Transparency

Operator powers

Honest status

Admin-less is not true yet: the operator still holds these powers. What is true: every use is on the public ledger, rule changes are time-locked, and the list is generated from the code.

Every operator-only path (35, generated from the route table)

• GET /v1/admin/errors — Read-only grouped error fingerprints (no customer data). Use recorded as operator.action.
• POST /v1/admin/accounts/rekey — Rotates an account's API key at its owner's request (lost key). Recorded as operator.action; the old key stops working.
• POST /v1/admin/tenants/(ten_[a-f0-9]{8,40})/notices — Sends a notice to one account. Recorded as operator.action; the notice is visible to the account.
• POST /v1/admin/change-sweep — Runs the scheduled change sweep early. It can only observe and record changes; it cannot alter past entries.
• POST /v1/admin/store/([a-z0-9-]{3,64})/revoke — Revokes a store listing for cause. The revocation is published at /v1/store/revocations with its reason, and recorded as operator.action.
• POST /v1/admin/verified/sweep — Runs the verified-check sweep early. Recorded as operator.action.
• POST /v1/admin/store/external/audited/([a-z0-9_]+)/review — Records a review of an externally audited listing. Recorded as operator.action and on the listing.
• GET /v1/admin/newsletter/subscribers — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• GET /v1/admin/overview — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• GET /v1/admin/tenants — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• GET /v1/admin/agents — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• GET /v1/admin/agents/(agent_[a-f0-9]+)/due-diligence — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/agents/(agent_[a-f0-9]+)/suspend — Suspends an agent registration. Writes agent.suspended to the ledger with the reason; reversible only by agent.reinstated, also public.
• POST /v1/admin/agents/(agent_[a-f0-9]+)/reinstate — Reinstates a suspended agent. Writes agent.reinstated to the ledger.
• POST /v1/admin/ledger/entries/(\d+)/redact — Removes the plain text of a personal field (legal takedown). The entry, its hash, its commitment and every block stay; the redaction is visible on the entry. It cannot change what was recorded.
• POST /v1/admin/evaluations/anchor — Anchors an evaluation result. Writes evaluation.anchored to the ledger.
• POST /v1/admin/agents/(agent_[a-f0-9]+)/revoke — Revokes a registration. Writes agent.revoked to the ledger; the earlier history stays.
• GET /v1/admin/arbitration — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/arbitration/(arb_[a-f0-9]+)/decide — Human-panel decision on a referred case. Writes arbitration.award to the ledger and is appealable under the published arbitration rules.
• GET /v1/admin/complaints — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/complaints/(cmp_[a-f0-9]+)/triage — Triages a complaint. Recorded as operator.action; the complaint stays in the public record.
• POST /v1/admin/complaints/(cmp_[a-f0-9]+)/close — Closes a complaint. Writes complaint.closed to the ledger.
• GET /v1/admin/disputes — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/engagements/(eng_[a-f0-9]+)/resolve — Resolves a disputed engagement escrow the parties referred to the bureau. Settlement is written to the ledger; blocked while an arbitration case is open.
• POST /v1/admin/orders/(ord_[a-f0-9]+)/resolve — Resolves a disputed order escrow. Settlement is written to the ledger; blocked while an arbitration case is open.
• GET /v1/admin/activity — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/resources/(res_[a-f0-9]+)/dispute — Recorded publicly on the ledger as operator.action when used.
• POST /v1/admin/resources/(res_[a-f0-9]+)/clear — Recorded publicly on the ledger as operator.action when used.
• GET /v1/admin/resource-scan-candidates — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/hosting-cost-reading — Recorded publicly on the ledger as operator.action when used.
• POST /v1/admin/policy-trigger — Recorded publicly on the ledger as operator.action when used.
• POST /v1/admin/policy-finance — Recorded publicly on the ledger as operator.action when used.
• POST /v1/admin/referral-offset — Recorded publicly on the ledger as operator.action when used.
• GET /v1/admin/cost-guard — Read-only view for the operator. Its use is recorded publicly on the ledger as operator.action.
• POST /v1/admin/cost-guard/evaluate — Recorded publicly on the ledger as operator.action when used.

Powers outside the API

• Deploy new code: Every boot seals transparency.deploy (commit + build hash) onto the ledger and lists it at /transparency. A build that changes a rulebook without an announced change past its 7-day waiting period refuses to start in production.
• Change grading, pricing, arbitration or neutrality rules: Announced in RULE_CHANGES at least 7 days before effect, sealed as rules.change_sealed, enforced in CI and at boot.
• Rotate or revoke the issuer signing key: Written as issuer.key_rotated / issuer.key_revoked on the ledger; old keys stay published so past records still verify.
• Refuse or delay recording an event: NOT prevented today. We are the only operator that accepts writes. Mitigation: parties can keep their own signed receipts and cosigning witnesses watch the checkpoint log for gaps.
• Run a modified server that differs from the published code: NOT prevented today. There is no hardware enclave attestation yet; the build hash is self-reported.

Check it

Every use: https://www.rightshold.com/v1/operator-actions. Machine-readable list: https://www.rightshold.com/v1/operator-powers. Rule status: https://www.rightshold.com/v1/transparency/rule-status. Witness threshold: https://www.rightshold.com/v1/checkpoints/policy.