Reference

Reference material is being assembled. Until the OpenAPI ingestion lands, source-of-truth specifications live in the repo:

• specs/v1/api.openapi.yaml — REST contract for mint / revoke / status endpoints.
• specs/v1/cert-profile.md — per-tier leaf cert profile (KeyUsage, EKU, SAN constraints).
• specs/v1/est-flow.md — RFC 7030 enrollment envelope.
• specs/v1/voucher-format.md — trust voucher carrier.
• specs/v1/jwt-claims.md — JWT claim shape for Teller projections.
• specs/v1/outfitter-schema.md — outfitter deployment schema.

A rendered OpenAPI reference will land here next.