References
One route writes an entry, by name, in one of five scopes.
The routes
GET
/references?scope=platform|org|user|tron|nucleus&owner_id=. Without a scope: yours, your company's and the platform's. A secret comes back as its hint only; a member reads the company's by name only.GET
/references/resolved?nucleus= (or ?tron=): what one agent sees after the order, one entry per name.POST
/referencesUpserts on (scope, owner, name). Omitting value keeps the stored one; changing secret needs the value again (400 value_required).DELETE
/references/:id409 reference_in_use when an agent chose it as its model key.GET
/vault/keysThe old routes, kept as a bridge on the same registry until the final block.