Publication-aware
Published evidence remains behind the same public gates used by the dashboard.
PolicyWatcher
Loading verified public evidence
The page will appear when its current evidence state is available.
Public API v1 directory
Developer APIs and tools
PolicyWatcher exposes a small anonymous, read-only integration surface for public evidence metadata, database-derived publication readiness, portable evidence collections, cross-cloud agent briefs and the curated Observatory registry. The contract keeps publication gates, review cadence and source limits visible to the system consuming it.
Registry-aware
Observatory records identify their local curation mode and manual review timestamp.
Operations excluded
There is no route here for admin records, credentials, raw content or operational diagnostics.
Public endpoints
Seven machine endpoints and one continuity workbench. The seven API endpoints accept `GET`, permit cross-origin read access without credentials, and apply bounded public-data and rate policies. The browser-local continuity workbench calls only the published change-event feed after an explicit user action.
GET
Integration manifest
/api/v1/manifestLists the current public data sources, allowed parameters, evidence gates, cache window and API boundaries.
curl https://policywatcher.online/api/v1/manifestGET · AUTHORITATIVE · NO-STORE
Publication readiness
/api/v1/publication-readinessReturns one database-derived aggregate metric with `Cache-Control: no-store`. Counts and the latest successful capture are exposed without policy text, internal identifiers or record-level detail.
configured → retrieved → baseline verified → public → analysed · latest captureGET
Observatory registry
/api/v1/observatory?lang=enReturns localized sources, curated signals, scheduled events and the registry review context. Use `lang=it` for Italian.
curl "https://policywatcher.online/api/v1/observatory?lang=en"GET · AVAILABLE · BETA 17
Evidence collection bundle
/api/v1/evidence-collectionsResolves 1–12 canonical public change IDs into deterministic evidence bundles or a vendor-neutral human-review handoff. Personal titles, review states, assignees and due dates are never accepted.
?changes={id},{id}&format=handoffGET · FORWARD POLLING
Published change events
/api/v1/change-eventsReturns already-public policy change events with stable event IDs and an opaque forward cursor. It does not send notifications or confirm delivery.
?limit=25&lang=en&cursor={opaque}GET · READINESS CONTRACT
Webhook verification kit
/api/v1/webhook-verification-kitPublishes the HMAC-SHA256 receiver contract, a public test-only vector and Node/Python examples. The public route does not register endpoints; a separate deployment-configured pilot can deliver eligible public events.
Open local verifierGET · 8 FIXTURES
Receiver conformance suite
/api/v1/webhook-conformance-suitePublishes eight deterministic positive and negative receiver cases covering every documented decision code. It does not test a live endpoint or delivery path.
Run locallyEnterprise API v2
API v2 adds Microsoft Entra authentication, an allowlisted tenant claim, an Azure API Management policy and a Power Platform connector package. It remains read-only and does not replace v1.
OPENAPI
Agent Evidence Gateway
/api/v1/agent/openapi.jsonThree flattened public operations for Microsoft 365 Copilot, Vertex AI Agent Builder and Amazon Quick source packages.
Open agent contractOPENAPI
Enterprise API v2 contract
/api/v2/openapi.jsonThe contract is public; data routes require an Entra token with the expected tenant, audience and delegated scope or application role.
Open v2 contractDECIDE
Integration options
/integrationsCompare API v1, the agent gateway, Enterprise API v2, Azure, Power Platform, Microsoft 365, Google Cloud, AWS, Word and planned private collaboration paths.
Choose a surfacePublished source directory
The manifest describes the established public data routes too. It does not turn them into unrestricted database access.
SourceEvidence boundaryFreshnessPath
dashboardCompaniesPublic companies with gated policies and their latest public change.
public-policyPer request/api/companiescompanyComparisonEvidence-gated company and industry KPI benchmark profiles.
public-changePer request/api/comparemarketPulsePaginated public policy-change event stream.
public-change60s TTL/api/changespolicyDetailsPublic policy detail with gated snapshots and public change analysis.
public-changePer request/api/policies/{policyId}sourceSuspensionsSanitized metadata for sources withheld by publication gates.
public-suspension60s TTL/api/source-suspensionssourceContinuitySanitized history of source retrieval and publication-state transitions.
public-suspension60s TTL/api/source-continuityobservatoryRegistryCurated public registry of governance, privacy, standards and event references.
public-reference300s TTL/api/v1/observatorypublicationReadinessAuthoritative database-derived configured-to-analysed readiness funnel and latest successful capture timestamp.
public-referencePer request/api/v1/publication-readinessevidenceCollectionsDeterministic JSON, Markdown, CSV or vendor-neutral review handoff for up to 12 exact public change records.
public-change300s TTL/api/v1/evidence-collectionspublicChangeEventsForward-only polling feed for already-published policy change events.
public-change60s TTL/api/v1/change-eventswebhookVerificationKitVersioned receiver-verification contract, public test vector and implementation examples; no delivery service.
public-reference86400s TTL/api/v1/webhook-verification-kitwebhookConformanceSuiteEight deterministic positive and negative receiver cases; no endpoint or delivery test.
public-reference86400s TTL/api/v1/webhook-conformance-suiteriskTrendsChronological public risk-change observations with snapshot provenance.
public-change60s TTL/api/trendskpiMatrixCross-company KPI aggregation over public policy evidence.
public-policy60s TTL/api/matrixOperating note
Compare integrations API access models
Use API v1 for anonymous public reading and API v2 for a controlled Entra tenant pilot. The readiness kit and conformance suite let receivers test the candidate signature contract locally. Subscriptions, signed outbound delivery and write operations remain future roadmap work.