{
  "name": "BridgePoint Authorized Partner Delivery Contract",
  "version": "5206",
  "mode": "PARTNER_AUTHORIZED_ONLY",
  "transport_options": [
    "HTTPS_PULL",
    "SIGNED_WEBHOOK",
    "OBJECT_STORAGE_DELIVERY",
    "CUSTOMER_QUEUE"
  ],
  "public_surfaces": {
    "audit": "https://bridgepointintelligence.online/public-audit/",
    "exposure_feed": "https://xdfsjztwgsbmabshzsjw.supabase.co/functions/v1/bridgepoint-public-exposure-feed-v5202?format=json&limit=20",
    "audit_export": "https://xdfsjztwgsbmabshzsjw.supabase.co/functions/v1/bridgepoint-public-audit-export-v5203?mode=latency&format=json&limit=100"
  },
  "event_envelope": {
    "bridgepoint_version": "5206",
    "event_id": "uuid",
    "record_type": "hazard_observation | property_exposure",
    "provider": "string",
    "source_url": "uri",
    "source_updated_at": "ISO-8601",
    "bridgepoint_first_seen_at": "ISO-8601",
    "source_to_bridgepoint_seconds": "number|null",
    "hazard_type": "string|null",
    "event_confidence": "number|null",
    "property_exposure_count": "integer|null",
    "exposure_confidence": "number|null",
    "interpretation_flags": {
      "damage_determination": false,
      "securities_instruction": false,
      "claims_decision": false,
      "underwriting_decision": false,
      "payment_instruction": false
    }
  },
  "signed_webhook": {
    "enabled_for_public_signup": false,
    "partner_contract_required": true,
    "recommended_headers": [
      "X-BridgePoint-Event-Id",
      "X-BridgePoint-Timestamp",
      "X-BridgePoint-Signature-Version",
      "X-BridgePoint-Signature"
    ],
    "signature_description": "HMAC-SHA256 over timestamp + '.' + raw request body using a per-partner secret negotiated out of band.",
    "replay_protection": "Reject timestamps outside the partner-agreed window and deduplicate X-BridgePoint-Event-Id."
  },
  "restrictions": [
    "No anonymous or unsolicited webhook injection.",
    "No disguised error/bug-report payloads.",
    "No stock-ticker targeting or automated buy/sell instruction.",
    "Source licensing and attribution remain source-specific."
  ]
}