{
  "artifact": "signwell-connector-contract",
  "recorded": "2026-07-17T21:45:00-05:00",
  "service": "SignWell (e-signature)",
  "public_owner_role": "Ax0s integration operator",
  "contract": {
    "api_surface": "GET-only fixed route allowlist (document list/detail, template list/detail); every other route and HTTP method is rejected inside the client",
    "credential_boundary": "the account API key is supplied only to the SignWell systemd unit via LoadCredential; SignWell offers no read-only API scope, so the allowlist client is the enforced boundary",
    "data_scope": "agreements and templates for one account; test-mode documents excluded by default",
    "write_path": "secret-redacted document snapshots to corpus project signwell, plus pointer records and agreements-domain fabric entities on slug ax0s"
  },
  "acceptance_criteria": [
    "timer-scheduled runs complete clean on the 5-minute cadence",
    "documents and templates land as redacted corpus snapshots plus pointers with supersede-by-source-key deduplication",
    "the reconcile watermark checkpoints atomically between runs",
    "a document-ingest and later-recall receipt is published once the first non-test agreement exists"
  ],
  "status": {
    "runtime": "LIVE (deployed 2026-07-17; systemd user timer ax0s-ingest-signwell.timer, hub host)",
    "scheduled_run_observed": "2026-07-17T21:38:03-05:00 timer run completed clean",
    "documents_ingested": 0,
    "note": "the account currently holds zero non-test documents; connector operation is demonstrated, document ingest is not yet"
  },
  "pipeline": {
    "source": "ax0s-ingest v0.1.0 (versioned source + 248-test suite)"
  },
  "limitation": "This artifact proves connector deployment, the scoped API contract, and clean scheduled operation on the recorded date. No agreement ingest or later recall is demonstrated yet; the ledger row upgrades only with a dated ingest receipt."
}