Public API v1 directory

Evidence-ready data, with its boundaries attached.

PolicyWatcher exposes a small anonymous, read-only integration surface for public evidence metadata, portable evidence collections, cross-cloud agent briefs and the curated Observatory registry. The contract keeps publication gates, review cadence and source limits visible to the system consuming it.

Inspect endpoints Open JSON manifest Build a collection Verify signatures Inspect continuity

Publication-aware

Published evidence remains behind the same public gates used by the dashboard.

Registry-aware

Observatory records identify their local curation mode and manual review timestamp.

Operations excluded

There is no route here for admin records, credentials, raw content or operational diagnostics.

Endpoints

Six machine endpoints and one continuity workbench.

The six API endpoints accept `GET`, permit cross-origin read access without credentials, and apply bounded public-data and rate policies. The browser-local continuity workbench calls only the published change-event feed after an explicit user action.

GET

Integration manifest

/api/v1/manifest

Lists the current public data sources, allowed parameters, evidence gates, cache window and API boundaries.

curl https://policywatcher.online/api/v1/manifest

Open endpoint

GET

Observatory registry

/api/v1/observatory?lang=en

Returns localized sources, curated signals, scheduled events and the registry review context. Use `lang=it` for Italian.

curl "https://policywatcher.online/api/v1/observatory?lang=en"

Open endpoint

GET · AVAILABLE · BETA 17

Evidence collection bundle

/api/v1/evidence-collections

Resolves 1–12 canonical public change IDs into deterministic evidence bundles or a vendor-neutral human-review handoff. Personal titles, review states, assignees and due dates are never accepted.

?changes={id},{id}&format=handoff

Build a bounded request

GET · FORWARD POLLING

Published change events

/api/v1/change-events

Returns already-public policy change events with stable event IDs and an opaque forward cursor. It does not send notifications or confirm delivery.

?limit=25&lang=en&cursor={opaque}

Open event feed Open continuity lab

GET · READINESS CONTRACT

Webhook verification kit

/api/v1/webhook-verification-kit

Publishes the HMAC-SHA256 receiver contract, a public test-only vector and Node/Python examples. The public route does not register endpoints; a separate deployment-configured pilot can deliver eligible public events.

Open local verifier

GET · 8 FIXTURES

Receiver conformance suite

/api/v1/webhook-conformance-suite

Publishes eight deterministic positive and negative receiver cases covering every documented decision code. It does not test a live endpoint or delivery path.

Run locally

Enterprise pilot

Need a tenant boundary? Use API v2.

API v2 adds Microsoft Entra authentication, an allowlisted tenant claim, an Azure API Management policy and a Power Platform connector package. It remains read-only and does not replace v1.

OPENAPI

Agent Evidence Gateway

/api/v1/agent/openapi.json

Three flattened public operations for Microsoft 365 Copilot, Vertex AI Agent Builder and Amazon Quick source packages.

Open agent contract

OPENAPI

Enterprise API v2 contract

/api/v2/openapi.json

The contract is public; data routes require an Entra token with the expected tenant, audience and delegated scope or application role.

Open v2 contract

DECIDE

Integration options

/integrations

Compare API v1, the agent gateway, Enterprise API v2, Azure, Power Platform, Microsoft 365, Google Cloud, AWS, Word and planned private collaboration paths.

Choose a surface

Published sources remain explicit.

The manifest describes the established public data routes too. It does not turn them into unrestricted database access.

SourceEvidence boundaryFreshnessPath

dashboardCompaniesPublic companies with gated policies and their latest public change.

public-policyPer request/api/companies

companyComparisonEvidence-gated company and industry KPI benchmark profiles.

public-changePer request/api/compare

marketPulsePaginated public policy-change event stream.

public-change60s TTL/api/changes

policyDetailsPublic policy detail with gated snapshots and public change analysis.

public-changePer request/api/policies/{policyId}

sourceSuspensionsSanitized metadata for sources withheld by publication gates.

public-suspension60s TTL/api/source-suspensions

sourceContinuitySanitized history of source retrieval and publication-state transitions.

public-suspension60s TTL/api/source-continuity

observatoryRegistryCurated public registry of governance, privacy, standards and event references.

public-reference300s TTL/api/v1/observatory

evidenceCollectionsDeterministic JSON, Markdown, CSV or vendor-neutral review handoff for up to 12 exact public change records.

public-change300s TTL/api/v1/evidence-collections

publicChangeEventsForward-only polling feed for already-published policy change events.

public-change60s TTL/api/v1/change-events

webhookVerificationKitVersioned receiver-verification contract, public test vector and implementation examples; no delivery service.

public-reference86400s TTL/api/v1/webhook-verification-kit

webhookConformanceSuiteEight deterministic positive and negative receiver cases; no endpoint or delivery test.

public-reference86400s TTL/api/v1/webhook-conformance-suite

riskTrendsChronological public risk-change observations with snapshot provenance.

public-change60s TTL/api/trends

kpiMatrixCross-company KPI aggregation over public policy evidence.

public-policy60s TTL/api/matrix

Operating note

Connect to the evidence, not around it.

Use API v1 for anonymous public reading and API v2 for a controlled Entra tenant pilot. The readiness kit and conformance suite let receivers test the candidate signature contract locally. Subscriptions, signed outbound delivery and write operations remain future roadmap work.

Compare integrations