File-level integrity diff between two artifact manifests (added/removed/changed-hash) — supply-chain tamper check.

Alias of /api/v1/artifacts/{id}/manifest-diff (recorded; identical handler). Prefer the recorded path: this one already answers with Deprecation and Sunset headers.

Inputs. Path, query and header fields are listed below. No request body is required.

Outputs. See each status below for its media type, schema and headers. A missing record or unavailable capability is not a successful empty result.

Errors. API JSON failures use the documented response schema. Read code, message and next; retry only when the response allows it. Auth, invalid input and missing records need a caller change.

Rate limits. Public read budgets apply by client IP and route group. This operation can have a smaller route-specific budget. Read Retry-After on 429 or retryable 503 responses.

Example setup. Use an identifier returned by the matching list, search or create operation. Sample identifiers are not a promise that a record exists.