{
  "protocol": "globax-proof/1",
  "api_version": "1.0.0",
  "service": {
    "name": "GlobaX Public Proof Verification API",
    "operator": "GLOBAX SOCIALFUSION LTD",
    "operator_registration": "England and Wales, company no. 17141387",
    "website": "https://globax-social-fusion.com",
    "documentation": "https://globax-social-fusion.com/interoperability",
    "contact": "mailto:security@globax-social-fusion.com"
  },
  "description": "GlobaX records human activity as deterministic system records ('proof moments'). Each record carries a stable public identifier (gx_code). This API lets any independent system resolve that identifier and read the record's verification state without access to GlobaX's private application interface.",
  "authentication": "none",
  "cors": "enabled (*)",
  "rate_limit": "fair use; no key required during public beta",
  "endpoints": [
    {
      "id": "capabilities",
      "method": "GET",
      "path": "/api/public/v1/capabilities",
      "description": "This discovery document."
    },
    {
      "id": "resolve_proof",
      "method": "GET",
      "path": "/api/public/v1/proof/{gx_code}",
      "description": "Resolve a GlobaX proof identifier to its machine-readable verification state.",
      "parameters": [
        {
          "name": "gx_code",
          "in": "path",
          "required": true,
          "pattern": "^[A-Za-z0-9_.:-]{3,128}$",
          "example": "gx_post_57647469-5cfd-4251-9467-45538ddd6482"
        }
      ],
      "responses": {
        "200": "Proof record found; verification payload returned.",
        "400": "Malformed identifier.",
        "404": "No public proof record resolves to this identifier.",
        "503": "Verification service temporarily unavailable."
      },
      "response_fields": [
        "proof.proof_id",
        "proof.gx_code",
        "proof.proof_type",
        "proof.module",
        "proof.receipt_state",
        "proof.lifecycle_status",
        "proof.is_demo",
        "proof.recorded_at",
        "proof.label",
        "proof.location_label",
        "proof.prototype_notice",
        "integrity.canonical_uri",
        "integrity.human_uri",
        "integrity.record_digest",
        "integrity.digest_algorithm",
        "integrity.digest_input",
        "integrity.checked_at"
      ]
    }
  ],
  "integrity": {
    "digest_algorithm": "sha-256",
    "digest_input": "protocol|proof_id|gx_code|moment_type|receipt_state|status|is_demo|created_at",
    "note": "The digest is a deterministic fingerprint of the verification fields, allowing an external system to detect drift between two reads of the same record. It is not a signature and does not attest to external facts."
  },
  "privacy": {
    "personal_data_returned": "none",
    "withheld_fields": [
      "account identifier",
      "action trail",
      "media and images",
      "record title",
      "share links",
      "internal application paths"
    ],
    "enforcement": "The API projects only the listed verification fields. The owning account identifier is additionally blocked for anonymous callers at the database layer by column-level grants, so it cannot be retrieved by any unauthenticated request."
  },
  "boundaries": {
    "environment": "public_beta_prototype",
    "verifies": [
      "that a proof record with this identifier exists in the GlobaX system of record",
      "the module and moment type the record was created under",
      "the recorded receipt state and lifecycle status",
      "the timestamp at which the record was written",
      "whether the record is seeded demonstration data"
    ],
    "does_not_verify": [
      "identity of any account, person, or organisation",
      "any monetary amount, balance, payment, settlement, or withdrawal",
      "eligibility for money, shares, securities, or any financial product",
      "endorsement, partnership, certification, or accreditation by GlobaX",
      "external real-world facts asserted by a user inside the recorded activity"
    ],
    "notice": "Public beta prototype. Recognition and record-keeping only. A verified proof record is not a payment, settlement, investment, security, guarantee, or partner claim."
  },
  "discovery": {
    "well_known": "https://globax-social-fusion.com/.well-known/globax-proof.json",
    "human_specification": "https://globax-social-fusion.com/interoperability",
    "sitemap": "https://globax-social-fusion.com/sitemap.xml"
  },
  "status": {
    "stability": "beta",
    "versioning": "Breaking changes ship under a new path prefix (/api/public/v2/...). v1 fields are additive-only.",
    "last_updated": "2026-08-28"
  }
}