{
  "service": "DEMI Vault Gate v0.2.1-pilot",
  "operator": "UplitAU Pty Ltd, ABN 91 680 646 495, Sydney, Australia",
  "registry": "https://demi-proxy.flat-bonus-ffc5.workers.dev",
  "rule": "A deposit is accepted only if its SHA-256 equals a fingerprint in the record (main file or other file).",
  "permits": {
    "closed": "fingerprint only (default)",
    "private": "only expiring links the owner makes; no public requests",
    "request": "anyone may ask; the owner releases expiring links",
    "open": "anyone may read"
  },
  "pages": {
    "GET /vault/{UPL}/owner": "owner page: deposit, permit, requests, links, log",
    "GET /vault/{UPL}/request": "ask the owner for the file",
    "GET /sorter": "find registered files in a folder (fingerprints only are sent)"
  },
  "endpoints": {
    "GET /vault/{UPL}/info": "public status",
    "GET /vault/{UPL}/fingerprints": "the record's registered fingerprints",
    "GET /vault/{UPL}/file[?f=sha256][&t=token]": "read a file (open, or with a release link)",
    "POST /vault/{UPL}/request": "public: {name, email, purpose}",
    "POST /match": "public: {hashes:[...]} -> registered matches",
    "GET /vault/{UPL}/check": "owner: is my key accepted?",
    "POST /vault/{UPL}/deposit?name=": "owner: upload a registered file (raw body)",
    "POST /vault/{UPL}/permit": "owner: {\"level\":\"closed|private|request|open\"}",
    "POST /vault/{UPL}/release": "owner: {\"hours\":24,\"label\":\"for ...\",\"to\":\"email (optional)\"} -> link (+ message for Claude)",
    "POST /vault/{UPL}/revoke": "owner: {\"all\":true} or {\"id\":\"...\"}",
    "GET /vault/{UPL}/requests": "owner: list requests",
    "POST /vault/{UPL}/decide": "owner: {\"id\",\"decision\":\"approve|decline\",\"hours\"}",
    "GET /vault/{UPL}/export": "owner: export package for an institution's vault",
    "GET /vault/{UPL}/log": "owner: audit log",
    "DELETE /vault/{UPL}": "owner: delete files, permit, links and requests",
    "POST /mcp": "read-only MCP tool get_file_link"
  },
  "note": "A record shows that a file existed by a certain time. It does not establish authorship, ownership or legal rights."
}