CSOAI API v1 — Sovereign Substrate Specification

Base URL: https://api.csoai.org/v1 · Auth: Bearer (Watchdog Cert) · Format: JSON

Authentication

All API calls require a Watchdog Certificate as a Bearer token:

Authorization: Bearer WDG-2026-07-04-MALLORY-002

Each Watchdog Certificate is Ed25519-signed and tied to a specific entity + regulation + scope.

Endpoints

Certificate Operations

POST/certificates/issue

Issue a new Watchdog Certificate.

POST /v1/certificates/issue
{
  "entity": "string",
  "system": "string",
  "regulation": "EU AI Act Article 14",
  "score": 95,
  "findings": ["PII redacted per state", "Sovereign substrate", "BFT council audit"]
}
→ 201 Created
{
  "cert_id": "WDG-2026-07-04-SAP-001",
  "signature": "ed25519:...",
  "digest": "sha256:...",
  "issued_at": "2026-07-04T09:00:00Z",
  "verify_url": "https://csoai.org/verify/WDG-2026-07-04-SAP-001"
}

GET/certificates/{id}

Retrieve a Watchdog Certificate by ID.

GET /v1/certificates/WDG-2026-07-04-SAP-001
→ 200 OK
{
  "cert_id": "WDG-2026-07-04-SAP-001",
  "entity": "SAP",
  "system": "SAP S/4HANA AI Module",
  "regulation": "EU AI Act Article 14",
  "score": 95,
  "findings": [...],
  "signature": "ed25519:...",
  "digest": "sha256:...",
  "issued_at": "2026-07-04T09:00:00Z",
  "verified": true
}

POST/certificates/verify

Verify a Watchdog Certificate signature + digest.

POST /v1/certificates/verify
{
  "cert_id": "WDG-2026-07-04-SAP-001",
  "signature": "ed25519:...",
  "digest": "sha256:..."
}
→ 200 OK
{
  "verified": true,
  "verified_at": "2026-07-04T10:00:00Z",
  "sigil_chain_entry": "abc123..."
}

BFT Council Operations

POST/bft/provision

Provision a new BFT council.

POST /v1/bft/provision
{
  "setup": "strict",  // lite | standard | strict | parliament | custom
  "size": 33,
  "threshold_pct": 67,
  "region": "sovereign"
}
→ 201 Created
{
  "council_id": "bft-strict-abc123",
  "voters": ["voter-001", "voter-002", ...],
  "size": 33,
  "threshold": 22,
  "threshold_pct": 67,
  "region": "sovereign",
  "api_key": "sk-sov-...",
  "endpoint": "https://bft.openpatent.ai/council/bft-strict-abc123"
}

POST/bft/{council_id}/propose

POST/bft/{council_id}/vote

GET/bft/{council_id}/status

Compliance Operations

POST/compliance/check

Run a compliance check against 30 frameworks.

POST /v1/compliance/check
{
  "system": "MyChatBot v3",
  "sector": "finance",
  "region": "eu"
}
→ 200 OK
{
  "system": "MyChatBot v3",
  "overall_score": 92,
  "frameworks": [
    {"framework": "EU AI Act Article 14", "score": 95, "status": "PASS"},
    {"framework": "NIST AI RMF Govern", "score": 92, "status": "PASS"},
    {"framework": "ISO 42001 Clause 6", "score": 88, "status": "PASS"},
    {"framework": "GDPR DPIA", "score": 90, "status": "PASS"}
  ],
  "watchdog_cert": "WDG-2026-07-04-MYCHATBOT-001",
  "sigils": [...]
}

CASA Certification

POST/casa/apply

GET/casa/status/{entity}

POST/casa/upgrade

Awareness v2 (Physical AI)

POST/awareness/state

Set or get awareness FSM state.

POST /v1/awareness/state
{
  "presence": "OWNER_UNKNOWN",
  "people_count": 2,
  "pii_redact": true
}
→ 200 OK
{
  "state": "OWNER_UNKNOWN",
  "people_count": 2,
  "pii_redact": true,
  "sigil": "autopilot-48h-awareness-..."
}

POST/awareness/redact

Redact PII from text per current state.

POST /v1/awareness/redact
{
  "text": "Nick in Yorkshire, 555-1234",
  "state": "OWNER_UNKNOWN"
}
→ 200 OK
{
  "original": "Nick in Yorkshire, 555-1234",
  "redacted": "[name] in [location], [phone]"
}

SOV3 Substrate

POST/sov3/sigil/emit

GET/sov3/sigil/transcript

GET/sov3/health

POST/sov3/council/propose

POST/sov3/council/vote

GET/sov3/striving/dashboard

Rate Limits

Tier	Requests/min	Certs/day
CASA-1 Foundation	60	10
CASA-2 Practitioner	600	100
CASA-3 Lead Auditor	6,000	1,000
CASA-4 C3PAO Director	60,000	10,000

Error Codes

Code	Meaning
400	Bad request (invalid input)
401	Unauthorized (invalid Watchdog Cert)
403	Forbidden (insufficient CASA level)
404	Not found
429	Rate limited
500	Internal error

SDKs

Coming Q4 2026:

Python TypeScript Go Rust MCP