Capability matrix

Every command has a role, route or boundary.

Public discovery is open. Authenticated finance and paid execution are gated. Administrative commands stay outside the public HTTP surface.

21 capabilities

HELLOProtocol greeting and public edge proof.Discovery / publicGET /api/v1/hellohello

CAPSMachine-readable capability advertisement.Discovery / publicGET /api/v1/capscaps

BALANCEAuthenticated account balance view.Finance / authPOST /api/v1/balancebalance

QUOTEPrice and reservation preview before execution.Finance / publicPOST /api/v1/quotes/*quote-*

ACCEPT_QUOTEAccept an issued quote after funding.Finance / authPOST /api/v1/quotes/{id}/acceptaccept-quote

GET_PULSEBaseline proof workload.Execution / paidPOST /api/v1/executions/get-pulseget-pulse

MAKE_BCTCreate a sealed BCT packet.Execution / paidPOST /api/v1/executions/make-bctmake-bct

VERIFY_BCTVerify and open a BCT packet.Execution / paidPOST /api/v1/executions/verify-bctverify-bct

VERIFY_RESULTVerify an execution result tag.Proof / paidPOST /api/v1/executions/verify-resultverify-result

ATTEST_EVENTCreate event attestation fields.Proof / paidPOST /api/v1/executions/attest-eventattest-event

SUBMIT_IDExecute the ID service.Identity / paidPOST /api/v1/executions/submit-idsubmit-id

BVM_EXECRun bounded BVM bytecode.Execution / paidPOST /api/v1/executions/bvm-execbvm-exec

SEALED_MESSAGESeal message payloads.Execution / paidPOST /api/v1/executions/sealed-messagesealed-message

TIMESTAMP_PROOFIssue timestamp proof metadata.Proof / paidPOST /api/v1/executions/timestamp-prooftimestamp-proof

MACHINE_EVENT_LOGCommit machine event log summaries.Proof / paidPOST /api/v1/executions/machine-event-logmachine-event-log

GET_RECEIPTReserved receipt fetch command; public HTTP receipt fetch is not exposed.Receipt / reservednot publicget-receipt

VERIFY_RECEIPTVerify receipt material for free.Receipt / publicPOST /api/v1/receipts/verifyverify-receipt

FUND_ACCOUNTCreate account funding invoice.Finance / authPOST /api/v1/invoicesfund-account

INVOICE_STATUSCheck invoice settlement state.Finance / authGET /api/v1/invoices/{id}invoice-status

SETTLE_INVOICEAdministrative settlement command.Admin / adminnot publicsettle-invoice

RECOVER_RUNTIMEAdministrative runtime recovery command.Admin / adminnot publicrecover-runtime

Full table.

HTTP route is listed only where that surface is intended to exist.

Command	Group	Access	HTTP	CLI	Purpose
`HELLO`	Discovery	public	`GET /api/v1/hello`	`hello`	Protocol greeting and public edge proof.
`CAPS`	Discovery	public	`GET /api/v1/caps`	`caps`	Machine-readable capability advertisement.
`BALANCE`	Finance	auth	`POST /api/v1/balance`	`balance`	Authenticated account balance view.
`QUOTE`	Finance	public	`POST /api/v1/quotes/*`	`quote-*`	Price and reservation preview before execution.
`ACCEPT_QUOTE`	Finance	auth	`POST /api/v1/quotes/{id}/accept`	`accept-quote`	Accept an issued quote after funding.
`GET_PULSE`	Execution	paid	`POST /api/v1/executions/get-pulse`	`get-pulse`	Baseline proof workload.
`MAKE_BCT`	Execution	paid	`POST /api/v1/executions/make-bct`	`make-bct`	Create a sealed BCT packet.
`VERIFY_BCT`	Execution	paid	`POST /api/v1/executions/verify-bct`	`verify-bct`	Verify and open a BCT packet.
`VERIFY_RESULT`	Proof	paid	`POST /api/v1/executions/verify-result`	`verify-result`	Verify an execution result tag.
`ATTEST_EVENT`	Proof	paid	`POST /api/v1/executions/attest-event`	`attest-event`	Create event attestation fields.
`SUBMIT_ID`	Identity	paid	`POST /api/v1/executions/submit-id`	`submit-id`	Execute the ID service.
`BVM_EXEC`	Execution	paid	`POST /api/v1/executions/bvm-exec`	`bvm-exec`	Run bounded BVM bytecode.
`SEALED_MESSAGE`	Execution	paid	`POST /api/v1/executions/sealed-message`	`sealed-message`	Seal message payloads.
`TIMESTAMP_PROOF`	Proof	paid	`POST /api/v1/executions/timestamp-proof`	`timestamp-proof`	Issue timestamp proof metadata.
`MACHINE_EVENT_LOG`	Proof	paid	`POST /api/v1/executions/machine-event-log`	`machine-event-log`	Commit machine event log summaries.
`GET_RECEIPT`	Receipt	reserved	`not public`	`get-receipt`	Reserved receipt fetch command; public HTTP receipt fetch is not exposed.
`VERIFY_RECEIPT`	Receipt	public	`POST /api/v1/receipts/verify`	`verify-receipt`	Verify receipt material for free.
`FUND_ACCOUNT`	Finance	auth	`POST /api/v1/invoices`	`fund-account`	Create account funding invoice.
`INVOICE_STATUS`	Finance	auth	`GET /api/v1/invoices/{id}`	`invoice-status`	Check invoice settlement state.
`SETTLE_INVOICE`	Admin	admin	`not public`	`settle-invoice`	Administrative settlement command.
`RECOVER_RUNTIME`	Admin	admin	`not public`	`recover-runtime`	Administrative runtime recovery command.