Backend health check (GET /). Confirms API URL, version, and hosted-API notice.

Create a new investigation. Returns access_token ONCE -- store it; it cannot be recovered. New investigations are encrypted at rest; the key is derived from the token.

Fetch investigation metadata and practitioner metadata.

PATCH practitioner metadata: triggering_events and/or time_bounds (paper §4.2.2 / §5.2.1). Active only.

Mark investigation read-only (sealed). Ingest and attribution disabled; data stays readable with the token.

Hard-delete an ACTIVE investigation (MySQL rows + R2 investigation prefix). Sealed/archived refuse. sha256 blobs retained.

Active seed count and manifest artifact count.

List seed accounts for the investigation.

Add a seed account (platform + handle + basis_statement). Active only. Cap: MAX_SEED_ACCOUNTS.

Soft-delete an active seed (audit row retained).

Query extracted features (account / pair / event) after ingest+extract.

Upload Apify Twitter export JSON (array or {items|data}). Archives + runs extractors. Returns jobId; poll get_ingest_job until completed. Active only.

Poll ingest job status by job_id from ingest_apify_twitter.

Run attribution over active seed pairs. Public host requires BYOK (ai_gateway_url + anthropic_api_key or cf_aig_token). May return 200 sync or 202 async jobId.

Poll async attribution job from attribute (202 response).

List attribution runs (summaries) for the investigation.

Single attribution run with parsed output (claims, alternatives, declined pairs, triage).

Evidence packet (§8.1). Default JSON for latest run; pass run_id for a specific run. format=markdown returns markdown text; format=pdf returns base64 PDF (needs PDF worker).

List archive manifest entries for the investigation.

List manifest signature records.

Verify manifest signatures for the investigation.

Dev visibility: extractor vs manifest for the investigation (not a methodology deliverable).

Dev visibility: raw manifest breakdown.