Market State

Public signed safe-to-trade receipt (free, rate-limited)

Public-discovery door for the safe-to-trade circuit-breaker receipt. Returns a byte-identical signed receipt to the paid /v1/safe-to-trade (same Ed25519 key, same 60-second TTL, same Tier-0 override merge, same GAP-012 cross-venue scan, same fail-closed reason taxonomy, receipt_mode=live). No authentication; rate-limited to 60 req/min/IP. max_age is REQUIRED with no default — the IETF environment.* freshness-discipline contract is modeled at this surface. Canonical field list is /v5/keys → canonical_payload_spec.safe_to_trade_fields. Use the unsigned wrapper fields (door, note, discovery_url) to navigate; they sit OUTSIDE the signed payload.

get/v1/safe-to-trade/sample

Request

  • Base URL: https://headlessoracle.com
  • URL: https://headlessoracle.com/v1/safe-to-trade/sample
  • Auth: none declared

Query parameters

venuestring

Market Identifier Code (MIC). Defaults to XNYS.

max_ageinteger required

Freshness policy in seconds. Integer 1–60. No default — the consumer declares its policy.

instrumentstring

Opaque metadata echoed back into the signed payload. Capped at 64 chars.

Response

Signed safe-to-trade receipt

cross_venuestring required

JSON-stringified { realtime_overrides: string[], scan_ok: boolean }. Strings-only invariant for signPayload.

expires_atstring date-time required
instrumentstring required
issued_atstring date-time required
issuer'headlessoracle.com' required
max_agestring required

Integer 1–60 encoded as string for the strings-only canonical payload.

public_key_idstring required
reasonsstring required

JSON-stringified string[] of fail-closed reason codes.

receipt_idstring uuid required
receipt_mode'live' required

'live' — receipt attests provenance-of-content, not provenance-of-payment. The free door does not change the data.

safe'true' | 'false' required
schema_version'v5.0' required
venuestring required
venue_source'SCHEDULE' | 'OVERRIDE' | 'SYSTEM' required
venue_status'OPEN' | 'CLOSED' | 'HALTED' | 'UNKNOWN' required
signaturestring required

Ed25519 over the alphabetically-sorted strings-only canonical payload.

receiptobject required

Mirror of the signed fields + signature. The same bytes that ship at the top level. Convenient for verifiers that want a single contained object.

discovery_urlstring uri required
door'public-sample' required

Unsigned wrapper field — names the door, not the data.

notestring required

Unsigned wrapper field — human-readable hint pointing at the canonical spec and the verification path.

Changes

No recorded changes to this operation across all 1 revision of this API.