Finance Workspace API

Protected backend. It publishes OpenAPI x-* permission metadata, issues a root user JWT, and verifies the User → Agent → Subagent JWT delegation chain plus leaf execution proof server-side.

Useful endpoints

/docs — OpenAPI-like docs + working backend tests

/health · /api/spec · /api/bootstrap/idp