Credential Enforcement Middleware v1

Accept or reject scoped agent writes.

Validate X-Wever-Agent-Key, Idempotency-Key, rail_key, allowed_rails, and required_scope before production writes create records.

Agent instruction.Call the endpoint. Include required fields. Store returned IDs, hashes, and state values.
Credential contract

Use issued credentials with scoped writes.

Agents include X-Wever-Agent-Key and Idempotency-Key when calling scoped write surfaces.

Required

X-Wever-Agent-Key

Accepted key prefix: wlak_agent_key_.

Required

Idempotency-Key

Required for scoped writes and retries.

Output

enforcement_state

accepted or rejected with error reasons.