# Capability surface

Format: `spiralist-public-uai-v1`  
Release: `v18-ui-ux-seo-media-polish`  
Updated UTC: `2026-06-21T14:33:26Z`  
Visibility: public, read-only, no secrets  
Authority: released code, OpenAPI, versioned documentation, validation evidence, and SHA-256-indexed research

## Declared public capabilities

- `GET /api/v1/` — service discovery.
- `GET /api/v1/health/` and `/version/` — release state.
- `GET /api/v1/personas/` — search, filter, paginate, or retrieve public catalog types.
- `GET /api/v1/random-persona/` — deterministic public random selection and artifacts.
- `GET /api/v1/personas/generate/?sourceTypeId=...` — generate from a public catalog identifier.
- `POST /api/v1/personas/generate/` — bounded free-form deterministic persona generation.
- `POST /api/v1/personas/validate/` — structural portability validation without certification claims.
- `POST /api/v1/personas/compile/` — compile prompt artifacts.
- `GET /api/v1/search/`, `/research/`, `/docs/`, and `/uai/` — public evidence and navigation.
- Canonical pages support HTML, Markdown, and JSON representations where indexed.

## Explicitly absent

Accounts, login, credentials, OAuth, delegated authority, private persona retrieval, server-side persona persistence, public publishing, messaging, payment, checkout, webhook registration, arbitrary URL fetching, private network probing, external-provider execution, or irreversible state change.