Get this layer's protection manifest
Returns the org-scope protection spec as authored. Response is content-negotiated — YAML by default, or JSON with Accept: application/json. Pass ?include_composition=true to include the _composition metadata block describing which scopes were merged. Pass ?include=sources (see ADR-053) for the scope-resolution envelope — the contributing layers plus the composed result; the envelope shape is scope-specific. ETag is computed from content_hash (cards-as-primitive Phase 1); If-None-Match returns 304. For the composed view across scopes, use the /effective sub-resource (Wave 2).
Authorizations
Supabase JWT token in Authorization: Bearer header
Headers
Response format. YAML is canonical; JSON is returned only on explicit application/json. The ?include=sources envelope is JSON-only.
text/yaml, application/yaml, application/json Path Parameters
Organization identifier (e.g. org-abc12345)
Query Parameters
Include the _composition metadata block on the response body.
When sources, returns the scope-resolution envelope for this scope (the contributing layers + the composed result); the envelope shape is scope-specific (see ADR-053). The envelope is JSON-only.
sources