gpu-finops/scheduler — Training/Inference Scheduler: priority + preemption (low-priority вытесняется при production pressure) [public]
- POST /v1/airus/gpu-finops/capacity-portfolio — Capacity Portfolio: base→owned, growth→committed, peak→on-demand, rare→API, DR→reserved [public]
- POST /v1/airus/gpu-finops/waste-receipt — GPU Waste Receipt: spend/productive/waste/reserve/savings + productive_spend_ratio [public]
- POST /v1/airus/gpu-finops/assets — GPU Asset Ledger (provider/gpu_type/count/topology/hourly_cost/commercial_model/owner) [jwt]
- GET /v1/airus/gpu-finops/assets — GPU assets tenant [jwt]
- POST /v1/airus/gpu-finops/assets/:id/allocations — Allocation record (key/workflow/method/gpu-seconds/allocated cost) [jwt]
- GET /v1/airus/gpu-finops/allocations — Allocation ledger [jwt]
- POST /v1/airus/gpu-finops/chargeback — Department Chargeback (ПРАВИЛО: требует allocation coverage >= порога, иначе 400 showback only) [jwt]
- POST /v1/airus/gpu-finops/waste-findings — GPU waste finding [jwt]
- GET /v1/airus/gpu-finops/waste-findings — Waste findings [jwt]
- POST /v1/airus/gpu-finops/commitments — Capacity commitment — decision DERIVED (нельзя self-assert approved) [jwt]
- GET /v1/airus/gpu-finops/commitments — Commitments [jwt]
- POST /v1/airus/gpu-finops/savings-actions — Savings Action (action + savings + latency/quality/sla risk + approval_required) [jwt]
- POST /v1/airus/gpu-finops/savings-actions/:id/status — Статус savings (applied рискованного требует approved) [jwt]
- GET /v1/airus/gpu-finops/savings-actions — Savings actions [jwt]
- GET /v1/airus/gpu-finops/room — GPU FinOps Room: spend, allocation coverage, waste, commitments at risk, potential savings, next action [jwt]
- GET /v1/airus/gpu-finops/metrics — monthly spend, productive_spend_ratio, allocation coverage, confirmed waste [jwt]

## marginops
- GET /v1/airus/margins/reference — MarginOps reference: FX modes, billable events, anomaly types, rules (floor from policy, block negative margin) [public]
- POST /v1/airus/margins/fx-apply — FX: USD→RUB по курсу ЦБ + буфер (для гарантированной enterprise-цены) [public]
- GET /v1/airus/margins/billable-matrix — Billable Event Matrix: кто платит (клиент/upstream) по событию (retry/cancel/filter/fallback) [public]
- GET /v1/airus/margins/billable/:event — Billable правило события [public]
- POST /v1/airus/margins/upstream-cost — Стоимость запроса по pricing version (input/output/cache/reasoning раздельно) [public]
- POST /v1/airus/margins/economics/preview — Request economics: contribution margin DERIVED (revenue − upstream − partner − platform − reserve) [public]
- POST /v1/airus/margins/fallback/check — Margin-aware fallback: cost delta в лимите И маржа >= floor (или SLA reserve) → allow/block [public]
- POST /v1/airus/margins/discount/check — Discount Guardrail: скидка ниже floor требует commit/min-spend/approval [public]
- POST /v1/airus/margins/price-lock/reserve — Price Lock Reserve: volatility+FX+provider+SLA+financing → reserve% + locked price [public]
- POST /v1/airus/margins/anomalies/detect — Margin Anomaly: negative margin / fallback spike / FX / output ratio / pricing mismatch → alerts [public]
- POST /v1/airus/margins/gross-margin-receipt — Gross Margin Receipt: revenue − fully-loaded cost → contribution margin + rate [public]
- POST /v1/airus/margins/pricing-versions — Pricing Version Registry (provider/model/currency/input/output/effective_at/VAT) [jwt]
- GET /v1/airus/margins/pricing-versions — Pricing versions [jwt]
- POST /v1/airus/margins/policies/:scope/:key — Margin Policy (scope customer/route/workflow): min gross/contribution margin, incident override [jwt]
- GET /v1/airus/margins/policies — Margin policies [jwt]
- POST /v1/airus/margins/route-check — Margin route check (ПРАВИЛО: floor из ЗАПИСАННОЙ policy; отрицательная маржа → block) [jwt]
- POST /v1/airus/margins/economics — Record request economics (contribution margin DERIVED) [jwt]
- GET /v1/airus/margins/economics — Request economics ledger [jwt]
- POST /v1/airus/margins/price-locks — Price Lock (valid_until/min commit/fx corridor/reserve/routes) [jwt]
- GET /v1/airus/margins/price-locks — Price locks [jwt]
- POST /v1/airus/margins/alerts — Margin alert [jwt]
- GET /v1/airus/margins/alerts — Margin alerts [jwt]
- GET /v1/airus/margins/room — Margin Room: revenue, contribution margin, negative-margin requests, policies, next action [jwt]
- GET /v1/airus/margins/metrics — gross margin rate, contribution margin, negative-margin requests, open alerts [jwt]

## packagingops
- GET /v1/airus/packaging/reference — PricingOps reference: pricing principles, packaging tiers (гипотеза), value metrics, capability packs, rules (entitlement из подписки, quote DERIVED, price-lock) [public]
- GET /v1/airus/packaging/tiers — Packaging tiers (Sandbox/Business/Enterprise/On-prem) — продуктовая гипотеза упаковки (состав/fences), НЕ прайс: платформенная цена = null, из canonical price book (/v1/airus/price-book). #23 убрал дубль-число [public]
- GET /v1/airus/packaging/tiers/:tier — Tier: platform fee, included, entitlements, fences [public]
- GET /v1/airus/packaging/tiers/:tier/entitlements — Entitlements и fences тира (реестр) [public]
- GET /v1/airus/packaging/value-metrics — Value Metric Registry: метрика ценности на каждый продукт (tokens/org-month/successful run/reserved throughput/...) [public]
- GET /v1/airus/packaging/capability-packs — Capability Packs: Resilience/Governance/Trust/Sovereignty/FinOps + monthly fee [public]
- GET /v1/airus/packaging/capability-packs/:pack — Capability pack: includes + monthly fee [public]
- POST /v1/airus/packaging/quote/preview — Contract quote: expected + worst-case total DERIVED из компонентов (platform_fee + usage + packs) [public]
- POST /v1/airus/packaging/calculator — Public Pricing Calculator: workflow → model usage → expected + worst-case [public]
- POST /v1/airus/packaging/overage/check — Overage Corridor: ≤110% contract / 110–125% corridor / >125% upgrade-or-burst [public]
- POST /v1/airus/packaging/rollover/compute — Rollover: carried = min(unused, annual × rollover%) — ограниченный перенос [public]
- POST /v1/airus/packaging/commitment/forecast — Commitment Autopilot: P50/P80/P95 из выборки usage → рекомендованный commit + underuse risk [public]
- POST /v1/airus/packaging/transparency-receipt — Pricing Transparency Receipt (contract-level, sha256): platform fee + usage + add-ons + overage + price version [public]
- POST /v1/airus/packaging/subscription — Выбрать packaging tier (platform fee из реестра) [jwt]
- GET /v1/airus/packaging/subscription — Текущая подписка тира [jwt]
- GET /v1/airus/packaging/entitlements — Entitlements ВЫВОДЯТСЯ из записанного tier подписки (не из запроса) [jwt]
- POST /v1/airus/packaging/entitlements/check — Проверка фичи: grant DERIVED из tier подписки (enforcement_class descriptive, hot-path gating = roadmap) [jwt]
- POST /v1/airus/packaging/quotes — Записать contract quote (expected/worst-case DERIVED) [jwt]
- GET /v1/airus/packaging/quotes — История quotes тенанта [jwt]
- POST /v1/airus/packaging/add-ons/:pack — Активировать Capability Pack (fee из реестра) [jwt]
- GET /v1/airus/packaging/add-ons — Активные add-ons + monthly total [jwt]
- POST /v1/airus/packaging/commitments — Portable annual commit: переносимый между моделями/маршрутами/API/local, rollover + overage corridor [jwt]
- GET /v1/airus/packaging/commitments — Список portable commitments [jwt]
- GET /v1/airus/packaging/commitments/:id/status — Статус commit ВЫВОДИТСЯ из записанных RequestEconomics: consumed, forecast, overage zone, rollover [jwt]
- POST /v1/airus/packaging/experiments — Price Experiment: variant A/B, primary + guardrail metric, price version [jwt]
- GET /v1/airus/packaging/experiments — Список price experiments [jwt]
- POST /v1/airus/packaging/experiments/:key/assign — Детерминированное назначение варианта; цена участнику ЗАФИКСИРОВАНА (идемпотентно) [jwt]
- POST /v1/airus/packaging/experiments/:key/reprice — Reprice — ЗАПРЕЩЁН для активного эксперимента с назначениями (price-lock, 409) [jwt]
- POST /v1/airus/packaging/experiments/:key/conclude — Завершить эксперимент (снимает price-lock для reprice) [jwt]
- POST /v1/airus/packaging/receipt — Выдать contract-level transparency receipt (add-ons выводятся из активных, если не переданы) [jwt]
- GET /v1/airus/packaging/metrics — tier, quotes, commitments, active add-ons, experiments, assignments [jwt]

## quotetocashops
- GET /v1/airus/quote-to-cash/reference — QuoteToCash reference: payment models, wallet priority, tax policies, rules (invoice DERIVED, revenue из delivery, money boundary) [public]
- POST /v1/airus/quote-to-cash/contract/compile — Billing Contract as Code: quote → исполняемые правила + sha256 (никаких условий только в PDF) [public]
- POST /v1/airus/quote-to-cash/wallet/allocate — Multi-wallet allocation КАЛЬКУЛЯТОР: приоритет списания (credits раньше cash), без мутации баланса [public]
- POST /v1/airus/quote-to-cash/tax/apply — Tax Policy Registry (versioned): НДС по дате (22% с 2026), УПД 5.03; illustrative, требует утверждения бухгалтерией [public]
- POST /v1/airus/quote-to-cash/invoice/preview-calc — Invoice preview калькулятор: usage lines + adjustments + fee + НДС → total (what-if) [public]
- POST /v1/airus/quote-to-cash/credit/decide — Credit & Continuity: exposure vs limit + overdue → continuity stage 0-4, production status [public]
- POST /v1/airus/quote-to-cash/payment/match-score — Payment match confidence (детерминированно): amount + payer + purpose → matched/review/unmatched [public]
- POST /v1/airus/quote-to-cash/deferred-revenue/split — Deferred revenue (ПБУ 9/99 illustrative): предоплата = обязательство, выручка из service_delivered [public]
- POST /v1/airus/quote-to-cash/collections/timeline — Collections Autopilot timeline: T−7..T+15 (reminder → escalation → continuity restriction) [public]
- POST /v1/airus/quote-to-cash/assurance-receipt — Billing Assurance Receipt (period-level, sha256): usage events, dupes, invoice total, preview accepted, payment [public]
- POST /v1/airus/quote-to-cash/contracts/:key — Записать billing contract (компиляция quote → контракт + hash) [jwt]
- GET /v1/airus/quote-to-cash/contracts — Список billing contracts [jwt]
- GET /v1/airus/quote-to-cash/contracts/:key — Billing contract по ключу [jwt]
- POST /v1/airus/quote-to-cash/credit-profile — Credit profile: credit limit, soft limit, grace period, risk tier [jwt]
- GET /v1/airus/quote-to-cash/credit/status — ПРАВИЛО: exposure и continuity stage ВЫВОДЯТСЯ из неоплаченных previews + overdue [jwt]
- POST /v1/airus/quote-to-cash/balance-buckets — Credit-грант (promo/partner/SLA/commit) — НЕ денежный баланс (cash = LedgerService) [jwt]
- GET /v1/airus/quote-to-cash/balance-buckets — Список credit-грантов [jwt]
- POST /v1/airus/quote-to-cash/invoices/preview — ПРАВИЛО: invoice preview ВЫВОДИТСЯ из записанных UsageEvent + billingops adjustments + контракт + НДС (authoritative=false) [jwt]
- GET /v1/airus/quote-to-cash/invoices/previews — История invoice previews [jwt]
- POST /v1/airus/quote-to-cash/invoices/:id/accept — Принять invoice preview (до dispute deadline) [jwt]
- POST /v1/airus/quote-to-cash/payments — Записать банковский платёж + авто-match к preview (confidence DERIVED) [jwt]
- GET /v1/airus/quote-to-cash/payments — Список payment matches [jwt]
- POST /v1/airus/quote-to-cash/revenue/recognize — Deferred revenue entry: service_delivered из UsageEvent если не передан; предоплата = обязательство [jwt]
- GET /v1/airus/quote-to-cash/revenue — Deferred revenue ledger + totals (deferred/recognized/receivable) [jwt]
- GET /v1/airus/quote-to-cash/assurance/:period — Period-level Billing Assurance Receipt ВЫВОДИТСЯ из записанных usage/adjustments/preview/payments [jwt]
- GET /v1/airus/quote-to-cash/metrics — contracts, previews, payment matches, deferred entries, exposure, continuity stage [jwt]

## fraudcontrolops
- GET /v1/airus/fraud-control/reference — Fraud Control Plane reference: risk components/bands, KYB checks, promo policy, rules (score DERIVED из KeyBaseline) [public]
- POST /v1/airus/fraud-control/risk/score — Request Risk Score калькулятор: 8 взвешенных компонентов → 0-100 → allow/monitor/throttle/quarantine + max exposure (what-if) [public]
- POST /v1/airus/fraud-control/velocity/check — Adaptive Spend Velocity: minute/hour/day/expensive окна → violated + action [public]
- POST /v1/airus/fraud-control/velocity/adaptive — Динамический лимит: baseline + release + сезонность − резерв риска [public]
- POST /v1/airus/fraud-control/firewall/check — Economic Request Firewall (Denial of Wallet): max context/output/reasoning/images/tools/retries/batch/cost [public]
- POST /v1/airus/fraud-control/entity/link-score — Entity link confidence по общим атрибутам (device/card/payer/inn/phone весомее) [public]
- POST /v1/airus/fraud-control/referral/self-check — Self-referral: связанные сущности → payout заблокирован [public]
- POST /v1/airus/fraud-control/kyb/assess — KYB risk: скоринг переданных проверок → status/risk tier/action (реальный ЕГРЮЛ = roadmap) [public]
- POST /v1/airus/fraud-control/credit/staged — Staged postpaid limit: 50k→200k→500k по закрытым периодам; high-risk KYB → prepayment only [public]
- POST /v1/airus/fraud-control/secret/decision — Leaked secret: confidence≥0.9 → revoke_and_rotate, overlap 0s (реальное сканирование = roadmap) [public]
- POST /v1/airus/fraud-control/evidence-receipt — Fraud Evidence Receipt (case-level, sha256): suspected exposure, prevented loss, legit preserved % [public]
- POST /v1/airus/fraud-control/agent-loop/check — Agent Loop Circuit Breaker (#26): within-run детектор зацикленного агента (repeat-tool/no-progress/error-streak/spend-accel — которых нет в per-request firewall/AgentsService step-limiter) → РЕКОМЕНДАЦИЯ CONTINUE/WARN/BREAK; hot-path enforcement через AgentsService max_chain_steps + подключение loop-сигналов = roadmap [public]
- POST /v1/airus/fraud-control/risk/evaluate — ПРАВИЛО: security-компоненты ВЫВОДЯТСЯ из ЗАПИСАННОГО KeyBaseline + фактов запроса (caller их НЕ передаёт) [jwt]
- GET /v1/airus/fraud-control/risk/decisions — История risk decisions [jwt]
- POST /v1/airus/fraud-control/velocity-policies/:key — Multi-window spend velocity policy для ключа [jwt]
- GET /v1/airus/fraud-control/velocity-policies — Список velocity policies [jwt]
- POST /v1/airus/fraud-control/entity-links — Записать entity link (confidence ВЫВОДИТСЯ из общих атрибутов) [jwt]
- GET /v1/airus/fraud-control/entity-links — Entity graph + high-relevance count [jwt]
- POST /v1/airus/fraud-control/customer-risk/:ref — Customer KYB + staged credit: max postpaid exposure ВЫВОДИТСЯ из KYB + периодов [jwt]
- GET /v1/airus/fraud-control/customer-risk/:ref — Customer risk profile [jwt]
- POST /v1/airus/fraud-control/secret-findings — Leaked secret finding → триггер ротации (реальный отзыв — antifraudops/api-keys) [jwt]
- GET /v1/airus/fraud-control/secret-findings — Список secret findings + confirmed count [jwt]
- GET /v1/airus/fraud-control/metrics — risk decisions, quarantined, velocity policies, entity links, customer risk, secret findings [jwt]

## identityops
- GET /v1/airus/identity/reference — IdentityOps reference: 7 типов principal, scope categories, rules (token exchange = policy-matching не auth в v0) [public]
- POST /v1/airus/identity/subject/match — Subject pattern match (сегментами, '*' wildcard) — project:42:branch:main [public]
- POST /v1/airus/identity/scope/compile — Scope compiler (least privilege): intent → scopes, опасные scopes только явно [public]
- POST /v1/airus/identity/federation/evaluate — Federation policy eval (what-if): issuer/audience/subject match; claims caller-asserted (не auth в v0) [public]
- POST /v1/airus/identity/budget/check — Identity-bound budget: model allowlist + per-hour + max-request (калькулятор, не баланс) [public]
- POST /v1/airus/identity/privileged/decide — Privileged session: требует reason + second approver + step-up MFA → TTL 5-60 мин [public]
- POST /v1/airus/identity/assurance-receipt — Identity Assurance Receipt (sha256): human→agent→workload→tool + delegation_valid + decision [public]
- POST /v1/airus/identity/principals/:key — Principal (human/service/workload/agent/tool/partner/break_glass); service account требует owner [jwt]
- GET /v1/airus/identity/principals — Список principals [jwt]
- GET /v1/airus/identity/principals/:key — Principal по ключу [jwt]
- POST /v1/airus/identity/principals/:key/disable — SCIM disable: гасит principal + identity_tokens (каскад в auth/api-keys = roadmap) [jwt]
- POST /v1/airus/identity/federations/:key — OIDC workload federation: issuer, audience, allowed subject pattern, TTL [jwt]
- GET /v1/airus/identity/federations — Список federations [jwt]
- POST /v1/airus/identity/token/exchange — ПРАВИЛО: claims проверяются против ЗАПИСАННОЙ federation policy → short-lived token (v0 policy-matching, не honored на hot-path) [jwt]
- GET /v1/airus/identity/tokens — Список выпущенных short-lived tokens [jwt]
- POST /v1/airus/identity/delegations — Delegation grant subject→actor + scopes + expiry + max exposure [jwt]
- GET /v1/airus/identity/delegations — Список delegation grants [jwt]
- POST /v1/airus/identity/delegation/tool-token — ПРАВИЛО: tool token только при существующем grant subject→actor→scope → scoped short-lived token [jwt]
- GET /v1/airus/identity/orphans — Orphan detector: ВЫВОДИТ principals без owner / stale / review overdue [jwt]
- POST /v1/airus/identity/privileged-sessions — Privileged session (записывается при reason+approver+MFA) [jwt]
- GET /v1/airus/identity/privileged-sessions — Список privileged sessions [jwt]
- GET /v1/airus/identity/metrics — principals, service accounts, federations, tokens, delegations, orphans [jwt]

## authorizationops
- GET /v1/airus/authorization/reference — AuthorizationOps reference: action registry, decision order (deny-wins + fail-safe), rules (decision из stored policies, context caller-asserted) [public]
- POST /v1/airus/authorization/evaluate — PDP what-if: policies + request → allow/deny/allow_with_obligations/require_approval; default-deny, explicit-deny-wins, fail-safe missing attr [public]
- POST /v1/airus/authorization/task-envelope/check — Task envelope: action/resource/cost/external-write в пределах grant агента [public]
- POST /v1/airus/authorization/approval/check — Approval gate: правило по action + условию (напр. deal.value > 1M → sales_manager) [public]
- POST /v1/airus/authorization/simulate — Policy simulation: would_deny/approval/allow % над набором запросов (shadow before rollout) [public]
- POST /v1/airus/authorization/receipt — Authorization Decision Receipt (sha256): principal/action/resource/decision/determining policy/reason [public]
- POST /v1/airus/authorization/policies/:key — Authorization policy (crown jewel, owner/admin/security): effect, actions, conditions, obligations, status draft/shadow/production [jwt]
- GET /v1/airus/authorization/policies — Список authorization policies [jwt]
- POST /v1/airus/authorization/authorize — ПРАВИЛО: решение ВЫЧИСЛЯЕТСЯ из ЗАПИСАННЫХ production-policies (shadow НЕ enforce); default-deny + explicit-deny-wins + fail-safe [jwt]
- GET /v1/airus/authorization/decisions — История authorization decisions (explainable) [jwt]
- POST /v1/airus/authorization/simulate-stored — Shadow: симуляция STORED policies (production+shadow) над запросами перед rollout [jwt]
- POST /v1/airus/authorization/relationships — ReBAC relationship: subject relation resource (напр. partner operator project) [jwt]
- GET /v1/airus/authorization/relationships — Список relationships [jwt]
- POST /v1/airus/authorization/approval-rules/:key — Approval requirement: action + condition → approver role + TTL [jwt]
- GET /v1/airus/authorization/approval-rules — Список approval requirements [jwt]
- POST /v1/airus/authorization/task-grants/:key — Task grant агенту: allowed actions/resources, max cost, external writes, expiry [jwt]
- GET /v1/airus/authorization/task-grants — Список task grants [jwt]
- POST /v1/airus/authorization/task-grants/:key/check — ПРАВИЛО: запрос проверяется против ЗАПИСАННОГО task grant (в пределах envelope) [jwt]
- GET /v1/airus/authorization/metrics — policies, production/shadow, relationships, approval rules, task grants, decisions, deny rate [jwt]

## dataaccessops
- GET /v1/airus/data-access/reference — Secure RAG reference: classifications, revocation SLA, rules (trim из stored, AND-логика, existence hiding) [public]
- POST /v1/airus/data-access/principal-set/resolve — Principal set: subject+groups+task grants → effective principals + compressed set id [public]
- POST /v1/airus/data-access/trim — Pre-retrieval security trimming (what-if): source_acl AND data_class AND route policy; principal view скрывает denied [public]
- POST /v1/airus/data-access/field-mask/decision — Field masking: поля вне allowed classes маскируются (сумма/ПДн/реквизиты) [public]
- POST /v1/airus/data-access/cache/permission-hash — ACL-bound cache: permission_hash из tenant+principal set+policy version+data classes+source versions [public]
- POST /v1/airus/data-access/cache/validity — Cache validity: ACL изменился → invalidate [public]
- POST /v1/airus/data-access/revocation/propagation — Revocation propagation: source_detected → enforced → SLA (standard 15м/business 5м/enterprise 60с/critical 10с) [public]
- POST /v1/airus/data-access/lineage/build — Context Lineage: answer → chunks → source objects → permission decisions → masked fields [public]
- POST /v1/airus/data-access/receipt — Data Access Receipt (sha256): authorized/denied sources, chunks in context, masked fields, COMPLIANT/LEAK [public]
- POST /v1/airus/data-access/data-objects/:key — Source ACL Mirror: data object (source system, version, classification, ПДн, deletion state) [jwt]
- GET /v1/airus/data-access/data-objects — Список data objects + acl coverage [jwt]
- POST /v1/airus/data-access/data-objects/:key/aces — ACE: principal + effect allow/deny + inherited + valid_until [jwt]
- GET /v1/airus/data-access/data-objects/:key/aces — ACL объекта [jwt]
- POST /v1/airus/data-access/data-objects/:key/delete — Deletion propagation (v0): исключить из retrieval; удаление embeddings/cache/memory = roadmap [jwt]
- POST /v1/airus/data-access/chunks/:key — Secure chunk: source range, permission hash, classification, ПДн [jwt]
- GET /v1/airus/data-access/chunks — Список secure chunks [jwt]
- POST /v1/airus/data-access/principal-sets/:key — Data principal set: subject+groups → effective principals + allowed classes [jwt]
- GET /v1/airus/data-access/principal-sets — Список principal sets [jwt]
- POST /v1/airus/data-access/retrieval/authorize — ПРАВИЛО: pre-retrieval trimming из ЗАПИСАННЫХ objects+ACE+principal-set; existence hiding (principal view скрывает denied) [jwt]
- GET /v1/airus/data-access/retrieval/authorizations — История retrieval authorizations [jwt]
- POST /v1/airus/data-access/revocations — Revocation event + propagation SLA [jwt]
- GET /v1/airus/data-access/revocations — Revocations + SLA met rate [jwt]
- GET /v1/airus/data-access/metrics — data objects, acl coverage, quarantined, chunks, personal data, revocation SLA [jwt]

## datalifecycleops
- GET /v1/airus/data-lifecycle/reference — Lifecycle reference: purposes, artifact types, rules (fail-safe RETAIN, holds win, restore firewall, training off) [public]
- POST /v1/airus/data-lifecycle/purpose-firewall/check — Purpose firewall: training/fine-tuning по умолчанию ЗАПРЕЩЁН; purpose drift → new basis [public]
- POST /v1/airus/data-lifecycle/retention/expired — Retention: expired по age vs retention_days (retention<0 = хранить бессрочно) [public]
- POST /v1/airus/data-lifecycle/erasure/plan — Erasure plan (what-if): allowlist подтверждённо-удаляемых; mandatory/hold/uncertain → RETAIN (fail-safe) [public]
- POST /v1/airus/data-lifecycle/tombstone/create — Backup tombstone (sha256): applyAfterRestore для предотвращения data resurrection [public]
- POST /v1/airus/data-lifecycle/restore/firewall — Restore firewall (what-if): blocked пока все tombstones не replayed [public]
- POST /v1/airus/data-lifecycle/minimal-evidence — Minimal Evidence: payload удалён, content_hash + event + amount сохранены (восстановить нельзя) [public]
- POST /v1/airus/data-lifecycle/provider-retention/check — Provider policy: sensitive route если retention<=0 ∧ no training ∧ deletion API ∧ RU [public]
- POST /v1/airus/data-lifecycle/receipt — Data Lifecycle Receipt (sha256): attests ЧТО СДЕЛАЛ AIRUS (marked/tombstoned/notified), не destruction [public]
- POST /v1/airus/data-lifecycle/artifacts/:key — Data artifact (registry + lineage): type, source, purpose (обязателен), legal basis [jwt]
- GET /v1/airus/data-lifecycle/artifacts — Список data artifacts [jwt]
- POST /v1/airus/data-lifecycle/retention-policies/:key — Retention policy: TTL по artifact type + on_expiry (purge payload keep evidence) [jwt]
- GET /v1/airus/data-lifecycle/retention-policies — Список retention policies [jwt]
- POST /v1/airus/data-lifecycle/purpose-grants/:key — Purpose grant: data scope + allowed purpose + training_allowed (default false) [jwt]
- GET /v1/airus/data-lifecycle/purpose-grants — Список purpose grants [jwt]
- POST /v1/airus/data-lifecycle/purpose/authorize — Purpose firewall из ЗАПИСАННОГО grant: training/analytics по факту разрешения [jwt]
- POST /v1/airus/data-lifecycle/legal-holds/:key — Legal hold: scope + reason + approver + review date; блокирует erasure [jwt]
- GET /v1/airus/data-lifecycle/legal-holds — Список legal holds [jwt]
- POST /v1/airus/data-lifecycle/provider-retentions/:key — Provider retention policy + sensitive-route allow [jwt]
- GET /v1/airus/data-lifecycle/provider-retentions — Список provider retentions [jwt]
- POST /v1/airus/data-lifecycle/erasure/execute — ПРАВИЛО: orchestration по ЗАПИСАННЫМ artifacts+lineage+holds; fail-safe RETAIN; holds/mandatory win [jwt]
- GET /v1/airus/data-lifecycle/erasure/jobs — История erasure jobs [jwt]
- GET /v1/airus/data-lifecycle/tombstones — Backup tombstones + replayed статус [jwt]
- POST /v1/airus/data-lifecycle/restore/validate — ПРАВИЛО: restore firewall из ЗАПИСАННЫХ tombstones — blocked пока не replayed [jwt]
- POST /v1/airus/data-lifecycle/restore/replay — Replay tombstones → restore разблокирован [jwt]
- GET /v1/airus/data-lifecycle/metrics — artifacts, coverage, marked, holds, erasure jobs, tombstones, pending [jwt]

## dataprocessorops
- GET /v1/airus/data-processors/reference — Reference: party roles, eligibility classes, risk factors, upstream SLA, rules (fail-closed, single-source retention, notification≠authorization) [public]
- POST /v1/airus/data-processors/risk-score — Provider Data Risk Score (what-if): 8 взвешенных факторов → low/medium/high/critical [public]
- POST /v1/airus/data-processors/cross-border/decide — Cross-border decision (what-if, fail-closed): страна нет в policy → deny; notification ≠ authorization [public]
- POST /v1/airus/data-processors/route/evaluate — Route gate (what-if, AND fail-closed): DPA ∧ party allowlist ∧ country ∧ approval ∧ retention ∧ training [public]
- POST /v1/airus/data-processors/dpa/compile — DPA-as-Code compiler: договорные термины → runtime policy + policy_hash (sha256) [public]
- POST /v1/airus/data-processors/policy-change/detect — Policy Change Monitor (what-if): material change → suspend sensitive routes + legal review [public]
- POST /v1/airus/data-processors/incident/cascade — Incident Cascade (what-if): upstream delay vs SLA + РКН дедлайн 24ч оператора [public]
- POST /v1/airus/data-processors/assurance-receipt — Provider Data Assurance Receipt (sha256): attests processing route, role_disclaimer, authoritative=false [public]
- POST /v1/airus/data-processors/parties/:key — Processing party (legal role graph): role declared, services, countries; retention/training НЕ здесь (single-source Ф69) [jwt]
- GET /v1/airus/data-processors/parties — Список processing parties [jwt]
- POST /v1/airus/data-processors/dpa-contracts/:key — DPA contract: allowed processors/countries, max retention, training, policy_hash [jwt]
- GET /v1/airus/data-processors/dpa-contracts — Список DPA contracts [jwt]
- POST /v1/airus/data-processors/subprocessor-approvals/:key — Subprocessor approval (customer allowlist): party + approved routes + valid_until [jwt]
- GET /v1/airus/data-processors/subprocessor-approvals — Список subprocessor approvals [jwt]
- POST /v1/airus/data-processors/route/authorize — ПРАВИЛО: routing-решение из ЗАПИСАННЫХ DPA+party+approval+Ф69 ProviderRetention; fail-closed; fallback per-party (не наследует approval) [jwt]
- GET /v1/airus/data-processors/cross-border/decisions — История cross-border/route решений [jwt]
- POST /v1/airus/data-processors/provider-policy-versions — Provider policy version snapshot: material change detection + routes suspended [jwt]
- GET /v1/airus/data-processors/provider-policy-versions — История provider policy versions [jwt]
- POST /v1/airus/data-processors/incident-notices/:key — Processor incident notice: upstream delay vs SLA + regulator deadline [jwt]
- GET /v1/airus/data-processors/incident-notices — Список processor incident notices [jwt]
- GET /v1/airus/data-processors/metrics — parties, approved, active DPAs, approvals, route decisions, blocked, policy versions, material changes, incidents [jwt]

## enterpriseprocurementops
- GET /v1/airus/buyer-desk/reference — Reference: buyer profiles, evidence states, readiness factors, clause library, rules (derived-not-gameable, export-blocked, fail-closed), no-duplication map [public]
- POST /v1/airus/buyer-desk/readiness-score — Procurement Readiness Score (what-if): 8 взвешенных измерений + fail-closed gates → not_ready/conditional/procurement_ready/production_ready [public]
- POST /v1/airus/buyer-desk/evidence-freshness — Evidence Freshness (what-if): state вычисляется из дат → verified/expiring/stale/contradicted/missing [public]
- POST /v1/airus/buyer-desk/questionnaire-match — Questionnaire Autopilot (what-if): match/dedup по нормализованному intent; export непроверенного ЗАБЛОКИРОВАН [public]
- POST /v1/airus/buyer-desk/clause-classify — Contract Clause Library (what-if): acceptable/negotiable/requires-pricing/requires-architecture/prohibited + fallback language (illustrative, юрист утверждает) [public]
- POST /v1/airus/buyer-desk/contract-runtime — Contract-to-Runtime Validator (what-if, AND fail-closed): требования договора vs product config → match/mismatch [public]
- POST /v1/airus/buyer-desk/promise-check — Customer Promise check (what-if): enforced только при owner ∧ implementation ∧ contract clause, иначе unbacked [public]
- POST /v1/airus/buyer-desk/red-flag — Red Flag Deal Desk (what-if): триггеры эскалации (unlimited liability, negative margin, SLA above capability, ...) [public]
- POST /v1/airus/buyer-desk/deals/:key — Procurement Deal: buyer profile, stage, target date, owner, link на EnterpriseAccount (single-source deal/pilot) [jwt]
- GET /v1/airus/buyer-desk/deals — Список procurement deals + last readiness score/decision [jwt]
- POST /v1/airus/buyer-desk/canonical-answers/:key — Canonical Answer Registry: intent + answer + scope + evidence link + verified/review dates [jwt]
- GET /v1/airus/buyer-desk/canonical-answers — Список canonical answers [jwt]
- POST /v1/airus/buyer-desk/evidence/:key — Procurement Evidence: type, scope, visibility, verified/expires → freshness state вычисляется [jwt]
- GET /v1/airus/buyer-desk/evidence — Список evidence + freshness state (verified/expiring/stale/contradicted) [jwt]
- POST /v1/airus/buyer-desk/contract-clauses/:key — Contract Clause record: decision выводится из clause library + fallback language [jwt]
- GET /v1/airus/buyer-desk/contract-clauses — Список contract clauses с решениями [jwt]
- POST /v1/airus/buyer-desk/promises/:key — Customer Promise Registry: status выводится (enforced/unbacked) из owner+implementation+contract clause [jwt]
- GET /v1/airus/buyer-desk/promises — Список customer promises + статус backing [jwt]
- POST /v1/airus/buyer-desk/questionnaires/:key — Questionnaire import + autopilot match из ЗАПИСАННЫХ canonical answers + evidence freshness; export непроверенного заблокирован [jwt]
- GET /v1/airus/buyer-desk/questionnaires — Список questionnaire-прогонов (completion, export_allowed) [jwt]
- POST /v1/airus/buyer-desk/deals/:key/readiness — ПРАВИЛО: readiness ВЫЧИСЛЯЕТСЯ из записанного состояния + join enterpriseops (pilot/requirements single-source); hard-gates не gameable; DERIVED receipt (sha256) [jwt]
- GET /v1/airus/buyer-desk/metrics — deals, production_ready, blocked, evidence stale/expiring, questionnaires, unbacked promises, prohibited clauses [jwt]

## pilottoproductionops
- GET /v1/airus/production-launch/reference — Reference: stages, owner roles, rollback components, health factors, rules (derived, fail-closed, full-rollback, value-required), no-duplication map [public]
- POST /v1/airus/production-launch/stage-gate — Stage gate (what-if): переход demo→…→certified, пропуск стадий запрещён, блокеры по условиям [public]
- POST /v1/airus/production-launch/acceptance/evaluate — Production Acceptance Contract (what-if): quality/availability/p95/cost/adoption/rollback floors, AND fail-closed [public]
- POST /v1/airus/production-launch/shadow/evaluate — Shadow traffic evaluation (what-if): min cases, schema match rate, quality delta, budget cap [public]
- POST /v1/airus/production-launch/capacity/preflight — Quota & Capacity Preflight (what-if): primary И fallback обязаны покрыть пик с headroom; неизвестная квота = не проверено [public]
- POST /v1/airus/production-launch/canary/evaluate — Business-aware canary (what-if): guardrails качество/стоимость/эскалации; незамеренный guardrail = abort [public]
- POST /v1/airus/production-launch/rollback/evaluate — Full rollback drill (what-if): snapshot из 6 компонентов (model/prompt/route/tools/budget/logging) + drill в срок [public]
- POST /v1/airus/production-launch/value/verify — Value verification (what-if): baseline vs production, improvement %, направление метрики [public]
- POST /v1/airus/production-launch/health-score — Production Health Score: 7 факторов (quality/reliability/adoption/value/cost/security/ops), не только uptime [public]
- POST /v1/airus/production-launch/traffic-ladder — Risk-Based Traffic Ladder (#28, reuse C0-C4): ступени % трафика по классу риска; C3/C4 — стадии без авто-split; ненадёжный rollback → advance заблокирован. Реальный traffic split hot-path = roadmap [public]
- POST /v1/airus/production-launch/side-effect/classify — Shadow Side-Effect Firewall (#28): КЛАССИФИКАТОР режима tool-действия (READ_ALLOWED/WRITE_SIMULATED/EXTERNAL_BLOCKED). НЕ блокирует — реальный перехват в shadow hot-path = roadmap (authoritative:false) [public]
- POST /v1/airus/production-launch/scope-firewall — Pilot Scope Firewall (#28): изменение scope → пересчёт cost/timeline/baseline/acceptance + ре-апрув (нет бесплатной бесконечной доработки) [public]
- POST /v1/airus/production-launch/decision-board — Decision Board (#28): DERIVES из записанных гейтов (не пересчитывает) → LAUNCH/EXTEND_ONCE/STOP + дата. value failed/критичный гейт/нет гипотезы → STOP [public]
- POST /v1/airus/production-launch/adoption-funnel — Adoption Funnel (#28): rates из declared counts (eligible→first-use→accepted→repeat→bypass→abandoned); first_value = accepted/eligible (usage ≠ adoption). Живая телеметрия из клиентских систем = roadmap [public]
- POST /v1/airus/production-launch/workflows/:key — Production Workflow: owners (business+technical обязательны), baseline, funding, links на EnterpriseAccount/MigrationProject [jwt]
- GET /v1/airus/production-launch/workflows — Список production workflows + stage + last decision [jwt]
- POST /v1/airus/production-launch/workflows/:key/acceptance — Acceptance contract workflow: floors + observed → derived passed [jwt]
- POST /v1/airus/production-launch/shadow-runs/:key — Записать shadow-прогон → derived pass/fail (schema match, quality delta, budget) [jwt]
- GET /v1/airus/production-launch/shadow-runs — Список shadow-прогонов [jwt]
- POST /v1/airus/production-launch/capacity-preflights/:key — Записать capacity preflight → derived pass/blockers (fail-closed на неизвестных квотах) [jwt]
- POST /v1/airus/production-launch/canary-runs/:key — Записать canary + guardrails + observed → derived proceed/abort (авто-abort по любому порогу) [jwt]
- GET /v1/airus/production-launch/canary-runs — Список canary-прогонов + abort reasons [jwt]
- POST /v1/airus/production-launch/rollback-drills/:key — Записать rollback drill: полный snapshot (6 компонентов) + время → derived tested [jwt]
- POST /v1/airus/production-launch/value-verifications/:key — Записать верификацию ценности: baseline vs production → improvement %, verified_by [jwt]
- POST /v1/airus/production-launch/workflows/:key/stage — ПРАВИЛО: переход стадии server-enforced из ДЕРИВНУТОГО состояния + join pilot/compatibility (не gameable) [jwt]
- POST /v1/airus/production-launch/workflows/:key/certify — ПРАВИЛО: certification DERIVED из записанных прогонов (shadow/canary/drill/value) + join'ов; Production Readiness Receipt (sha256) [jwt]
- GET /v1/airus/production-launch/metrics — workflows by stage, certified, shadow/canary/drill/value counts + pass rates [jwt]

## adoptionops
- GET /v1/airus/adoption/reference — Reference: acceptance signals, override reasons, value types, manager actions, repeat criterion, health weights, hard rules (login≠adoption, declared, cannot_certify на пустом eligible, fail-closed, privacy), roadmap [public]
- POST /v1/airus/adoption/first-accepted/what-if — First Accepted Outcome (what-if): accepted/eligible и accepted/trained; пустой eligible → CANNOT_CERTIFY (не 0%/100%). DECLARED из записанных событий (authoritative:false); live completion CRM/1С/n8n = roadmap [public]
- POST /v1/airus/adoption/override/what-if — Override taxonomy (what-if): распределение причин правок (missing_source/wrong_format/fact_error/…) + unclassified_rate — почему правят, не только сколько [public]
- POST /v1/airus/adoption/repeat-value/what-if — Repeat Value (what-if): users_with_repeat/accepted_users (≥3 принятых, 3+ разных дня); пустой знаменатель → null (не 0%) [public]
- POST /v1/airus/adoption/manual-bypass/what-if — Manual Bypass (what-if): bypass/(accepted+bypass) — честный контр-сигнал обхода AI, не прячется [public]
- POST /v1/airus/adoption/policy-recovery/what-if — Policy Recovery (what-if): safe_alternative_completed/policy_blocks; НЕТ блоков → CANNOT_CERTIFY (не 100% recovery на нуле) [public]
- POST /v1/airus/adoption/manager-activation/what-if — Manager Activation (what-if): убран legacy-шаг + принят формат + время + разбор блокеров; legacy не убран/формат не принят → MANAGEMENT_BLOCKED [public]
- POST /v1/airus/adoption/champion-coverage/what-if — Champion Coverage (what-if): departments_with_active_champion/departments_active + gap [public]
- POST /v1/airus/adoption/health/what-if — Adoption Health (what-if): FAIL-CLOSED — MANAGEMENT_BLOCKED / manual_bypass>15% → BLOCKED независимо от score; нет данных → CANNOT_CERTIFY; взвешенный композит [public]
- POST /v1/airus/adoption/value-entry/what-if — Realized Value (what-if): категориально (TIME/QUALITY/THROUGHPUT/COST), provenance declared vs business_owner_verified; is_proven_rub:false (не доказанный ₽) [public]
- POST /v1/airus/adoption/champions — Регистрация чемпиона (append-only реестр): department, champion_ref, backup, мандат часов/неделю [jwt]
- GET /v1/airus/adoption/champions — Список чемпионов tenant (append-only) [jwt]
- GET /v1/airus/adoption/summary — Агрегатная сводка (privacy: aggregate_only, НЕ рейтинг сотрудников): accepted_users, users_with_repeat, departments из записанных adoption-событий в окне (declared) [jwt]
- POST /v1/airus/adoption/receipts — ПРАВИЛО: Adoption Receipt DERIVED (ADOPTION_VERIFIED/UNCONFIRMED/BLOCKED); seal-once по (tenant,workflow,period), sha256, authoritative:false; VERIFIED только Health=HEALTHY+first-accepted CERTIFIED+business_owner_verified value [jwt]
- GET /v1/airus/adoption/receipts/:id — Adoption Receipt по id (uuid-guard, tenant-scoped, found=false вне тенанта) [jwt]
- GET /v1/airus/adoption/receipts/:id/verify — Verify из запечатанной строки (tamper_evident_ok, uuid-guard) [jwt]

## demochat
- GET /v1/airus/demo/persona — Паспорт роли AIRUS R01: как отвечает, что запрещено, лимиты демо (прозрачность вместо магии) [public]
- POST /v1/airus/demo/chat — Демо-чат с собственной RF-моделью AIRUS R01 (self-hosted): серверная роль (анти-джейлбрейк), rate-limit по IP, metadata-only логи [public]

## contentops
- GET /v1/airus/content/posts — Блог: список опубликованных постов (только published+publishAt<=now; черновики не утекают) [public]
- GET /v1/airus/content/posts-index — Индекс опубликованного (слаги+даты) для RSS/sitemap [public]
- GET /v1/airus/content/posts/:slug — Пост целиком: санитизированный body_html (XSS-контроль на записи), SEO-поля, CTA [public]
- POST /v1/airus/content/admin/posts — CMS upsert (platform-admin ADMIN_EMAILS): markdown→sanitized HTML на записи; идемпотентный source_key для маркетинг-агента; slug заморожен после публикации [jwt]
- GET /v1/airus/content/admin/posts — CMS: все посты (draft/scheduled/published/archived) [jwt]
- POST /v1/airus/content/admin/posts/:slug/status — CMS: смена статуса (publish/archive/draft) [jwt]
- DELETE /v1/airus/content/admin/posts/:slug — CMS: архивирование поста (мягкое удаление — история/SEO) [jwt]

## execdocsops
- GET /v1/airus/exec-docs/reference — Reference: SDK, change types, error reason codes, rules (executable/error-contract/changelog), no-duplication map [public]
- POST /v1/airus/exec-docs/error/explain — Stable Error Intelligence: код/HTTP → actionable object (reason_code, retryable, retry_after, scope, safe_alternatives, docs_slug) [public]
- POST /v1/airus/exec-docs/shape/verify — Детерминированная shape-верификация ответа против схемы (структура, не текст — без живой модели) [public]
- POST /v1/airus/exec-docs/changelog/preview — Machine-readable changelog preview: change_type/affected/effective_at → requires_ci_action [public]
- GET /v1/airus/exec-docs/examples — Executable Example Registry: галерея с test_status/freshness/estimated_cost (?sdk=) [public]
- GET /v1/airus/exec-docs/examples/:key — Пример целиком: code + expected_shape + last_verified (Run in Sandbox = roadmap) [public]
- GET /v1/airus/exec-docs/changelog — Машиночитаемый changelog API для CI [public]
- GET /v1/airus/exec-docs/receipt — Developer Experience Receipt: example pass rate + stale + error-contract coverage → status (?sdk=&project_ref=) [public]
- POST /v1/airus/exec-docs/admin/examples/:key — Admin (ADMIN_EMAILS): upsert executable example (code, expected_shape, cost, published) [jwt]
- GET /v1/airus/exec-docs/admin/examples — Admin: все примеры (вкл. неопубликованные) [jwt]
- POST /v1/airus/exec-docs/admin/examples/:key/verify — ПРАВИЛО: verify — фактический ответ vs зафиксированная schema → test_status passed/failed + last_verified [jwt]
- POST /v1/airus/exec-docs/admin/changelog/:key — Admin: upsert changelog entry (requires_ci_action выводится из change_type) [jwt]
- GET /v1/airus/exec-docs/admin/metrics — examples, published, passed, error reason codes, changelog, ci-action entries [jwt]

## integrationecosystemops
- GET /v1/airus/integration-ecosystem/reference — Reference: frameworks, cert levels, compat statuses, health factors, rules (install≠активация, update firewall, fail-closed cert), no-duplication map [public]
- POST /v1/airus/integration-ecosystem/certification/gate — Certification gate (what-if): community/verified/production/enterprise; fail-closed (production требует owner+SLA+telemetry+upgrade+support) [public]
- POST /v1/airus/integration-ecosystem/update-firewall — Update Firewall (what-if): framework release не Supported пока не прошёл тесты; unknown ≠ compatible (fail-closed) [public]
- POST /v1/airus/integration-ecosystem/health-score — Integration Health Score (what-if): 7 взвешенных факторов → healthy/degraded/at_risk/incomplete [public]
- POST /v1/airus/integration-ecosystem/workflow-economics — Workflow-level economics (what-if): стоимость всего multi-step execution — cost_by_step/by_model + remaining budget [public]
- POST /v1/airus/integration-ecosystem/activation/decide — Production Activation (what-if): install ≠ активация — засчитывается только первый production-результат [public]
- POST /v1/airus/integration-ecosystem/receipt — Integration Receipt (sha256): integration/package/framework/capability/health/outcomes, authoritative=false [public]
- GET /v1/airus/integration-ecosystem/packages — Integration Package Registry: официальные пакеты (n8n/langchain/spring) с версией/cert-level/operations (?framework=) [public]
- GET /v1/airus/integration-ecosystem/packages/:key — Пакет + framework compatibility matrix (версии фреймворка × статус) [public]
- GET /v1/airus/integration-ecosystem/packages/:key/manifest — Machine-readable manifest (человек/CLI/framework/coding-агент/marketplace-валидатор): operations, credential model, governance [public]
- POST /v1/airus/integration-ecosystem/admin/packages/:key — Admin (ADMIN_EMAILS): upsert пакета; certification_level ВЫЧИСЛЯЕТСЯ гейтом (не gameable) [jwt]
- GET /v1/airus/integration-ecosystem/admin/packages — Admin: все пакеты (вкл. неопубликованные) [jwt]
- POST /v1/airus/integration-ecosystem/admin/packages/:key/compat — Admin: framework compatibility (версия → статус + pass rate); supported выводится Update Firewall [jwt]
- POST /v1/airus/integration-ecosystem/installations/:key — Integration installation: package, environment, partner, credential_verified [jwt]
- GET /v1/airus/integration-ecosystem/installations — Список установок [jwt]
- POST /v1/airus/integration-ecosystem/activations/:key — ПРАВИЛО: production activation DERIVED через join Ф72 ProductionWorkflow (controlled_production/certified); executions/outcomes/forecast = declared; accepted<=executions [jwt]
- GET /v1/airus/integration-ecosystem/activations — Список активаций [jwt]
- POST /v1/airus/integration-ecosystem/installations/:key/health — ПРАВИЛО: integration health DERIVED из framework-compat + активаций (join) + качественные факторы [jwt]
- GET /v1/airus/integration-ecosystem/metrics — packages, installations, production installs, activations, Production-Activated ARR [jwt]

## tenderintelligenceops
- GET /v1/airus/tender-intelligence/reference — Reference: procedure types (44-ФЗ/223-ФЗ/commercial), requirement categories, capability types, rules (нет вероятности победы, citations mandatory, human approval) [public]
- POST /v1/airus/tender-intelligence/document-coverage — Document coverage (what-if): один PDF ≠ вся закупка; coverage<90% → вывод не полный [public]
- POST /v1/airus/tender-intelligence/hallucination-gate — Hallucination Gate (what-if): вывод блокируется без подтверждённого источника / при низком coverage / смешении редакций (fail-closed) [public]
- POST /v1/airus/tender-intelligence/bid-decision/evaluate — Explainable Bid/No-Bid (what-if): readiness ОТДЕЛЬНО от confidence; blocking/positive/unknown; БЕЗ вероятности победы; human approval [public]
- POST /v1/airus/tender-intelligence/requirement-diff — Requirement Change Monitor (what-if): semantic diff редакций → changed/added/removed + invalidated conclusions [public]
- POST /v1/airus/tender-intelligence/pack-health — Vertical Pack Health Score: extraction/citation/checklist/decision/reliability/cost/adoption [public]
- GET /v1/airus/tender-intelligence/packs — Vertical Pack Registry: supplier/OEM editions, версии, поддерживаемые процедуры [public]
- POST /v1/airus/tender-intelligence/admin/packs/:key — Admin (ADMIN_EMAILS): upsert vertical pack (edition/version/procedures/published) [jwt]
- POST /v1/airus/tender-intelligence/procedures/:key — Tender procedure + document graph (discovered/processed → coverage), тип процедуры, срок подачи [jwt]
- GET /v1/airus/tender-intelligence/procedures — Список процедур + coverage [jwt]
- POST /v1/airus/tender-intelligence/requirements/:key — Normalized requirement с ЦИТАТОЙ (категория, normalized_value, source document/page, confidence) [jwt]
- GET /v1/airus/tender-intelligence/requirements — Список требований (?procedure_key=) [jwt]
- POST /v1/airus/tender-intelligence/capabilities/:key — Company Capability Passport: тип, значение, срок действия (истёкшая = fail) [jwt]
- GET /v1/airus/tender-intelligence/capabilities — Список capabilities (?company_ref=) [jwt]
- POST /v1/airus/tender-intelligence/procedures/:key/bid-decision — ПРАВИЛО: bid decision DERIVED из ЗАПИСАННЫХ requirements + capabilities; readiness/confidence раздельно; human approval; БЕЗ вероятности победы [jwt]
- POST /v1/airus/tender-intelligence/procedures/:key/approve — Human approval gate: подтверждение bid-решения специалистом (approved/rejected) [jwt]
- GET /v1/airus/tender-intelligence/procedures/:key/receipt — Tender Receipt (sha256): coverage, requirements, blocking, citations, pending human decisions → review_required/complete [jwt]
- GET /v1/airus/tender-intelligence/metrics — procedures, requirements, bid decisions, bid/conditional/no-bid/review, pending human decisions [jwt]

## tenderpackgtmops
- GET /v1/airus/tender-gtm/reference — GTM Reference: сегменты, триггеры, objection-категории, ICP-веса, conversion floors, offer ladder; тезис Lost Tender Autopsy; карта no-duplication (pilot→enterpriseops, ROI→value/roi, quote→packagingops) [public]
- GET /v1/airus/tender-gtm/offer-ladder — Offer Ladder (справочные якоря): evidence demo 49k/paid pilot 250-900k/production MRR по сегментам; реальные quote — packagingops/priceops (не дублируется) [public]
- POST /v1/airus/tender-gtm/account-score — Тендер-ICP score (what-if): fit_score+tier по сигналам (объём процедур/тендер-команда/сложность/боль/бюджет), sales_cycle инвертируется, жёсткий флор ≥40 процедур/≥2 спеца [public]
- POST /v1/airus/tender-gtm/autopsy/evaluate — Lost Tender Autopsy (what-if): критические требования + commercial_opportunity (paid_pilot/evidence_demo/nurture); НЕ причинность проигрыша, честный дисклеймер [public]
- POST /v1/airus/tender-gtm/objection-response — Objection registry: категория → канонический ответ (не заменяем поиск / усиление спеца / fail-closed / не гарантируем победу) [public]
- POST /v1/airus/tender-gtm/pilot-readiness — Pilot readiness gate (what-if, fail-closed, QUOTE→ПИЛОТ): production_quote_attached + baseline + нет бесплатного кастома + цена/скоуп → ready_to_send [public]
- POST /v1/airus/tender-gtm/funnel-health — Funnel health: конверсии против floor'ов (≥40/60/50/40/60%) → fix_offer_evidence_or_icp / healthy_scale + weakest stage (не лить трафик в дырявую воронку) [public]
- POST /v1/airus/tender-gtm/accounts/:key — Target account: сигналы тендер-ICP → fit_score+tier DERIVED (named-компании = гипотезы фита, не подтверждённый интерес) [jwt]
- GET /v1/airus/tender-gtm/accounts — Список target accounts по fit_score [jwt]
- POST /v1/airus/tender-gtm/triggers/:key — Buying trigger (lost_tender/team_expansion/new_ai_initiative) → sales_priority DERIVED из tier аккаунта + типа [jwt]
- POST /v1/airus/tender-gtm/autopsies/:key — Lost Tender Autopsy DERIVED из Ф77 процедуры + bid-решения (critical/unmet requirements, commercial_opportunity) [jwt]
- GET /v1/airus/tender-gtm/autopsies — Список разборов проигранных тендеров [jwt]
- POST /v1/airus/tender-gtm/objections/:key — Objection record: канонический ответ DERIVED из категории + исход (demo_scheduled/advanced/lost) [jwt]
- GET /v1/airus/tender-gtm/objections — Список возражений + агрегат by_category [jwt]
- POST /v1/airus/tender-gtm/pilot-proposals/:key — Pilot proposal: ready_to_send DERIVED через fail-closed gate; исполнение пилота — enterpriseops.PilotContract [jwt]
- GET /v1/airus/tender-gtm/pilot-proposals — Список пилот-предложений (ready_to_send) [jwt]
- GET /v1/airus/tender-gtm/evidence-pack — Sales Evidence Pack DERIVED из Ф77 bid-decision (document_coverage, verified findings, estimated_time_saved_percent из ROI, customer_specific) [jwt]
- GET /v1/airus/tender-gtm/metrics — target accounts, tier A, buying triggers, autopsies→paid_pilot, objections logged, pilot proposals ready_to_send [jwt]

## tenderpacksalesops
- GET /v1/airus/tender-sales/reference — Sales Reference: qual-веса, статусы, disqualification-причины, promise-категории, buyer-сигналы; тезис «интерес ≠ pipeline»; карта no-duplication (committee→enterpriseops, baseline→roi, opportunity→buyer-desk, call→calls) [public]
- POST /v1/airus/tender-sales/qualify — Composite qualification score (what-if, deal-health ось): 8 сигналов (боль/объём/данные/owner/economic buyer/бюджет/срочность/integration) → score+status+gate_autopsy+gate_pilot (fail-closed) [public]
- POST /v1/airus/tender-sales/promise-guard — Sales Promise Guard (what-if, fail-closed перед proposal): обещание победы/юр.гарантии — запрещено; функции — только supported∧in_scope; цена/SLA — только с approval (реальный floor — marginops) [public]
- POST /v1/airus/tender-sales/serious-buyer — Serious Buyer Detector (what-if): +/− сигналы → serious/unclear/free_researcher; hard-негатив (нет покупателя/уклонение от даты/расширение free scope) → free_researcher [public]
- POST /v1/airus/tender-sales/disqualify — Disqualification playbook (what-if): причина (no_budget/no_data/no_owner/no_pain/no_urgency/custom_only/win_guarantee_demand) → рекомендованное действие [public]
- POST /v1/airus/tender-sales/qualifications/:key — Sales qualification: 8 сигналов → score+status+gates DERIVED; has_decision_date выводится из decision_date (не caller-boolean) [jwt]
- GET /v1/airus/tender-sales/qualifications — Список квалификаций по score (status/gate_autopsy/gate_pilot) [jwt]
- GET /v1/airus/tender-sales/qualifications/:key/readiness-receipt — Sales Readiness Receipt (sha256, derived, non-authoritative): пересчёт гейтов из записанного → READY_FOR_PAID_PILOT / NOT_READY + блокеры [jwt]
- POST /v1/airus/tender-sales/disqualifications/:key — Disqualification record: причина → playbook DERIVED; привязка к opportunity переводит её в disqualified (согласованность) [jwt]
- GET /v1/airus/tender-sales/disqualifications — Список дисквалификаций + агрегат by_reason [jwt]
- GET /v1/airus/tender-sales/metrics — qualifications, priority, qualified, autopsy_gate_open, pilot_gate_open, disqualifications [jwt]

## tenderpackpilotops
- GET /v1/airus/tender-pilot/reference — Pilot Reference: 21-дневный стандарт (стадии/дни), production decisions (PRODUCTION/CONDITIONAL/STOP), required cohort, scope credits; тезис «пилот = репетиция production»; карта no-duplication (Ф79/Ф77/Ф72/marginops/value) [public]
- POST /v1/airus/tender-pilot/activation-gate — Pilot Activation Packet gate (what-if, fail-closed): data rights + 60 procedures + 20 outcomes + 2 reviewers + owner/buyer/budget/baseline/decision date + excluded functions + cohort lock → clock_can_start [public]
- POST /v1/airus/tender-pilot/cohort-stratification — Locked Stratified Cohort (what-if): 60 процедур с жёсткими полами трудных кейсов (10 больших/10 сканов/10 редакций/5 отклонений/5 споров) → balanced/shortfalls [public]
- POST /v1/airus/tender-pilot/procedure-value — Pilot Procedure Value (what-if): baseline − assisted → time_saved; manual_intervention ≤10 мин → within target (Truth Ledger + Value Clock) [public]
- POST /v1/airus/tender-pilot/blind-classify — Blind Evaluation (what-if): классификация ТОЛЬКО после фиксации обоих → agreement/human_disagreement/airus_miss/specialist_miss/insufficient_data (human_disagreement ≠ model error) [public]
- POST /v1/airus/tender-pilot/burn-down — Critical Requirement Burn-Down (what-if): found by AIRUS/specialist/both/missed/disputed/insufficient → recall (честнее «точности 97%») [public]
- POST /v1/airus/tender-pilot/acceptance-matrix — Pilot Acceptance Matrix (what-if, fail-closed): hard (discovery≥98/citation≥99/recall≥95/unsupported<0.5/isolation=0) + business + production → PRODUCTION/CONDITIONAL/STOP (незамеренный hard = не пройден) [public]
- POST /v1/airus/tender-pilot/midpoint-gate — Day-10 Midpoint Kill Gate (what-if): early-kill (нет cohort/буайера/бюджета, scope+20%, >30% необработано, feedback 5 дней) → STOP; иначе CONTINUE/CORRECT [public]
- POST /v1/airus/tender-pilot/scope-credit — Scope Credit Ledger (what-if): 10 configuration credits; запрос сверх остатка → change_order_required (не бесплатный кастом в пилоте) [public]
- POST /v1/airus/tender-pilot/stage-advance — 21-day Stage Machine (what-if): переход разрешён только на следующую стадию (no-skip, no-backward, fail-closed) [public]
- POST /v1/airus/tender-pilot/normalized-cost — Normalized Production Cost (what-if): inference+support+retries+OCR+storage+eval+partner margin+резерв (pilot subsidy ≠ production economics; реальный per-request — marginops) [public]
- POST /v1/airus/tender-pilot/pilots/:key — Upsert pilot (owner/admin/security): opportunity/account link, decision date, стадия/production decision DERIVED [jwt]
- GET /v1/airus/tender-pilot/pilots — Список пилотов (стадия/clock/production/midpoint) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/activation — Activation packet: ready DERIVED (включая cohort lock); has_decision_date из decision_date [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/cohort — Cohort mix: stratification DERIVED; после lock изменение запрещено (immutable) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/cohort/lock — Cohort lock (fail-closed): требует balanced (обязательные трудные страты набраны) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/clock/start — Start pilot clock (fail-closed): только при полном packet + залоченном cohort [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/stage — Advance stage (server-enforced no-skip; требует стартованные часы) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/procedures/:ref — Procedure record (Truth Ledger + Value Clock): time_saved DERIVED, ручное вмешательство фиксируется (не скрывается) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/blind-eval/:ref — Blind evaluation: discrepancy DERIVED после фиксации обоих; после lock решение неизменяемо (антиподгонка) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/scope-changes/:changeKey — Scope change: decision DERIVED; within_scope атомарно списывает кредиты ($transaction) [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/midpoint — Day-10 midpoint gate: CONTINUE/CORRECT/STOP; STOP → production_decision=stop [jwt]
- POST /v1/airus/tender-pilot/pilots/:key/acceptance — Persist измеренных acceptance-метрик (hard/business/production) — receipt строит production_decision из ЗАПИСАННОГО, не из body (не caller-gameable) [jwt]
- GET /v1/airus/tender-pilot/pilots/:key/burn-down — Critical requirement burn-down DERIVED из blind-eval агрегатов (per-procedure decision; per-requirement — roadmap) [jwt]
- GET /v1/airus/tender-pilot/pilots/:key/receipt — Tender Pilot Receipt (sha256, derived, non-authoritative): recall/time reduction DERIVED из записей + персистные метрики → PRODUCTION/CONDITIONAL/STOP [jwt]
- GET /v1/airus/tender-pilot/metrics — pilots, clock_started, stopped, production_or_conditional, scope_changes, procedures_recorded [jwt]

## tenderpackproductionscaleops
- GET /v1/airus/tender-production/reference — Production Reference: SLA-профили, adoption-роли, bid-lifecycle, health-веса; тезис «управляемая пропускная способность отдела»; карта no-duplication (Ф72/Ф77/Ф80/Ф54/marginops/routeeconomics/evalops/toolops/advocacyops) [public]
- POST /v1/airus/tender-production/intake-gateway — Tender Intake Gateway (what-if, fail-closed): dedup/OCR-quality/completeness/malicious → coverage_status ready/review/blocked (прямая отправка всех файлов модели запрещена) [public]
- POST /v1/airus/tender-production/flow-coverage — Complete-Flow Coverage (what-if): воронка ПОТОКА тендеров (релевантных/передано/обработано/заблокировано/исключено) → automation_rate; <80% → нельзя заявлять автоматизацию отдела [public]
- POST /v1/airus/tender-production/quality-sampling — Risk-Based Quality Sampling (what-if): 100% high-value/low-confidence/new-category/new-route/human-disagreement + детерминированные 2-5% random (hash ref) [public]
- POST /v1/airus/tender-production/role-adoption — Role-Based Adoption (what-if): per-role фактическое использование + manual bypass + parallel-Excel → adopted/partial/not_adopted (не по логинам) [public]
- POST /v1/airus/tender-production/complexity-pricing — Complexity Pricing (what-if): files/pages/OCR/tables/archives/versions → band (standard/large/complex) + estimate ДО анализа; глубокая маржа — TenderPackMarginOps [public]
- POST /v1/airus/tender-production/passport-freshness — Passport Freshness (what-if): capability → VERIFIED/EXPIRING/STALE/CONFLICTING/MISSING; bid_blocked на устаревшем critical (расширяет Ф77 CompanyCapability) [public]
- POST /v1/airus/tender-production/unit-economics — Unit Economics (what-if, ТОНКО): per-procedure ingestion/OCR/storage/retrieval/LLM/verification/support/partner → gross_margin; отрицательная маржа помечается [public]
- POST /v1/airus/tender-production/workflow-health — Workflow Health Score (what-if): composite (coverage/quality/adoption/decision/integration/cost/passport); fail-closed incomplete без всех факторов (паттерн Ф54) [public]
- POST /v1/airus/tender-production/bid-lifecycle — Bid Decision Lifecycle (what-if): переходы NEW→ANALYZING→…→INVALIDATED_BY_CHANGE/ARCHIVED (расширяет Ф77 TenderBidDecision) [public]
- POST /v1/airus/tender-production/stage-advance — 90-day stage machine (what-if): stabilize→adopt→prove (no-skip, fail-closed) [public]
- POST /v1/airus/tender-production/workflows/:key/promote — Promote pilot→production (fail-closed: только Ф80-пилот с production/conditional_production; frozen pack version, БЕЗ пересоздания tenant) [jwt]
- GET /v1/airus/tender-production/workflows — Список production-workflow (stage/sla/reference_status) [jwt]
- POST /v1/airus/tender-production/workflows/:key/stage — Advance 90-day stage (stabilize→adopt→prove, server-enforced no-skip) [jwt]
- POST /v1/airus/tender-production/workflows/:key/intake/:ref — Intake record: coverage_status DERIVED (fail-closed) [jwt]
- POST /v1/airus/tender-production/workflows/:key/unit-economics/:ref — Per-procedure unit economics: gross_margin DERIVED [jwt]
- POST /v1/airus/tender-production/workflows/:key/quality-samples/:ref — Quality sample: must_review DERIVED из сигналов процедуры (high-value/low-conf/new-route/disagreement/random) [jwt]
- POST /v1/airus/tender-production/workflows/:key/adoption/:role — Adoption snapshot по роли: status DERIVED (adopted/partial/not_adopted) [jwt]
- GET /v1/airus/tender-production/passport/:companyRef — Passport freshness компании DERIVED из Ф77 CompanyCapability (bid_blocked на устаревшем critical) [jwt]
- POST /v1/airus/tender-production/bid-lifecycle/:procedureKey/:companyRef — Advance bid lifecycle Ф77-решения (server-enforced transitions, no-skip) [jwt]
- POST /v1/airus/tender-production/workflows/:key/metrics-record — Persist accepted_decision_rate/time_reduction/passport_freshness — receipt строит SCALE из ЗАПИСАННОГО, не из body (не caller-gameable) [jwt]
- GET /v1/airus/tender-production/workflows/:key/health — Workflow health DERIVED из записанного (coverage из intake, adoption, positive-margin, quality sample) [jwt]
- POST /v1/airus/tender-production/workflows/:key/receipt — Tender Production Receipt (sha256, derived): coverage/accepted/margin/passport → SCALE/SUSTAIN/STOP [jwt]
- GET /v1/airus/tender-production/metrics — workflows, in_prove_stage, intake_records, intake_blocked, quality_samples, must_review [jwt]

## tenderpackbillingtrustops
- GET /v1/airus/billing-trust/reference — Billing Trust Reference: 12 движков, money_source_of_truth=LedgerService (ADR-002), roadmap (УПД XML+ЭДО, 1С, wiring в LedgerService) [public]
- POST /v1/airus/billing-trust/quote-to-invoice-gate — Quote-to-Invoice Gate (what-if, fail-closed): строка эмитится только при contract+price_version+usage+complexity+approval+tax+period+description; иначе refuse+missing[] [public]
- POST /v1/airus/billing-trust/invoice-transition — Invoice state machine (what-if): no-skip DRAFT→ISSUED→{PARTIALLY_PAID→PAID|OVERPAID|OVERDUE|DISPUTED}, CANCELLED из draft/issued; paid→disputed (chargeback) [public]
- POST /v1/airus/billing-trust/payment-match — Payment match (what-if, fail-closed): amount+payer_inn+purpose → matched/review/split_required/unmatched; неопознанный НЕ зачисляется (credit_authorized=false) [public]
- POST /v1/airus/billing-trust/credit-exposure — Credit Exposure Guard (what-if): exposure=overdue+unpaid_current+unbilled_usage+forecast≤limit → HEALTHY/WARNING/PAYMENT_REQUIRED/RESTRICTED/SUSPENDED [public]
- POST /v1/airus/billing-trust/partner-payout — Partner Payout Gate (what-if): payable=max(0,collected−refunded−disputed−taxes−excluded)×%; collected=0⇒0; SUPERSEDES advisory-комиссию revops [public]
- POST /v1/airus/billing-trust/upd-validation — УПД 5.03 validation (what-if): реквизиты+ИНН checksum+НДС-сверка ДО отправки; XML+подпись+ЭДО=roadmap; ставки illustrative [public]
- POST /v1/airus/billing-trust/edo-readiness — EDO Readiness (what-if): оператор/роуминг/формат/подписант(сертификат)/МЧД → ready|blockers[] [public]
- GET /v1/airus/billing-trust/non-billable/:situation — Non-billable classification: parser/provider_5xx/gateway/reprocessing → NON_BILLABLE_AIRUS_REPROCESSING; энфорс через LedgerService.release/refund (append-only) [public]
- POST /v1/airus/billing-trust/anomaly-scan — Billing anomaly scan (what-if): unknown-payer/usage-after-suspension(critical), duplicate-line/overage-no-approval/discount(high); прод-hookup в finops pipeline=roadmap [public]
- POST /v1/airus/billing-trust/suspension — Graceful suspension (what-if): warn→restrict_priority→restrict_bulk→read_only→emergency→full_block; оплаченный evidence НЕ отключается [public]
- POST /v1/airus/billing-trust/trust-receipt — Billing Trust Receipt (what-if): verdict CLEANLY_CLOSED (quote↔invoice∧usage∧invoice∧payment∧УПД∧reconciled∧disputes=0∧collected≥invoice); sha256+payload_version [public]
- POST /v1/airus/billing-trust/aging — Aging + dunning (what-if): бакеты current/1-7/8-30/31-60/61+/disputed/promised + dunning-стадия + DSO [public]
- POST /v1/airus/billing-trust/invoices/:key — Создать invoice (draft) + evidence-событие [jwt]
- GET /v1/airus/billing-trust/invoices — Список invoice тенанта (amount — сумма ДОКУМЕНТА, не баланс) [jwt]
- POST /v1/airus/billing-trust/invoices/:key/emit-line — Эмиссия строки через Quote-to-Invoice Gate (fail-closed: без evidence строка не создаётся) [jwt]
- POST /v1/airus/billing-trust/invoices/:key/transition — Переход состояния invoice (server-enforced no-skip) + evidence-событие [jwt]
- POST /v1/airus/billing-trust/invoices/:key/upd — Валидация УПД → upd_status=validated (реальный XML+ЭДО — roadmap) [jwt]
- POST /v1/airus/billing-trust/invoices/:key/upd/deliver — EDO-readiness чек → пометка delivered (реальная отправка — внешний контур/roadmap) [jwt]
- POST /v1/airus/billing-trust/payments/match — Persist payment match (idempotent): invoice_amount+payer_inn СЕРВЕР берёт из реальных записей (не gameable); зачисление в баланс=LedgerService (roadmap) [jwt]
- POST /v1/airus/billing-trust/partner-payouts — Persist partner payout (idempotent): collected/refunded из РЕАЛЬНОГО LedgerEvent (не из body, не revops MRR); выплата=LedgerService (roadmap) [jwt]
- GET /v1/airus/billing-trust/credit-status — Credit exposure DERIVED из реальных invoice(overdue/unpaid)+UsageEvent(unbilled)+CreditProfile(limit) [jwt]
- GET /v1/airus/billing-trust/suspension-status — Suspension stage DERIVED из overdue + exposure_status [jwt]
- GET /v1/airus/billing-trust/aging — Aging-бакеты по реальным неоплаченным invoice тенанта [jwt]
- POST /v1/airus/billing-trust/invoices/:key/reconcile — Reconcile-действие финанса: append-only evidence 'reconciled' (делает флаг reconciled trust-receipt достижимым). Автоматическая 1С-сверка = roadmap [jwt]
- POST /v1/airus/billing-trust/invoices/:key/trust-receipt — Issue Trust Receipt: флаги DERIVED из реального состояния (invoice/evidence/BillingDispute/documented-allocation ≤ реального LedgerEvent collected), НЕ из body; CLEANLY_CLOSED verdict + sha256 [jwt]
- GET /v1/airus/billing-trust/invoices/:key/trust-receipt/verify — Verify receipt: пересчёт sha256 из реального состояния vs сохранённый [jwt]
- GET /v1/airus/billing-trust/evidence — Append-only lifecycle-журнал биллинга (evidence, НЕ money-ledger; суммы — документированные копии). ?invoice_key= [jwt]
- GET /v1/airus/billing-trust/metrics — invoices_by_state, cleanly_closed, payments matched/unmatched, payouts payable, credit_status/exposure [jwt]

## operatingplanops
- GET /v1/airus/operating-plan/reference — Reference: 14 движков, self-declared входы, #6 advisory (не server-verified), roadmap (реальные оклады/взносы/льгота/1С-ФОТ/cash runway) [public]
- POST /v1/airus/operating-plan/founder-bottleneck — Founder Bottleneck (what-if): critical при >20% blocked / >24ч ожидания / >15ч повторяемого [public]
- POST /v1/airus/operating-plan/function-capacity — Function Capacity (what-if): available vs required → remove→automate→partner→HIRE только по остаточному разрыву [public]
- POST /v1/airus/operating-plan/fully-loaded-cost — Fully Loaded Cost (what-if): salary×multiplier(1.25-1.35 IT / 1.35-1.5 без)+компоненты, 12мес. Ставки illustrative (нужен бухгалтер). НЕ COGS-per-request [public]
- POST /v1/airus/operating-plan/make-vs-buy — Make-vs-Buy (what-if): differentiation+security+build/partner cost → build/buy/partner/build_never_outsource [public]
- POST /v1/airus/operating-plan/hiring-gate — Hiring Gate (what-if, ФЛАГМАН fail-closed): critical bottleneck + не снимаемо removal/automation/partner + fully-loaded + cash≥12мес + signed pipeline → approved; иначе blocked+blockers [public]
- POST /v1/airus/operating-plan/headcount-budget — Headcount Budget Gate (what-if, ADVISORY): annual fully-loaded ≤ 30% САМОЗАЯВЛЕННОГО collected GP клиента. AIRUS не верифицирует — дисциплина, не server-gate [public]
- POST /v1/airus/operating-plan/role-scorecard — Role Scorecard (what-if): валидатор полноты 30/60/90 + kill_condition [public]
- POST /v1/airus/operating-plan/bus-factor — Bus-Factor Gate (what-if): критичный контур → bus_factor≥2 + runbook + recovery; иначе at_risk [public]
- POST /v1/airus/operating-plan/service-to-product — Service-to-Product Ratio (what-if): professional services ≤25-30%; >35% или >30% 2мес → остановить кастом [public]
- POST /v1/airus/operating-plan/ownership-map — Ownership Map (what-if): область → owner+backup → coverage + at_risk (без backup) [public]
- POST /v1/airus/operating-plan/hiring-sequence — Hiring Sequence (what-if): no-skip порядок найма (ядро раньше специализаций; Eval раньше ML) [public]
- POST /v1/airus/operating-plan/founder-delegation — Founder Delegation (what-if): keep (стратегич.+неповторяемое) vs delegate (повторяемое) [public]
- POST /v1/airus/operating-plan/role-gate/:role — Role-specific gate (what-if): sre/applied_ai/enterprise_sales/finance/hr — числовые пороги найма [public]
- POST /v1/airus/operating-plan/bottleneck/:week — Persist founder bottleneck за ISO-неделю (status DERIVED) [jwt]
- GET /v1/airus/operating-plan/bottleneck/latest — Последняя запись bottleneck [jwt]
- POST /v1/airus/operating-plan/functions/:key/owner — Owner+backup внутренней org-функции (bus_factor DERIVED, at_risk без backup) [jwt]
- GET /v1/airus/operating-plan/ownership-map — Карта владения org-функциями тенанта + coverage/at_risk [jwt]
- POST /v1/airus/operating-plan/functions/:key/capacity — Persist function capacity (recommended_action DERIVED) [jwt]
- POST /v1/airus/operating-plan/make-vs-buy/:capability — Persist make-vs-buy decision [jwt]
- POST /v1/airus/operating-plan/roles/:key — Role Request (ФЛАГМАН): сводит hiringGate(fail-closed)+headcountBudget(advisory)+sequence над self-declared входами → approved/blocked+reasons [jwt]
- GET /v1/airus/operating-plan/roles — Список role requests с решениями [jwt]
- POST /v1/airus/operating-plan/receipt — Operating Plan Receipt: агрегирует approved-роли/payroll/bottleneck; provenance-теги (attested/illustrative); sha256 [jwt]
- GET /v1/airus/operating-plan/receipt/verify — Verify receipt (read-only пересчёт sha256) [jwt]
- GET /v1/airus/operating-plan/metrics — roles_by_decision, annual_fully_loaded_payroll, org_functions/at_risk, founder_bottleneck_status [jwt]

## renewaldefenseops
- GET /v1/airus/renewal-defense/reference — Reference: 11 движков, спина=Ф54 read-only, server-derived vs declared, #18 eligibility, roadmap (downgrade/give-to-get/competitive-scan/category-defense/portability/reconstruction) [public]
- POST /v1/airus/renewal-defense/renewal-clock — Renewal Clock (what-if, #1): часы от САМОГО РАННЕГО события (budget/security review), не конца лицензии; фазы T-180…T-0 [public]
- POST /v1/airus/renewal-defense/risk-taxonomy — Renewal Risk Taxonomy (what-if, #2): 8 типов (product/value/sponsor/commercial/procurement/security/competitive/strategic), primary=наивысший, НЕ общий AT_RISK [public]
- POST /v1/airus/renewal-defense/procurement-calendar — Procurement Calendar (what-if, #3): 6 датированных событий (payment_schedule — roadmap) → упорядоченный timeline + самое раннее действие + просрочки [public]
- POST /v1/airus/renewal-defense/buyer-committee — Buyer Committee (what-if, #4): 7 обязательных ролей; пустая критичная (sponsor/budget/procurement) → high risk [public]
- POST /v1/airus/renewal-defense/forecast-confidence — Forecast Confidence (what-if, #17): COMMITTED/HIGH/MEDIUM/LOW/CHURN_LIKELY; value_confirmed — server-derived, остальное declared [public]
- POST /v1/airus/renewal-defense/decision-board — Renewal Decision Board (what-if, #12): RENEW/RIGHT_SIZE/EXPAND/RECOVERY/COMPETITIVE_REVIEW/PLANNED_EXIT; health — advisory [public]
- POST /v1/airus/renewal-defense/multi-year-gate — Multi-Year Gate (what-if, #16): 24-36мес только при value_confirmed + структурных (indexation/exit); health ADVISORY, НЕ гейт (5/7 declared) [public]
- POST /v1/airus/renewal-defense/procurement-ready-arr — Procurement-Ready ARR (what-if, ФЛАГМАН #18): ARR ready ТОЛЬКО при 8 условиях; ELIGIBILITY-флаг на declared ARR (не деньги); fail-closed value_unverified [public]
- POST /v1/airus/renewal-defense/recovery-sprint — 30-Day Recovery Sprint (what-if, #13): diagnose→fix→verify_value→decide; T-30 принудительное решение, не бесконечный proserv [public]
- POST /v1/airus/renewal-defense/exit-detector — Exit Preparation Detector (what-if): ≥3 сигналов → likely; одиночный экспорт НЕ churn [public]
- POST /v1/airus/renewal-defense/accounts/:accountId/plan — Upsert defense plan (declared) по UUID клиентского аккаунта Ф54; computed forecast/primary_risk/decision из server-derived value [jwt]
- GET /v1/airus/renewal-defense/accounts/:accountId/status — Полный статус (live): server-derived из Ф54 + clock/calendar/committee/taxonomy/forecast/board/multi-year/#18 ARR-gate [jwt]
- POST /v1/airus/renewal-defense/accounts/:accountId/receipt — Renewal Defense Receipt (#19): sha256, authoritative:false; value_multiple server-derived, budget/procurement/security/competitive declared [jwt]
- GET /v1/airus/renewal-defense/accounts/:accountId/receipt/verify — Verify receipt (read-only, tamper-evident): пересчёт sha256 из ЗАПЕЧАТАННЫХ полей, не из живых чтений Ф54 [jwt]
- GET /v1/airus/renewal-defense/accounts — Список defense-планов (renewal_confidence/primary_risk/board_decision/declared ARR) [jwt]
- GET /v1/airus/renewal-defense/metrics — renewable_arr(declared), arr_by_confidence, churn_likely_arr, decisions. Money N/A [jwt]

## securityarchitectureops
- GET /v1/airus/security/reference — Reference: 4 контура, таксономия энфорса (inline/analyzer/mitigation/roadmap), инварианты, roadmap. Инъекции = митигация, не security-control [public]
- GET /v1/airus/security/invariants — 8 fail-closed инвариантов зеро-траст плоскости с классом энфорса [public]
- POST /v1/airus/security/assemble-prompt — Structured Prompt Assembly (what-if, класс C): делимитеры+нейтрализация недоверенного контента. Митигация, НЕ предотвращение [public]
- POST /v1/airus/security/scan-output — Output Safety Gateway (what-if, класс B): скан готового ответа на секреты/PII/эксфильтрацию. НЕ инлайн-стрим [public]
- POST /v1/airus/security/canary-check — Security Canary (what-if, класс B): verbatim-эхо канарейки в выводе = эксфильтрация [public]
- POST /v1/airus/security/tenant-isolation — Tenant Isolation Proof (what-if, класс A): реконструкция из tenant_id ресурсов, без ресурсов → measured=false [public]
- POST /v1/airus/security/receipt — Aggregated Security Receipt (what-if): SAFE_TO_REVIEW = AND(measured ∧ passed) по A+B; любой неизмеренный → false [public]
- POST /v1/airus/security/evaluate — Реальная оценка запроса: изоляция+скан+брокер+реестр модели → запечатанный fail-closed рецепт (seal-once, sha256, authoritative:false) [jwt]
- GET /v1/airus/security/evaluations — Список запечатанных security-оценок (safe_to_review/unmeasured/failed/sha256) [jwt]
- GET /v1/airus/security/evaluations/:id/verify — Verify-from-sealed: реконструкция sha256 из запечатанной строки (tamper-evident), НЕ переоценка [jwt]

## reliabilitychaosops
- GET /v1/airus/reliability/reference — Reference: движки, провенанс сигналов (live_measured/computed/declared/roadmap), reuse-реестр, 3 рецепта разграничены [public]
- POST /v1/airus/reliability/workflow-availability — Verified Workflow Availability (what-if): доступно только если ВСЕ обязательные шаги ok; partial=completed_with_gaps [public]
- POST /v1/airus/reliability/deadline-priority — Deadline-Aware Priority (what-if): дедлайн+severity+tier+value+age, не громкость клиента [public]
- POST /v1/airus/reliability/error-budget — Error Budget (what-if): SLO burn → release_freeze при исчерпании [public]
- POST /v1/airus/reliability/decision-divergence — Decision Divergence (what-if): два переданных решения расходятся → REVIEW_REQUIRED [public]
- POST /v1/airus/reliability/backup-proof — Backup Restore Proof (what-if): без реального restore-теста → UNVERIFIED (declared, вердикт не поднимает) [public]
- POST /v1/airus/reliability/receipt — Reliability Receipt (what-if): ENTERPRISE_READY = AND(measured ∧ passed) по каноническим; любой неизмеренный → false [public]
- POST /v1/airus/reliability/evaluate — Реальная оценка workflow: availability+unsafe-fallback+exactly-once(live)+semantic/circuit/retry → запечатанный fail-closed рецепт [jwt]
- POST /v1/airus/reliability/effects — Exactly-Once бизнес-эффект (CRM/email/receipt/decision/callback): повтор ключа = duplicate, действие не выполняется дважды. Billing отклоняется (деньги — LedgerService) [jwt]
- GET /v1/airus/reliability/evaluations — Список запечатанных reliability-оценок [jwt]
- GET /v1/airus/reliability/evaluations/:id/verify — Verify-from-sealed: реконструкция sha256 из запечатанной строки, НЕ переоценка [jwt]

## providergovernanceops
- GET /v1/airus/provider-governance/reference — Reference: движки, провенанс (live COGS/attested/declared/roadmap), лимиты концентрации, reuse [public]
- POST /v1/airus/provider-governance/concentration — Concentration Guard (what-if): доля vs лимит; нет данных → insufficient_data (инвертированный fail-closed, не allow) [public]
- POST /v1/airus/provider-governance/tier — Provider Tier (what-if): strategic/core/approved/experimental/exit [public]
- POST /v1/airus/provider-governance/scorecard — Provider Scorecard (what-if): взвешенный композит → PREFERRED/HEALTHY/WATCH/RESTRICTED/EXIT; пустой→null [public]
- POST /v1/airus/provider-governance/adjusted-cost — Provider-Adjusted Cost (what-if): МНОЖИТЕЛЬ риска (retry+verification+incident+liquidity+concentration+migration), не абсолютные ₽ [public]
- POST /v1/airus/provider-governance/contract-matrix — Contract Control Matrix (what-if, declared): недостающие clauses → gaps [public]
- POST /v1/airus/provider-governance/change-notice — Model Change Notice (what-if, declared): required (60/30/…) vs contractual → gap [public]
- POST /v1/airus/provider-governance/exit-readiness — Exit Readiness (what-if, declared): критичный без плана → block; НИКОГДА VERIFIED из body [public]
- POST /v1/airus/provider-governance/independence — Provider Independence (genuine reuse resilienceops.detectCommonMode): общий failure domain = не резерв [public]
- POST /v1/airus/provider-governance/receipt — Governance Receipt (what-if): GOVERNED = AND(measured ∧ passed); неизмеренная концентрация → CANNOT_CERTIFY [public]
- POST /v1/airus/provider-governance/evaluate — Реальная оценка портфеля: concentration из РЕАЛЬНОГО spend (usageEvent) + exit/scorecard → запечатанный fail-closed рецепт [jwt]
- GET /v1/airus/provider-governance/evaluations — Список запечатанных governance-оценок [jwt]
- GET /v1/airus/provider-governance/evaluations/:id/verify — Verify-from-sealed: реконструкция sha256 из запечатанной строки [jwt]

## modelcatalogtruthops
- GET /v1/airus/model-catalog/reference — Reference: lifecycle, провенанс (verified_persisted/declared/roadmap), eval-harness packs, honesty [public]
- POST /v1/airus/model-catalog/truth-gate — Catalog Truth Gate (флагман): PRODUCTION только при персистном eval; declared → максимум TESTING (badge = тест, не заявление) [public]
- POST /v1/airus/model-catalog/identity — Canonical Model Identity: alias ≠ identity (provider/upstream/version/fingerprint) [public]
- POST /v1/airus/model-catalog/card — Verified Model Card: provider claim vs AIRUS verification — РАЗНЫЕ поля; verified только из персистного eval [public]
- POST /v1/airus/model-catalog/parity — OpenAI Parity Matrix: совместимый endpoint ≠ паритет; verified только из теста [public]
- POST /v1/airus/model-catalog/price-normalize — Price Normalization: ₽/1M в Decimal (не float); разные единицы тарификации сопоставимы [public]
- POST /v1/airus/model-catalog/price-freshness — Price Freshness: цена старше max-age → устарела (quote может быть неверным) [public]
- POST /v1/airus/model-catalog/recommend — Unbiased Recommendation: quality-ранжирование СТРУКТУРНО без маржи (commercial_influence=none_structural) [public]
- POST /v1/airus/model-catalog/integrity-receipt — Catalog Integrity Receipt (what-if): TRUSTED ⟺ unverified_claims=0 (нет fake PRODUCTION) [public]
- POST /v1/airus/model-catalog/evaluate — Реальная оценка каталога: каждая модель через Truth Gate → запечатанный fail-closed Integrity Receipt [jwt]
- GET /v1/airus/model-catalog/evaluations — Список запечатанных catalog-integrity оценок [jwt]
- GET /v1/airus/model-catalog/evaluations/:id/verify — Verify-from-sealed: реконструкция sha256 из запечатанной строки [jwt]

## modelevaluationops
- GET /v1/airus/model-evaluation/reference — Reference: risk C0-C4, канонические гейты по классу, провенансы, roadmap (реальные judge/human прогоны) [public]
- POST /v1/airus/model-evaluation/risk-classify — Risk classes C0-C4: детерминированные правила → канонический набор release-гейтов [public]
- POST /v1/airus/model-evaluation/rubric-validate — Rubric Registry: weights=1, шкалы монотонны, anchors обязательны; rubric_sha256 = версия [public]
- POST /v1/airus/model-evaluation/deterministic-score — Deterministic score: РЕАЛЬНЫЙ вызов evalops.scoreExample (JWT: пользовательский regex — не для анонимного вызова) [jwt]
- POST /v1/airus/model-evaluation/hybrid-score — Hybrid scoring: deterministic+judge+human; declared/некалиброванный judge → advisory_only (не release-grade) [public]
- POST /v1/airus/model-evaluation/judge-agreement — Judge governance: Cohen's kappa vs эксперты; generator≠judge; <50 пар → not_calibrated (fail-closed) [public]
- POST /v1/airus/model-evaluation/worst-slice — Worst-slice gate: вердикт по ХУДШЕМУ slice; недомеренный slice → cannot_certify (не вакуумный pass) [public]
- POST /v1/airus/model-evaluation/statistical-gate — Statistical regression gate: delta+95% CI; inconclusive = BLOCKED (не pass), required_n оценка [public]
- POST /v1/airus/model-evaluation/pass-at-k — Multi-run consistency: pass@1/pass_all_k/flaky_rate — ловит модель, проходящую тест «иногда» [public]
- POST /v1/airus/model-evaluation/cost-per-outcome — Cost per Accepted Outcome: BigInt nano-₽; accepted=0 → cannot_compute (не «бесплатно») [public]
- POST /v1/airus/model-evaluation/release-gate — Release gate (what-if): AND(measured∧passed) по канону класса; unmeasured/declared → false [public]
- POST /v1/airus/model-evaluation/canary-plan — Canary план-валидатор: монотонные ступени+гейты+rollback обязательны (исполнение roadmap) [public]
- POST /v1/airus/model-evaluation/shadow-plan — Shadow план-валидатор: mirror_fraction/retention/compare_metric (исполнение roadmap) [public]
- POST /v1/airus/model-evaluation/core300-coverage — Core-300 coverage: покрытие слотов спецификации (оси из evalops.EVAL_PACKS); частичный golden set не сертифицирует [public]
- POST /v1/airus/model-evaluation/evaluate — Release-вердикт: гейты пересчитаны из сырья (declared не принимается) → запечатанный Evaluation Receipt (seal-once) [jwt]
- GET /v1/airus/model-evaluation/verdicts — Список запечатанных release-вердиктов [jwt]
- GET /v1/airus/model-evaluation/verdicts/:id/verify — Verify-from-sealed: реконструкция sha256 из запечатанной строки [jwt]

## productionfeedbackops
- GET /v1/airus/production-quality/reference — Reference: signal types, feedback hierarchy, drift taxonomy, restriction states, hard rules (silence ≠ acceptance) [public]
- POST /v1/airus/production-quality/signal-validate — Production Signal envelope: request_id обязателен; сигнал = событие для расследования, не команда [public]
- POST /v1/airus/production-quality/feedback-strength — Feedback hierarchy: business outcome > correction > override > retry/abandonment > thumbs; пусто → no_evidence [public]
- POST /v1/airus/production-quality/correction-diff — Field-level Correction Diff → regression case ТОЛЬКО после adjudication (confirmed) [public]
- POST /v1/airus/production-quality/first-pass-metrics — First-Pass Acceptance / Retry-to-Success / abandonment из переданных событий (computed) [public]
- POST /v1/airus/production-quality/drift-classify — Drift taxonomy (10 типов) + data-vs-model attribution: смена данных не лечится откатом модели [public]
- POST /v1/airus/production-quality/baseline-compare — 3 baseline-окна + сезонная супрессия; slice min-n; alert всегда указывает окно расхождения [public]
- POST /v1/airus/production-quality/active-sample — Active Review queue: информативные кейсы (complaint/disagreement/new intent), не случайный 1% [public]
- POST /v1/airus/production-quality/feedback-integrity — Feedback Integrity Score: защита от отравления; quarantined не идёт в drift/golden set [public]
- POST /v1/airus/production-quality/route-restriction — Route Restriction state machine (WATCH..GLOBAL_QUARANTINE): hysteresis/cooldown/blast radius/flapping-freeze; план, не действие [public]
- POST /v1/airus/production-quality/golden-lifecycle — Golden Set lifecycle: dedup/stale/contamination retirement — set без pruning деградирует [public]
- POST /v1/airus/production-quality/evaluation-debt — Evaluation Debt: CONTROLLED..RELEASE_FREEZE; неизмеренный долг ≠ нулевой (fail-closed) [public]
- GET /v1/airus/production-quality/first-pass-live — live_measured: РЕАЛЬНАЯ агрегация quality_feedback + usage_events (success/corrected/coverage) [jwt]
- POST /v1/airus/production-quality/evaluate — Production Feedback Receipt: live+computed секции → запечатанный receipt (seal-once, HEALTHY не из пустоты) [jwt]
- GET /v1/airus/production-quality/receipts — Список запечатанных production-feedback receipts [jwt]
- GET /v1/airus/production-quality/receipts/:id/verify — Verify-from-sealed: реконструкция sha256 из запечатанной строки [jwt]

## Агенты
- GET /v1/airus/agents — Агентские ключи и статистика [jwt]
- GET /v1/airus/agent-runs — Run trace по metadata.run_id [jwt]
- POST /v1/airus/agents/:agentId/kill — Kill switch (необратимо) [jwt]
- POST /v1/airus/agents/:agentId/pause — Пауза агента [jwt]
- POST /v1/airus/agents/:agentId/resume — Возобновить агента [jwt]

## Webhooks
- GET /v1/airus/webhooks/endpoints — Webhook-endpoints [jwt]
- POST /v1/airus/webhooks/endpoints — Создать endpoint (HMAC-подпись, secret один раз) [jwt]
- GET /v1/airus/webhooks/events — Журнал событий с доставками [jwt]
- POST /v1/airus/webhooks/events/:id/replay — Переотправить событие [jwt]
- GET /v1/airus/webhooks/health — Доставляемость, очередь, DLQ [jwt]
- GET /v1/airus/webhooks/dead-letters — Dead-letter queue: мёртвые доставки (format=json|csv) [jwt]
- GET /v1/airus/webhooks/event-types — Каталог типов событий [jwt]

## Шаблоны
- GET /v1/airus/templates — Каталог готовых сценариев (фильтр ?integration=) [public]
- GET /v1/airus/templates/runs/:runId/receipt — Receipt прогона шаблона [jwt]

## Тендеры
- POST /v1/airus/tenders/analyze — Полный анализ тендера: summary, требования, дедлайны, риски, go/no-go [api_key]
- POST /v1/airus/tenders/risk-score — Карта рисков закупки с risk_score 0–100 [api_key]
- POST /v1/airus/tenders/go-no-go — Go/no-go решение по закупке [api_key]
- POST /v1/airus/tenders/batch — Пакетный анализ архива закупок (Batch со скидкой) [jwt]

## calls
- POST /v1/airus/calls/analyze — Полный разбор транскрипта звонка: summary, scorecard, qa_score, риски, next steps [api_key]
- POST /v1/airus/calls/qa-score — QA-scorecard звонка по критериям + суммарный qa_score 0–100 [api_key]
- POST /v1/airus/calls/extract-actions — Договорённости и next steps (owner/due) + highlights из транскрипта [api_key]
- POST /v1/airus/calls/risk-flags — Риски и compliance звонка: жалобы, отказы, запрещённые обещания [api_key]
- POST /v1/airus/calls/batch — Пакетный QA-разбор архива звонков (Batch со скидкой) [jwt]

## documents
- POST /v1/airus/documents/extract — Извлечение полей документа с evidence (value/confidence/страница) [api_key]
- POST /v1/airus/documents/validate — Детерминированная валидация: ИНН/КПП, НДС, суммы, обязательные поля [api_key]
- POST /v1/airus/documents/risk-score — Document Risk Taxonomy: risk_score 0–100 и флаги по severity [api_key]
- POST /v1/airus/documents/process — Полный конвейер: извлечение → валидация → риски → human-review → actions → receipt [api_key]
- POST /v1/airus/documents/batch — Пакетная обработка архива документов (Batch со скидкой) [jwt]
- GET /v1/airus/documents/review — Очередь human-review: документы, требующие ручной проверки [jwt]
- GET /v1/airus/documents/risk-taxonomy — Document Risk Taxonomy v0 (справочник рисков) [public]
- GET /v1/airus/documents/ocr-routes — OCR Route Registry: каталог движков распознавания (provided_text доступен, провайдеры roadmap) [public]

## Hybrid и AI Firewall
- GET /v1/airus/incidents/timeline — Incident Timeline: хронология инцидентов безопасности/надёжности/финопса [jwt]
- GET /v1/airus/security/keys — Ключи со scope, статусом, расходом за день и risk-score [jwt]
- GET /v1/airus/security/spend-risk — Spend Risk Score по ключам (сигналы, уровни) [jwt]
- GET /v1/airus/security/risk-signals — Справочник сигналов и уровней spend-risk [jwt]
- POST /v1/airus/security/keys/:id/scope — Задать scope ключа: allowed/blocked models, ₽-кап, лимиты токенов [jwt]
- POST /v1/airus/security/keys/:id/freeze — Заморозить ключ (AbuseGuard) — шлюз мгновенно отклоняет [jwt]
- POST /v1/airus/security/keys/:id/unfreeze — Разморозить ключ [jwt]
- GET /v1/airus/data-routing/summary — Сводка маршрутов данных (hybrid) [jwt]
- GET /v1/airus/data-routing/boundary-summary — Data Boundary Control: распределение по route_type, blocked, unknown class [jwt]
- POST /v1/airus/data-routing/detect — Sensitive Data Auto-Tagger: детектор ПДн/финданных → suggested data_class [jwt]
- GET /v1/airus/firewall/summary — AI Firewall: abuse-события, блокировки [jwt]
- GET /v1/airus/firewall/key-scores — Key Abuse Score [jwt]
- POST /v1/airus/simulate — Policy Simulator: dry-run запроса через firewall/hybrid/data-boundary/allow-list без вызова модели [jwt]
- GET /v1/airus/approved-ai/model-catalog — Approved AI: каталог role-packs (модели/маршруты по отделам) [public]
- POST /v1/airus/approved-ai/apply-pack — Применить role-pack отдела к политике проекта (реальный enforcement) [jwt]
- GET /v1/airus/approved-ai/control — Approved AI Control dashboard: отделы, risky prompts, покрытие политиками [jwt]

## siem
- GET /v1/airus/siem/sources — Источники и форматы выгрузки событий безопасности (self-describing) [jwt]
- GET /v1/airus/siem/export — Выгрузка событий безопасности в SIEM: format=json|jsonl|cef|syslog, фильтры from/to/categories/min_severity [jwt]

## sdk
- GET /v1/airus/sdk/configs — Каталог конфигов интеграции AIRUS (OpenAI SDK, LangChain, LiteLLM, Cursor, Cline, n8n, k8s…) [public]
- GET /v1/airus/sdk/configs/:tool — Готовый конфиг подключения для конкретного инструмента [public]
- GET /v1/airus/sdk/postman — Postman Collection v2.1 всех эндпоинтов (импорт в Postman/Insomnia/Bruno) [public]
- GET /v1/airus/sdk/n8n-workflow — Готовый n8n workflow (HTTP Request → AIRUS chat) [public]

## creative
- POST /v1/airus/creative/campaign-pack — Бриф → варианты копирайта по каналам с brand/legal-проверкой и Creative Receipt [api_key]
- POST /v1/airus/creative/assets/generate — Генерация вариантов рекламного копирайта по брифу + проверки + approval-статус [api_key]
- POST /v1/airus/creative/brand-check — Детерминированная проверка копирайта на соответствие Brand Kit [api_key]
- POST /v1/airus/creative/legal-check — Legal Flags: маркировка рекламы, рисковые/медицинские заявления, ПДн [api_key]
- POST /v1/airus/creative/batch — Пакетная генерация под архив брифов (Batch со скидкой) [jwt]
- GET /v1/airus/creative/review — Очередь согласования: креативы, требующие marketer/legal review [jwt]
- GET /v1/airus/creative/legal-taxonomy — Legal Flags v0 + approval-статусы (справочник) [public]
- GET /v1/airus/creative/image-routes — Image Route Registry: copy_only доступен, YandexART/Kandinsky/GPT Image — roadmap [public]
- GET /v1/airus/creative/brand-kits — Примеры Brand Kit (персистентная библиотека — roadmap) [public]

## Тарифы
- GET /v1/airus/pricing/plans — Тарифы и SLA-классы [public]
- POST /v1/airus/pricing/estimate — Калькулятор месячного бюджета [public]
- POST /v1/airus/quotes — Запросить КП (Deal Desk) [jwt]

## BYOK
- GET /v1/airus/credentials — Provider-ключи в vault (секрет не показывается) [jwt]
- POST /v1/airus/credentials — Сохранить provider-ключ (AES-256-GCM), managed fallback [jwt]
- POST /v1/airus/credentials/:id/test — Health-check ключа [jwt]
- GET /v1/airus/byok/usage — Сводка по источникам оплаты [jwt]

## Организация/IAM
- GET /v1/airus/org/members — Участники и роли [jwt]
- POST /v1/airus/org/invites — Пригласить участника (роль) [jwt]
- GET /v1/airus/org/audit-log — Admin audit log (format=jsonl) [jwt]
- GET /v1/airus/org/readiness — Production readiness чек-лист [jwt]
- POST /v1/airus/org/cost-centers — Cost center с бюджетом [jwt]
- GET /v1/airus/org/key-rotation — Отчёт по ключам к ротации (возраст/простой/без владельца) [jwt]

## RAG
- POST /v1/airus/knowledge-bases — Создать базу знаний [jwt]
- POST /v1/airus/knowledge-bases/:id/documents — Проиндексировать документ (ACL scope) [jwt]
- POST /v1/airus/knowledge-bases/:id/query — RAG-запрос с citations и grounding score [jwt]
- GET /v1/airus/knowledge-bases/:id/health — Knowledge health (stale/conflict/cost per answer) [jwt]
- GET /v1/airus/knowledge-bases/:id/issues — Actionable issues: устаревшие/дубли/конфликтующие версии + рекомендации [jwt]
- GET /v1/airus/knowledge/connectors — Connector Registry: manual_upload доступен, Confluence/Notion/1С/Drive — roadmap [public]
- GET /v1/airus/knowledge/sources — Реестр источников знаний с freshness-разбивкой [jwt]
- GET /v1/airus/knowledge/quality — RAG Quality Metrics: stale_chunk_rate, acl_leak_rate, cost per answer [jwt]
- POST /v1/airus/knowledge/answer — Trusted Answer: решение (trusted/low_confidence/no_answer) + chunk evidence + receipt [jwt]

## evalops
- GET /v1/airus/evals/evaluator-types — Типы evaluator'ов, gate-операторы и действия [public]
- POST /v1/airus/evals/run — Прогон golden-датасета через маршрут → Eval Run Receipt (pass_rate, gate) [api_key]
- POST /v1/airus/evals/compare — Model-vs-model: baseline vs candidate → quality_delta + gate_decision [api_key]
- GET /v1/airus/evals/packs — Готовые eval-паки под use-case (evaluators + gate + пример датасета) [public]
- POST /v1/airus/evals/suites — Сохранить eval-suite (golden dataset + gate) для регрессии [jwt]
- GET /v1/airus/evals/suites — Список сохранённых eval-suites [jwt]
- POST /v1/airus/evals/suites/:id/run — Перезапуск сохранённого suite (регрессия во времени) [api_key]