跳转到内容

裁决人池签名工件签发:平台工件(org 缺席)匿名可读(完整性由 ed25519 自证;CLI managed 锚 adjudicatorPool.url 消费,锚亦可指向自托管静态文件);?org=<org 公开 id> = 平台池 + 该 org active 自建档聚合,**org 定向面判敏感须鉴权**——任一即过:Bearer(JWT/PAT,PAT 须 control scope)且主体为该 org active 成员(任意角色)或该 org 自身(org PAT),或 x-tansr-admin-key(ADMIN_READ);判定序 = 签名交割位 503 → 鉴权 → org 存在性/成员资格;层级格律在写面已钳,签发只读直投,CLI 恒不做多层合并;签发面跳过 status!=active/revoked 在场/validUntil 已过;验签 payload = stableStringify({schemaVersion,kind,entries,meta})(kernel verify.ts 同源口径),sequence = 签发时刻 epoch ms(CLI 防回滚水位);密钥未交割 503 pool_signing_undelivered(fail-closed 交割位);高频读面不落审计;cache-control: no-store(工件自带 expiresAt 时窗)

GET
/v1/adjudicator-pool/artifact
curl --request GET \
--url https://api.tansr.com/v1/adjudicator-pool/artifact
org
string

Org 公开 id:签发该 org 定向工件(平台池 + org 扩容段;在场须鉴权,RFC-U3b §2.2)

签名工件

Media typeapplication/json
object
schemaVersion
required
number
Allowed value: 1
kind
required
string
Allowed value: adjudicator-pool
entries
required
Array<object>
object
profileId
required
string
name
required
string
handle

任命句柄(平台目录 handle);缺席 = 跟随会话父模型(046 语义)

string
tier
required
Any of:
string
Allowed value: low
origin
required
Any of:
string
Allowed value: platform
evaluation
required
object
status
required
Any of:
string
Allowed value: evaluated
reportRef

评估报告回挂(INV-5 产出引用)

string
fingerprint

评估时点协议指纹(D8 漂移判定基线)

string
evaluatedAt

ISO 8601

string
budgets
object
disposition
Any of:
string
Allowed value: parent
validUntil

ISO 8601;过期条目 CLI 解析期跳过

string
pricing

裁决流量计价挂点(P2 透传不消费)

object
meta
required
object
issuer
required
string
sequence
required

签发时刻 epoch ms(单调水位;CLI 防回滚比较 < 拒 / == 合法)

integer
issuedAt
required
string
expiresAt
required

签发时刻 + TTL(缺省 7 天);过窗 CLI 拒收走回退链

string
audience
required

受众绑定(R5-P1-1,入签名域):‘platform’ = 全网平台工件;‘org:’ = org 定向工件。验签端须比对与预期受众一致,不匹配即拒收(平台工件顶替 org 定向工件的防线)

string
/^(platform|org:[A-Za-z0-9_-]{1,64})$/
keyId
required

签名键 id(入签名域;与 signature.keyId 同值,验签端须比对两处一致)

string
signature
required
object
keyId
required
string
sig
required

Base64(ed25519 raw 64B)

string
Example
{
"schemaVersion": 1,
"kind": "adjudicator-pool",
"entries": [
{
"tier": "low",
"origin": "platform",
"evaluation": {
"status": "evaluated"
},
"disposition": "parent"
}
]
}

Unauthorized/token_expired/invalid_api_key/admin_key_invalid(org= 在场且凭据缺席或无效;各按既有鉴权链原样)

Media typeapplication/json
object
error
required
object
code
required

错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)

string
Allowed values: adjudicator_not_authorized admin_forbidden admin_key_invalid app_disabled app_ip_denied app_key_invalid approval_self_forbidden asr_not_configured asr_quota_exceeded auth_channel_undelivered bad_request conflict content_blocked context_window_exceeded currency_not_supported device_code_denied device_code_expired device_code_pending device_code_slow_down egress_blocked endpoint_disabled envelope_key_undelivered fence_denied forbidden idempotency_conflict idp_untrusted image_not_supported imagegen_not_configured imagegen_quota_exceeded insufficient_balance internal_error invalid_api_key license_required limit_exceeded liquidation_not_enabled model_not_authorized model_not_found nonce_replayed not_found order_state_invalid org_byok_not_available org_ceiling_exceeded otp_invalid otp_rate_limited pay_amount_mismatch pay_channel_undelivered pay_signature_invalid payload_too_large payment_required plan_apps_exceeded plan_concurrency_exceeded plan_end_users_exceeded plan_gate_unavailable plan_members_exceeded plan_required plan_tier_insufficient policy_locked pool_signing_undelivered preflight_required pricing_guard_tripped principal_required protocol_unsupported quota_exceeded rate_limited refund_not_eligible section_not_deliverable session_archived signature_invalid stream_backpressure token_expired tts_not_configured tts_quota_exceeded unauthorized upstream_connect_timeout upstream_disconnected upstream_error upstream_idle_timeout upstream_timeout upstream_total_timeout upstream_ttfb_timeout validation_failed videogen_not_configured videogen_quota_exceeded websearch_not_configured websearch_quota_exceeded
message
required
string
requestId
required
string
detail
object
Example
{
"error": {
"code": "adjudicator_not_authorized"
}
}

Forbidden(PAT 缺 control scope)/ admin_forbidden(admin 角色不足)

Media typeapplication/json
object
error
required
object
code
required

错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)

string
Allowed values: adjudicator_not_authorized admin_forbidden admin_key_invalid app_disabled app_ip_denied app_key_invalid approval_self_forbidden asr_not_configured asr_quota_exceeded auth_channel_undelivered bad_request conflict content_blocked context_window_exceeded currency_not_supported device_code_denied device_code_expired device_code_pending device_code_slow_down egress_blocked endpoint_disabled envelope_key_undelivered fence_denied forbidden idempotency_conflict idp_untrusted image_not_supported imagegen_not_configured imagegen_quota_exceeded insufficient_balance internal_error invalid_api_key license_required limit_exceeded liquidation_not_enabled model_not_authorized model_not_found nonce_replayed not_found order_state_invalid org_byok_not_available org_ceiling_exceeded otp_invalid otp_rate_limited pay_amount_mismatch pay_channel_undelivered pay_signature_invalid payload_too_large payment_required plan_apps_exceeded plan_concurrency_exceeded plan_end_users_exceeded plan_gate_unavailable plan_members_exceeded plan_required plan_tier_insufficient policy_locked pool_signing_undelivered preflight_required pricing_guard_tripped principal_required protocol_unsupported quota_exceeded rate_limited refund_not_eligible section_not_deliverable session_archived signature_invalid stream_backpressure token_expired tts_not_configured tts_quota_exceeded unauthorized upstream_connect_timeout upstream_disconnected upstream_error upstream_idle_timeout upstream_timeout upstream_total_timeout upstream_ttfb_timeout validation_failed videogen_not_configured videogen_quota_exceeded websearch_not_configured websearch_quota_exceeded
message
required
string
requestId
required
string
detail
object
Example
{
"error": {
"code": "adjudicator_not_authorized"
}
}

Not_found(org 不存在/非 active/请求者非成员/他 org 的 org PAT,不泄露存在性)

Media typeapplication/json
object
error
required
object
code
required

错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)

string
Allowed values: adjudicator_not_authorized admin_forbidden admin_key_invalid app_disabled app_ip_denied app_key_invalid approval_self_forbidden asr_not_configured asr_quota_exceeded auth_channel_undelivered bad_request conflict content_blocked context_window_exceeded currency_not_supported device_code_denied device_code_expired device_code_pending device_code_slow_down egress_blocked endpoint_disabled envelope_key_undelivered fence_denied forbidden idempotency_conflict idp_untrusted image_not_supported imagegen_not_configured imagegen_quota_exceeded insufficient_balance internal_error invalid_api_key license_required limit_exceeded liquidation_not_enabled model_not_authorized model_not_found nonce_replayed not_found order_state_invalid org_byok_not_available org_ceiling_exceeded otp_invalid otp_rate_limited pay_amount_mismatch pay_channel_undelivered pay_signature_invalid payload_too_large payment_required plan_apps_exceeded plan_concurrency_exceeded plan_end_users_exceeded plan_gate_unavailable plan_members_exceeded plan_required plan_tier_insufficient policy_locked pool_signing_undelivered preflight_required pricing_guard_tripped principal_required protocol_unsupported quota_exceeded rate_limited refund_not_eligible section_not_deliverable session_archived signature_invalid stream_backpressure token_expired tts_not_configured tts_quota_exceeded unauthorized upstream_connect_timeout upstream_disconnected upstream_error upstream_idle_timeout upstream_timeout upstream_total_timeout upstream_ttfb_timeout validation_failed videogen_not_configured videogen_quota_exceeded websearch_not_configured websearch_quota_exceeded
message
required
string
requestId
required
string
detail
object
Example
{
"error": {
"code": "adjudicator_not_authorized"
}
}

Pool_signing_undelivered(签名私钥未交割)

Media typeapplication/json
object
error
required
object
code
required

错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)

string
Allowed values: adjudicator_not_authorized admin_forbidden admin_key_invalid app_disabled app_ip_denied app_key_invalid approval_self_forbidden asr_not_configured asr_quota_exceeded auth_channel_undelivered bad_request conflict content_blocked context_window_exceeded currency_not_supported device_code_denied device_code_expired device_code_pending device_code_slow_down egress_blocked endpoint_disabled envelope_key_undelivered fence_denied forbidden idempotency_conflict idp_untrusted image_not_supported imagegen_not_configured imagegen_quota_exceeded insufficient_balance internal_error invalid_api_key license_required limit_exceeded liquidation_not_enabled model_not_authorized model_not_found nonce_replayed not_found order_state_invalid org_byok_not_available org_ceiling_exceeded otp_invalid otp_rate_limited pay_amount_mismatch pay_channel_undelivered pay_signature_invalid payload_too_large payment_required plan_apps_exceeded plan_concurrency_exceeded plan_end_users_exceeded plan_gate_unavailable plan_members_exceeded plan_required plan_tier_insufficient policy_locked pool_signing_undelivered preflight_required pricing_guard_tripped principal_required protocol_unsupported quota_exceeded rate_limited refund_not_eligible section_not_deliverable session_archived signature_invalid stream_backpressure token_expired tts_not_configured tts_quota_exceeded unauthorized upstream_connect_timeout upstream_disconnected upstream_error upstream_idle_timeout upstream_timeout upstream_total_timeout upstream_ttfb_timeout validation_failed videogen_not_configured videogen_quota_exceeded websearch_not_configured websearch_quota_exceeded
message
required
string
requestId
required
string
detail
object
Example
{
"error": {
"code": "adjudicator_not_authorized"
}
}