launcher/docs/integration-contract.md

30 lines
1.1 KiB
Markdown

# Launcher Integration Contract
Launcher integrates with EDUT web/backend contracts as follows:
## Required APIs
1. `POST /secret/wallet/intent`
2. `POST /secret/wallet/verify`
3. `POST /secret/membership/quote`
4. `POST /secret/membership/confirm`
5. `GET /secret/membership/status`
6. `GET /marketplace/offers`
7. `POST /marketplace/checkout/quote`
8. `POST /marketplace/checkout/confirm`
9. `GET /marketplace/entitlements`
10. `POST /governance/install/token`
11. `POST /governance/install/confirm`
12. `GET /governance/install/status`
13. `GET /member/channel/events`
## Deterministic Requirements
1. No runtime activation without entitlement proof.
2. All install packages verified by hash and signature.
3. Membership and entitlement unknown state fails closed.
4. Event inbox polling remains canonical even if push unavailable.
5. Identity assurance is evaluated independently from membership state.
6. Owner/admin launcher actions must require `identity_assurance_level=onramp_attested`.
7. Governance activation evidence must include signing authority class (`identity_human` vs delegated).