The API is the execution contract: request authorization before a workload runs, receive one binding action, then inspect proof, trace, replay, and provenance against the same decision frame.
POST /api/v1/ci/authorize
{
"requestId": "frame-001",
"preferredRegions": ["us-east-1", "us-west-2"],
"carbonWeight": 0.55,
"waterWeight": 0.35,
"latencyWeight": 0.05,
"costWeight": 0.05,
"decisionMode": "runtime_authorization",
"jobType": "standard",
"criticality": "standard",
"waterPolicyProfile": "default",
"allowDelay": true,
"estimatedEnergyKwh": 2.5
}{
"decision": "delay",
"decisionFrameId": "fb6014d7-b190-430b-9bf9-0a48bc6e31f1",
"selectedRegion": "us-east-1",
"reasonCode": "DELAY_HIGH_WATER",
"proofHash": "efd5d83e754208afbca395e7cf0e6e07b905be43293e4b161adafda5b5a72b63",
"waterAuthority": {
"authorityMode": "basin",
"scenario": "current"
},
"policyTrace": {
"policyVersion": "co2_router_doctrine_v1"
}
}