Corpus Semantic Registry

8 symbols 2 documents 0 err / 0 warn 2026-07-05 ·

Rendered from build/CSR.lock.json. Symbols are the canonical entries. Click an entry to expand. Open PDF buttons go to canonical sources. For embedded prose snapshot with rendered math, open CSR.snapshot.html alongside this file.

Recent (top 10)

2026-07-02 doc Auth_Design Relay auth design v1 provisional
2026-07-02 doc Api_Spec Relay API specification v1 candidate
2026-07-02 sym Auth.session canonical
2026-07-02 sym Auth.scope candidate
2026-07-02 sym Auth.access_token provisional
2026-07-02 sym Api.webhook provisional
2026-07-02 sym Api.session deprecated
2026-07-02 sym Api.rate_limit provisional
2026-07-02 sym Api.pagination_cursor candidate
2026-07-02 sym Api.idempotency_key candidate

Document Registry (2)

Api candidate v1 · 5 defines Relay API specification PDF ↗ ▾

csr.document.Api_Spec

Display	Relay API specification
Version	v1
Status	candidate
Publication mode	internal
Last verified	2026-07-02
Defines (5)	`csr.Api.rate_limit`, `csr.Api.idempotency_key`, `csr.Api.pagination_cursor`, `csr.Api.webhook`, `csr.Api.session`

Auth provisional v1 · 3 defines Relay auth design PDF ↗ ▾

csr.document.Auth_Design

Display	Relay auth design
Version	v1
Status	provisional
Publication mode	internal
Last verified	2026-07-02
Defines (3)	`csr.Auth.session`, `csr.Auth.access_token`, `csr.Auth.scope`

Symbol Registry

Api (5)

idempotency_key candidate concept · domain Client-supplied unique key on mutating requests; replays return the original result. PDF ↗ ▾

csr.Api.idempotency_key

Client-supplied unique key on mutating requests; replays return the original result.

Source: csr.document.Api_Spec@v1#section.2.idempotency_key

Display	idempotency_key
Type	concept
Framework layer	`domain`
Owning document	`csr.document.Api_Spec`
Definition hash	`sha256:87b223c...`
Relations	used_by: `csr.Api.webhook`
Verification	argued via prose; last verified 2026-07-02

pagination_cursor candidate concept · representation Opaque continuation token in list responses; stable across inserts. PDF ↗ ▾

csr.Api.pagination_cursor

Opaque continuation token in list responses; stable across inserts.

Source: csr.document.Api_Spec@v1#section.3.pagination_cursor

Display	pagination_cursor
Type	concept
Framework layer	`representation`
Owning document	`csr.document.Api_Spec`
Definition hash	`sha256:7c886f0...`
Verification	declared via prose; last verified 2026-07-02

rate_limit provisional schema · domain Per-access_token request budget: 600/min rolling; 429 + Retry-After on excess. PDF ↗ ▾

csr.Api.rate_limit

Per-access_token request budget: 600/min rolling; 429 + Retry-After on excess.

Source: csr.document.Api_Spec@v1#section.1.rate_limit

Display	rate_limit
Type	schema
Framework layer	`domain`
Owning document	`csr.document.Api_Spec`
Definition hash	`sha256:3537a3e...`
Relations	depends_on: `csr.Auth.access_token`
Verification	tested via empirical; last verified 2026-07-02

session deprecated concept · domain Superseded: earlier draft sense of session as the TCP keep-alive window. Collided with the… PDF ↗ ▾

csr.Api.session

Superseded: earlier draft sense of session as the TCP keep-alive window. Collided with the auth sense; auth definition is canonical.

Source: csr.document.Api_Spec@v1#section.5.session

Display	session (superseded TCP sense)
Type	concept
Framework layer	`domain`
Owning document	`csr.document.Api_Spec`
Definition hash	`sha256:c31185e...`
Verification	declared via prose; last verified 2026-07-02

webhook provisional structure · procedure Signed POST to a subscriber URL on an event; at-least-once delivery, dedup via idempotency… PDF ↗ ▾

csr.Api.webhook

Signed POST to a subscriber URL on an event; at-least-once delivery, dedup via idempotency_key.

Source: csr.document.Api_Spec@v1#section.4.webhook

Display	webhook
Type	structure
Framework layer	`procedure`
Owning document	`csr.document.Api_Spec`
Definition hash	`sha256:54012fb...`
Relations	depends_on: `csr.Api.idempotency_key`, `csr.Auth.session`
Verification	tested via empirical; last verified 2026-07-02

Auth (3)

access_token provisional concept · domain Bearer credential exchanged for a session. Opaque, 32 bytes, 24h rotation. Renamed from ap… PDF ↗ ▾

csr.Auth.access_token

Bearer credential exchanged for a session. Opaque, 32 bytes, 24h rotation. Renamed from api_key in v1.

Source: csr.document.Auth_Design@v1#section.2.access_token

Display	access_token
Type	concept
Framework layer	`domain`
Owning document	`csr.document.Auth_Design`
Definition hash	`sha256:40644e0...`
Relations	used_by: `csr.Api.rate_limit`
Verification	argued via prose; last verified 2026-07-02

scope candidate concept · domain Named capability grant attached to a session; enforced by the gateway before dispatch. PDF ↗ ▾

csr.Auth.scope

Named capability grant attached to a session; enforced by the gateway before dispatch.

Source: csr.document.Auth_Design@v1#section.3.scope

Display	scope
Type	concept
Framework layer	`domain`
Owning document	`csr.document.Auth_Design`
Definition hash	`sha256:e786ecc...`
Relations	depends_on: `csr.Auth.session`
Verification	declared via prose; last verified 2026-07-02

session canonical concept · domain Server-side record binding one client to one scope set for a bounded lifetime. Sole bearer… PDF ↗ ▾

csr.Auth.session

Server-side record binding one client to one scope set for a bounded lifetime. Sole bearer of authenticated identity.

Source: csr.document.Auth_Design@v1#section.1.session

Display	session
Type	concept
Framework layer	`domain`
Owning document	`csr.document.Auth_Design`
Definition hash	`sha256:fe38328...`
Relations	used_by: `csr.Auth.scope`, `csr.Api.webhook`
Verification	tested via empirical; last verified 2026-07-02

Known Collisions

csr.collision.session_auth_vs_api resolved

Resolution	`merge`
Resolved at	Auth_Design_v1
Owner	Auth
Entries	`csr.Auth.session` `csr.Api.session`

Aliases

Alias	Resolves to
`csr.Auth.api_key`	`csr.Auth.access_token`