launcher/docs/integration-contract.md

Launcher Integration Contract

Launcher integrates with EDUT web/backend contracts as follows:

Required APIs

1. POST /secret/wallet/intent
2. POST /secret/wallet/verify
3. POST /secret/membership/quote
4. POST /secret/membership/confirm
5. GET /secret/membership/status
6. GET /marketplace/offers
7. POST /marketplace/checkout/quote
8. POST /marketplace/checkout/confirm
9. GET /marketplace/entitlements
10. POST /governance/install/token
11. POST /governance/install/confirm
12. GET /governance/install/status
13. GET /member/channel/events

Deterministic Requirements

1. No runtime activation without entitlement proof.
2. All install packages verified by hash and signature.
3. Membership and entitlement unknown state fails closed.
4. Event inbox polling remains canonical even if push unavailable.
5. Identity assurance is evaluated independently from membership state.
6. Owner/admin launcher actions must require identity_assurance_level=onramp_attested.
7. Governance activation evidence must include signing authority class (identity_human vs delegated).