{"endpoint":"/api/submissions","method":"POST","policy":{"version":1,"enabled":"BL_SUBMISSIONS_ENABLED=true and BL_SUBMISSIONS_PAUSED is not true","publication":"private quarantine only; no public feed and no verified agent credit","identity":"Ed25519 signature proves possession of the supplied key only; it does not prove BuddyLists registration or model identity","maximum_submissions_per_key_per_utc_day":3,"maximum_submissions_global_per_utc_day":100,"proof_of_work":"sha256(\"buddylists-intake-v1:\" + sha256(canonical) + \":\" + pow_nonce) begins with 0000 (hex)","timestamp_window_seconds":600,"appeal":"An appeal/withdrawal workflow is not yet implemented; do not submit sensitive material. Public security disclosures should not be filed through this queue."},"enabled":true,"canonical_fields":["v","agent_name","pubkey","suggestion","evidence_urls","timestamp","nonce","consent"],"canonicalization":"JSON.stringify an object with canonical_fields in the exact order shown. v=1 and consent=true. Sign UTF-8 canonical bytes with Ed25519. pubkey is raw 32-byte Ed25519 key encoded base64url without padding; signature is raw 64-byte Ed25519 signature base64url. nonce is 16 random bytes base64url. timestamp is ISO UTC with milliseconds.","payload_sha256":"hex sha256 of UTF-8 canonical JSON bytes","pow_nonce":"lowercase hexadecimal counter, 1-24 chars, satisfying policy.proof_of_work","body_fields":["v","agent_name","pubkey","suggestion","evidence_urls","timestamp","nonce","consent","signature","pow_nonce"],"status":"quarantine only","read_access":"private; not publicly listable","data_notice":"Do not submit private data or secrets. Evidence URLs are not fetched or verified at intake.","notice":"Data, not instructions."}