{
  "date": "2026-10-03",
  "status": "feature_candidate_not_production",
  "implemented_operations": 169,
  "draft_operations": 191,
  "exact_method_path_matches": 119,
  "classification": {
    "alternate_contract": 9,
    "excluded_first_release": 68,
    "excluded_workflow": 1,
    "implemented_contract": 103,
    "inventory_only": 10
  },
  "inventory_pagination_paths": [
    "/organizations",
    "/organizations/{organization_id}/members",
    "/organizations/{organization_id}/groups",
    "/organizations/{organization_id}/presets",
    "/organizations/{organization_id}/route-packages",
    "/organizations/{organization_id}/devices",
    "/organizations/{organization_id}/routers",
    "/organizations/{organization_id}/resources",
    "/organizations/{organization_id}/alert-rules",
    "/organizations/{organization_id}/notification-channels",
    "/organizations/{organization_id}/employee-requests",
    "/organizations/{organization_id}/policy-deployments",
    "/organizations/{organization_id}/alerts",
    "/organizations/{organization_id}/invoices",
    "/organizations/{organization_id}/vpns",
    "/organizations/{organization_id}/audit-events",
    "/organizations/{organization_id}/api-clients",
    "/organizations/{organization_id}/webhooks",
    "/organizations/{organization_id}/enrollment-campaigns",
    "/organizations/{organization_id}/invitations",
    "/me/workspaces",
    "/me/invitations",
    "/me/vpn-grants",
    "/me/notifications",
    "/me/requests",
    "/organizations/{organization_id}/roles",
    "/organizations/{organization_id}/activity-category-templates"
  ],
  "scope_notes": [
    "169 implemented-contract operations are not a completion percentage of the191-operation draft: method names, workflow boundaries and newer functionality differ.",
    "Backend docs/corporate/openapi.json is a separate evolving draft (196 operations at this audit), not the shipped contract.",
    "Router/resources CRUD is inventory only. Billing-profile CRUD is metadata only and is not an invoice/provider workflow.",
    "SSO/SCIM, ownership transfers, firmware deployment, exports and generic operations are explicitly excluded from first release.",
    "External provider credentials, signed callbacks and production canary gates require independent acceptance.",
    "Opt-in list pagination does not make the JSON control store SQL-streaming; large-tenant capacity is a separate acceptance gate."
  ],
  "draft_matrix": [
    {
      "method": "GET",
      "draft_path": "/me",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me"
    },
    {
      "method": "GET",
      "draft_path": "/me/workspaces",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/workspaces"
    },
    {
      "method": "PATCH",
      "draft_path": "/me/preferences",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "GET",
      "draft_path": "/me/vpn-grants",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/vpn-grants"
    },
    {
      "method": "POST",
      "draft_path": "/me/invitations/preview",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/me/invitations/preview"
    },
    {
      "method": "POST",
      "draft_path": "/me/invitations/claim",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/me/invitations/claim"
    },
    {
      "method": "DELETE",
      "draft_path": "/me/memberships/{membership_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/me/memberships/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/me/personal-presets",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "POST",
      "draft_path": "/me/personal-presets",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "GET",
      "draft_path": "/me/devices/{device_id}/effective-profile",
      "status": "excluded_first_release",
      "note": "Draft per-member/device profile routes are excluded. Native clients use the implemented signed /me/services/{service_id}/policy and verified enrollment flow."
    },
    {
      "method": "GET",
      "draft_path": "/organizations",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations"
    },
    {
      "method": "POST",
      "draft_path": "/organizations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/closure",
      "status": "excluded_first_release",
      "note": "Company closure/ownership transfer/delegated support workflow is excluded; ordinary membership and access revocation remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/ownership-transfers",
      "status": "excluded_first_release",
      "note": "Company closure/ownership transfer/delegated support workflow is excluded; ordinary membership and access revocation remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/ownership-transfers/{transfer_id}/accept",
      "status": "excluded_first_release",
      "note": "Company closure/ownership transfer/delegated support workflow is excluded; ordinary membership and access revocation remain available."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/members",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/members"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/members/{member_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/members/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/members/{member_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/members/{id}"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/members/{member_id}/revocations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/members/{id}/revocations"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/invitations",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/invitations"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/invitations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/invitations"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/invitations/{invitation_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/invitations/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/invitations/{invitation_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/invitations/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}/rotations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}/rotations"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}/claims",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}/claims"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}/claims/{claim_id}/approve",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}/claims/{claim_id}/approve"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/enrollment-campaigns/{enrollment_campaigns_id}/claims/{claim_id}/reject",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/enrollment-campaigns/{id}/claims/{claim_id}/reject"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/vpns",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/vpns"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/vpns",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/vpns"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/vpns/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/vpns/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}",
      "status": "alternate_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/vpns/{id}/retire",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}/assignments",
      "status": "alternate_contract",
      "implemented_method": "PUT",
      "implemented_path": "/organizations/{organization_id}/vpns/{id}/assignments",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}/assignments",
      "status": "alternate_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/vpns/{id}",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}/migrations",
      "status": "excluded_first_release",
      "note": "Managed migration/redeploy/credential-export workflow is excluded; existing provision/retire/revoke contracts remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}/redeployments",
      "status": "excluded_first_release",
      "note": "Managed migration/redeploy/credential-export workflow is excluded; existing provision/retire/revoke contracts remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}/key-rotations",
      "status": "excluded_first_release",
      "note": "Managed migration/redeploy/credential-export workflow is excluded; existing provision/retire/revoke contracts remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/vpns/{vpns_id}/capacity-requests",
      "status": "excluded_first_release",
      "note": "Managed migration/redeploy/credential-export workflow is excluded; existing provision/retire/revoke contracts remain available."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/catalog/locations",
      "status": "alternate_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/catalog/vpn-locations",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/catalog/protocol-capabilities",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/catalog/protocol-capabilities"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/quotas",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/quotas"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/groups",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/groups"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/groups",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/groups"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/groups/{groups_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/groups/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/groups/{groups_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/groups/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/groups/{groups_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/groups/{id}"
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/groups/{groups_id}/memberships",
      "status": "implemented_contract",
      "implemented_method": "PUT",
      "implemented_path": "/organizations/{organization_id}/groups/{id}/memberships"
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/groups/{groups_id}/assignments",
      "status": "implemented_contract",
      "implemented_method": "PUT",
      "implemented_path": "/organizations/{organization_id}/groups/{id}/assignments"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/route-packages",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/route-packages"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/route-packages",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/route-packages"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/presets",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/presets"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/presets",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/presets"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/presets/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/presets/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/presets/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}/versions",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}/versions"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}/validations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}/validations"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}/publications",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}/publications"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}/rollbacks",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}/rollbacks"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}/copies",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/route-packages/{id}/copies"
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/route-packages/{route_packages_id}/assignments",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/versions",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/presets/{id}/versions"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/validations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/presets/{id}/validations"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/publications",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/presets/{id}/publications"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/rollbacks",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/presets/{id}/rollbacks"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/copies",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/presets/{id}/copies"
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/assignments",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/policy-tests",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/policy-tests"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/members/{member_id}/effective-profile",
      "status": "excluded_first_release",
      "note": "Draft per-member/device profile routes are excluded. Native clients use the implemented signed /me/services/{service_id}/policy and verified enrollment flow."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/policy-deployments",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/policy-deployments"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/policy-deployments/{deployment_id}/retries",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/devices",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/devices"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/devices",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/devices/{devices_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/devices/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/devices/{devices_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/devices/{id}"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/devices/{devices_id}/revocations",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/devices/{id}/revocations"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/devices/{devices_id}/credential-rotations",
      "status": "excluded_first_release",
      "note": "Managed migration/redeploy/credential-export workflow is excluded; existing provision/retire/revoke contracts remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/devices/{devices_id}/configuration-exports",
      "status": "excluded_first_release",
      "note": "Managed migration/redeploy/credential-export workflow is excluded; existing provision/retire/revoke contracts remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/devices/{devices_id}/policy-acknowledgements",
      "status": "excluded_first_release",
      "note": "Client-written applied acknowledgements are intentionally prohibited; only authenticated node confirmation is authoritative."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/routers",
      "status": "inventory_only",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/routers",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/routers",
      "status": "inventory_only",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/routers",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/routers/{routers_id}",
      "status": "inventory_only",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/routers/{id}",
      "note": "Router records are inventory only; firmware deployment, configuration export and connectivity agents are excluded."
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/routers/{routers_id}",
      "status": "inventory_only",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/routers/{id}",
      "note": "Router records are inventory only; firmware deployment, configuration export and connectivity agents are excluded."
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/routers/{routers_id}",
      "status": "inventory_only",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/routers/{id}",
      "note": "Router records are inventory only; firmware deployment, configuration export and connectivity agents are excluded."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/routers/{routers_id}/configuration-exports",
      "status": "excluded_first_release",
      "note": "Router records are inventory only; firmware deployment, configuration export and connectivity agents are excluded."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/routers/{routers_id}/connectivity-tests",
      "status": "excluded_first_release",
      "note": "Router records are inventory only; firmware deployment, configuration export and connectivity agents are excluded."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/metrics/query",
      "status": "excluded_first_release",
      "note": "Arbitrary query/export and generic operation-control framework are excluded; implemented monitoring/history and bounded list APIs remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/reports/exports",
      "status": "excluded_first_release",
      "note": "Arbitrary query/export and generic operation-control framework are excluded; implemented monitoring/history and bounded list APIs remain available."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/alert-rules",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/alert-rules"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/alert-rules",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/alert-rules"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/alert-rules/{alert_rules_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/alert-rules/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/alert-rules/{alert_rules_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/alert-rules/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/alert-rules/{alert_rules_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/alert-rules/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/alerts",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/alerts"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/alerts/{alert_id}/acknowledgements",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/notification-channels",
      "status": "excluded_first_release",
      "note": "The mapped handler preserves legacy generic inventory only; it does not implement the draft typed channel schema or delivery.",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/notification-channels"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/notification-channels",
      "status": "excluded_first_release",
      "note": "The mapped handler preserves legacy generic inventory only; it does not implement the draft typed channel schema or delivery.",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/notification-channels"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/notification-channels/{notification_channels_id}",
      "status": "excluded_first_release",
      "note": "The mapped handler preserves legacy generic inventory only; it does not implement the draft typed channel schema or delivery.",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/notification-channels/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/notification-channels/{notification_channels_id}",
      "status": "excluded_first_release",
      "note": "The mapped handler preserves legacy generic inventory only; it does not implement the draft typed channel schema or delivery.",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/notification-channels/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/notification-channels/{notification_channels_id}",
      "status": "excluded_first_release",
      "note": "The mapped handler preserves legacy generic inventory only; it does not implement the draft typed channel schema or delivery.",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/notification-channels/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/subscription",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/subscription"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/subscription/quotes",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/subscription/quotes"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/subscription/changes",
      "status": "excluded_first_release",
      "note": "Use the implemented quote/checkout and cancel-renewal/resume-renewal workflows. Draft direct invoice checkout/renewal mutation is not an implemented alias."
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/subscription/renewal",
      "status": "excluded_first_release",
      "note": "Use the implemented quote/checkout and cancel-renewal/resume-renewal workflows. Draft direct invoice checkout/renewal mutation is not an implemented alias."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/billing-profile",
      "status": "excluded_workflow",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/billing-profile",
      "note": "Stored metadata has no legal-invoice/provider consumer; invoice billing-profile workflow is excluded."
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/billing-profile",
      "status": "excluded_first_release",
      "note": "Stored metadata has no legal-invoice/provider consumer; invoice billing-profile workflow is excluded."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/invoices",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/invoices"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/invoices/{invoice_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/invoices/{id}"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/invoices/{invoice_id}/checkout-sessions",
      "status": "excluded_first_release",
      "note": "Use the implemented quote/checkout and cancel-renewal/resume-renewal workflows. Draft direct invoice checkout/renewal mutation is not an implemented alias."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/api-clients",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/api-clients"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/api-clients",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/api-clients"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/api-clients/{api_clients_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/api-clients/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/api-clients/{api_clients_id}",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/api-clients/{api_clients_id}",
      "status": "alternate_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/api-clients/{id}/revoke",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/api-clients/{api_clients_id}/secret-rotations",
      "status": "alternate_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/api-clients/{id}/rotate",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/webhooks",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/webhooks"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/webhooks",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/webhooks"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/webhooks/{webhooks_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/webhooks/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/webhooks/{webhooks_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/webhooks/{id}"
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/webhooks/{webhooks_id}",
      "status": "implemented_contract",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/webhooks/{id}"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/webhooks/{webhooks_id}/secret-rotations",
      "status": "alternate_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/webhooks/{id}/rotate",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/webhooks/{webhooks_id}/deliveries",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/webhooks/{id}/deliveries"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/webhooks/{webhooks_id}/deliveries/{delivery_id}/replays",
      "status": "alternate_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/webhooks/{id}/deliveries/{delivery_id}/retry",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/sso",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/sso",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/domain-verifications",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/scim-token-rotations",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/support-access-grants",
      "status": "excluded_first_release",
      "note": "Company closure/ownership transfer/delegated support workflow is excluded; ordinary membership and access revocation remain available."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/audit-events",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/audit-events"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/audit-exports",
      "status": "excluded_first_release",
      "note": "Arbitrary query/export and generic operation-control framework are excluded; implemented monitoring/history and bounded list APIs remain available."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/operations/{operation_id}",
      "status": "excluded_first_release",
      "note": "Arbitrary query/export and generic operation-control framework are excluded; implemented monitoring/history and bounded list APIs remain available."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/operations/{operation_id}/cancellations",
      "status": "excluded_first_release",
      "note": "Arbitrary query/export and generic operation-control framework are excluded; implemented monitoring/history and bounded list APIs remain available."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/resources",
      "status": "inventory_only",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/resources",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/resources",
      "status": "inventory_only",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/resources",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/resources/{resources_id}",
      "status": "inventory_only",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/resources/{id}",
      "note": "Resources are metadata inventory only; router/network ACL enforcement is excluded."
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/resources/{resources_id}",
      "status": "inventory_only",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/resources/{id}",
      "note": "Resources are metadata inventory only; router/network ACL enforcement is excluded."
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/resources/{resources_id}",
      "status": "inventory_only",
      "implemented_method": "DELETE",
      "implemented_path": "/organizations/{organization_id}/resources/{id}",
      "note": "Resources are metadata inventory only; router/network ACL enforcement is excluded."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/resources/{resources_id}/acl",
      "status": "excluded_first_release",
      "note": "Resources are metadata inventory only; router/network ACL enforcement is excluded."
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/resources/{resources_id}/acl",
      "status": "excluded_first_release",
      "note": "Resources are metadata inventory only; router/network ACL enforcement is excluded."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/domain-verifications/{verification_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/domain-verifications/{verification_id}/checks",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/me/vpn-grants/{grant_id}/preferences",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "PATCH",
      "draft_path": "/me/vpn-grants/{grant_id}/preferences",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "GET",
      "draft_path": "/me/personal-presets/{preset_id}",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "PATCH",
      "draft_path": "/me/personal-presets/{preset_id}",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "DELETE",
      "draft_path": "/me/personal-presets/{preset_id}",
      "status": "excluded_first_release",
      "note": "Additional self preferences and cloud personal preset workflows are excluded; personal application functionality is not claimed as this corporate API."
    },
    {
      "method": "GET",
      "draft_path": "/me/notifications",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/notifications"
    },
    {
      "method": "PATCH",
      "draft_path": "/me/notifications/{notification_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/me/notifications/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/me/invitations",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/invitations"
    },
    {
      "method": "POST",
      "draft_path": "/me/invitations/{invitation_id}/decline",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/me/invitations/{id}/decline"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/invitations/{invitation_id}/resends",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/invitations/{id}/resends"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/invitation-template",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/invitation-template"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/invitation-template",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/invitation-template"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/invitation-template/previews",
      "status": "alternate_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/invitation-template/preview",
      "note": "Explicit alternate method/path; callers must migrate, no automatic draft alias is advertised."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/presets/{presets_id}/applications",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "POST",
      "draft_path": "/me/requests",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/me/requests"
    },
    {
      "method": "GET",
      "draft_path": "/me/requests",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/requests"
    },
    {
      "method": "GET",
      "draft_path": "/me/requests/{request_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/requests/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/me/requests/{request_id}/comments",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/me/requests/{id}/comments"
    },
    {
      "method": "POST",
      "draft_path": "/me/requests/{request_id}/comments",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/me/requests/{id}/comments"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/employee-requests",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/employee-requests"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/employee-requests/{request_id}",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/employee-requests/{id}"
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/employee-requests/{request_id}",
      "status": "implemented_contract",
      "implemented_method": "PATCH",
      "implemented_path": "/organizations/{organization_id}/employee-requests/{id}"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/employee-requests/{request_id}/comments",
      "status": "implemented_contract",
      "implemented_method": "GET",
      "implemented_path": "/organizations/{organization_id}/employee-requests/{id}/comments"
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/employee-requests/{request_id}/comments",
      "status": "implemented_contract",
      "implemented_method": "POST",
      "implemented_path": "/organizations/{organization_id}/employee-requests/{id}/comments"
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/employee-requests/{request_id}/metrics-snapshot",
      "status": "excluded_first_release",
      "note": "This exact draft method is excluded. Use only the explicit implemented contract; similar UI names do not establish API equivalence."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/Users",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/scim/v2/Users",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/Users/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/scim/v2/Users/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/scim/v2/Users/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/scim/v2/Users/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/Groups",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "POST",
      "draft_path": "/organizations/{organization_id}/scim/v2/Groups",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/Groups/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "PUT",
      "draft_path": "/organizations/{organization_id}/scim/v2/Groups/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "PATCH",
      "draft_path": "/organizations/{organization_id}/scim/v2/Groups/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "DELETE",
      "draft_path": "/organizations/{organization_id}/scim/v2/Groups/{scim_id}",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/ServiceProviderConfig",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/ResourceTypes",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    },
    {
      "method": "GET",
      "draft_path": "/organizations/{organization_id}/scim/v2/Schemas",
      "status": "excluded_first_release",
      "note": "SSO/domain federation and SCIM provisioning are excluded from first release."
    }
  ],
  "implemented_matrix": [
    {
      "method": "GET",
      "path": "/organizations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/subscription",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/subscription/quotes",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/subscription/checkout",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/subscription/reconcile",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/quotas",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/members",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/members/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/members/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/groups",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/groups",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/groups/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/groups/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/groups/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/presets",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/presets",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/presets/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/presets/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/presets/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/route-packages",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/route-packages",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/route-packages/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/route-packages/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/route-packages/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/devices",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/devices/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/devices/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/routers",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/routers",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/routers/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/routers/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/routers/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/resources",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/resources",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/resources/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/resources/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/resources/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Metadata CRUD only; no firmware/VPN deployment, exported config or network ACL enforcement."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/alert-rules",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/alert-rules",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/alert-rules/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/alert-rules/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/alert-rules/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/notification-channels",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic inventory only. Draft email/webhook/in_app contract and delivery are excluded from first release; separate signed webhooks remain supported."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/notification-channels",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic inventory only. Draft email/webhook/in_app contract and delivery are excluded from first release; separate signed webhooks remain supported."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/notification-channels/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic inventory only. Draft email/webhook/in_app contract and delivery are excluded from first release; separate signed webhooks remain supported."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/notification-channels/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic inventory only. Draft email/webhook/in_app contract and delivery are excluded from first release; separate signed webhooks remain supported."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/notification-channels/{id}",
      "status": "inventory_only",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic inventory only. Draft email/webhook/in_app contract and delivery are excluded from first release; separate signed webhooks remain supported."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/employee-requests",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/employee-requests/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/employee-requests/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/employee-requests/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/policy-deployments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/policy-deployments/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/alerts",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/alerts/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/alerts/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/alerts/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/invoices",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/invoices/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/billing-profile",
      "status": "excluded_invoice_workflow",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic metadata CRUD exists, but is outside the first-release invoice/provider billing workflow."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/billing-profile",
      "status": "excluded_invoice_workflow",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic metadata CRUD exists, but is outside the first-release invoice/provider billing workflow."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/billing-profile/{id}",
      "status": "excluded_invoice_workflow",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic metadata CRUD exists, but is outside the first-release invoice/provider billing workflow."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/billing-profile/{id}",
      "status": "excluded_invoice_workflow",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic metadata CRUD exists, but is outside the first-release invoice/provider billing workflow."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/billing-profile/{id}",
      "status": "excluded_invoice_workflow",
      "handler_entry": "api/business/http.go",
      "note": "Legacy generic metadata CRUD exists, but is outside the first-release invoice/provider billing workflow."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/vpns",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/vpns",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/vpns/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/vpns/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/presets/{id}/validations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/presets/{id}/publications",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/presets/{id}/versions",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/presets/{id}/copies",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/presets/{id}/rollbacks",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/route-packages/{id}/validations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/route-packages/{id}/publications",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/route-packages/{id}/versions",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/route-packages/{id}/copies",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/route-packages/{id}/rollbacks",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PUT",
      "path": "/organizations/{organization_id}/groups/{id}/memberships",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PUT",
      "path": "/organizations/{organization_id}/groups/{id}/assignments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PUT",
      "path": "/organizations/{organization_id}/vpns/{id}/assignments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/members/{id}/revocations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/members/{id}/restorations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/devices/{id}/revocations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/catalog/traffic-presets",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/catalog/protocol-capabilities",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/catalog/vpn-locations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/policy-tests",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/metrics",
      "status": "implemented_candidate",
      "handler_entry": "api/business/monitoring.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/audit-events",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/api-clients",
      "status": "implemented_candidate",
      "handler_entry": "api/business/api_clients.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/api-clients",
      "status": "implemented_candidate",
      "handler_entry": "api/business/api_clients.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/api-clients/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/api_clients.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/webhooks",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/webhooks",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/webhooks/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/webhooks/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/webhooks/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/enrollment-campaigns",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/enrollment-campaigns",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/invitations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/invitations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/invitations/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/invitations/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/api-clients/{id}/rotate",
      "status": "implemented_candidate",
      "handler_entry": "api/business/api_clients.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/api-clients/{id}/revoke",
      "status": "implemented_candidate",
      "handler_entry": "api/business/api_clients.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/webhooks/{id}/rotate",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/webhooks/{id}/test",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/webhooks/{id}/deliveries",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/webhooks/{id}/deliveries/{delivery_id}/retry",
      "status": "implemented_candidate",
      "handler_entry": "api/business/webhooks.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}/rotations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}/claims",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}/claims/{claim_id}/approve",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/enrollment-campaigns/{id}/claims/{claim_id}/reject",
      "status": "implemented_candidate",
      "handler_entry": "api/business/campaigns.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/invitations/{id}/resends",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/invitation-template",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/invitation-template",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/invitation-template/preview",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/employee-requests/{id}/comments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/employee-requests/{id}/comments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/workspaces",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/invitations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/vpn-grants",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/notifications",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/requests",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/me/requests",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/me/invitations/preview",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/me/invitations/claim",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/me/invitations/{id}/decline",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/me/memberships/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/me/devices/{id}/revocations",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/me/notifications/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/services/{service_id}/policy",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/requests/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/requests/{id}/comments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/me/requests/{id}/comments",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/oauth/token",
      "status": "implemented_candidate",
      "handler_entry": "api/business/api_clients.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/vpns/{id}/retire",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/roles",
      "status": "implemented_candidate",
      "handler_entry": "api/business/roles.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/roles",
      "status": "implemented_candidate",
      "handler_entry": "api/business/roles.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/roles/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/roles.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/roles/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/roles.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/roles/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/roles.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/me/devices/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/me/devices/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/http.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/employee-analytics",
      "status": "implemented_candidate",
      "handler_entry": "api/business/employee_analytics.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/activity",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/activity-settings",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/activity-settings",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/members/{member_id}/activity-collection",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/members/{member_id}/activity-collection",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/groups/{group_id}/activity-collection",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/groups/{group_id}/activity-collection",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/activity-category-presets",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/activity-category-templates",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity_templates.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/activity-category-templates",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity_templates.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/activity-category-templates/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity_templates.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "PATCH",
      "path": "/organizations/{organization_id}/activity-category-templates/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity_templates.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "DELETE",
      "path": "/organizations/{organization_id}/activity-category-templates/{id}",
      "status": "implemented_candidate",
      "handler_entry": "api/business/activity_templates.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "GET",
      "path": "/organizations/{organization_id}/subscription/payment-methods",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/subscription/cancel-renewal",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    },
    {
      "method": "POST",
      "path": "/organizations/{organization_id}/subscription/resume-renewal",
      "status": "implemented_candidate",
      "handler_entry": "api/business/billing.go",
      "note": "Handler contract present; production configuration and acceptance remain separate."
    }
  ]
}