v0.52.0 — Trust API Surface (NA HTTP Endpoints)
Summary
Six new Network Authority route blueprints expose every SDK-required stable protocol operation over HTTP.
The SDK tier (v0.53 TypeScript, v0.54 Go, v0.55 C#) now has a well-tested HTTP surface to call, rather than needing to reimplement the protocol cryptography independently.
New HTTP routes
| Domain | Routes |
|---|---|
| Agreement | POST /admin/agreements/offer, /counter, /accept · POST /agreements/verify |
| Boundary | POST /admin/boundary/decide · POST /boundary/verify |
| Trust evidence | POST /admin/trust-evidence · POST /trust-evidence/verify |
| Selective disclosure | POST /admin/disclosure/commit, /nullifier · POST /disclosure/prove, /verify |
| Consensus | POST /admin/consensus/vote, /proof · POST /consensus/verify |
| Data usage | POST /admin/data-usage/policy, /intent · GET /data-usage/policy · POST /data-usage/verify |
Security constraint
Admin routes enforce one rule: the NA constructs canonical protocol artifacts from declared intent and signs them. Pre-built model payloads are never accepted for signing. POST /disclosure/prove is intentionally unauthenticated — all inputs are caller-supplied and no NA state is used.
HTTP reference
Full documentation at docs/api/trust-http.md: route, auth, request/response shape, error codes, and curl examples for every endpoint.
Tests
45 new tests in genesis_mesh/tests/test_na_trust_api.py. Full suite: 1,088 tests passing.