Authentication is not permission.
Server policy resolves organization membership, role, consent scope and resource ownership. Client-side controls never grant access.
Staged interface catalog
| Resource | Purpose | Status |
|---|---|---|
| GET /me | Identity, memberships and role context | Implemented |
| POST /charging-requests | Submit fleet demand with idempotency | Foundation implemented |
| GET /dashboard | Organization-scoped operations | Foundation implemented |
| POST /support-cases | Create auditable support case | Foundation implemented |
| Provider event ingress | Signed, deduplicated event receipt | Activation gated |
| Telemetry observations | Freshness-checked operational inputs | Partner contract required |
Charging-request contract
- Authenticated caller plus server-resolved organization permission.
- Customer-generated idempotency key prevents duplicate execution.
- ISO-8601 operating window, requested energy and connector requirements.
- Purpose-limited approximate location before authorization.
- Explicit error responses; no silent partial success.
From candidate to production
Data contractResources, purpose, direction and retention.
ConsentIdentify who authorizes each scope.
SandboxTest stale data, replay and revocation.
Limited pilotConstrain assets, geography and actions.
Evidence reviewVerify logs and runbooks.
ActivationPromote explicit, revocable scopes.