The hackathon workspace
API reference
Every operation this deployment performs. The same list drives the HTML forms, the JSON API and the OpenAPI document; there is no operation in one that is missing from the others.
A JSON response comes from the route as written below. The same route
without the /api prefix is the browser's: a GET renders a page there,
and a POST takes the form and answers with a redirect to the page that shows what
it did.
| Operation | Route | Callable by |
|---|---|---|
| appeals.list | GET /api/events/:event/appeals | anyone, signed in or not |
| appeals.open | POST /api/events/:event/appeals | a participant of the event |
| appeals.resolve | POST /api/events/:event/appeals/:appeal/resolve | a organizer of the event |
| assignments.draw | POST /api/events/:event/assignments | a organizer of the event |
| assignments.preview | GET /api/events/:event/assignments/preview | a organizer of the event |
| auth.link | GET /api/signin/:token | anyone, signed in or not |
| auth.request | POST /api/signin | anyone, signed in or not |
| auth.session | POST /api/session | anyone, signed in or not |
| auth.signin | GET /api/signin | anyone, signed in or not |
| auth.signout | POST /api/signout | any signed-in account |
| auth.whoami | GET /api/whoami | any signed-in account |
| awards.decide | POST /api/events/:event/awards | a organizer of the event |
| awards.list | GET /api/events/:event/awards | anyone, signed in or not |
| ballots.save | POST /api/events/:event/projects/:project/ballot | a judge of the event, the judge the ballot belongs to, while judging is open |
| comments.add | POST /api/events/:event/projects/:project/comments | any signed-in account |
| comments.hide | POST /api/events/:event/projects/:project/comments/hide | a organizer of the event |
| duels.decide | POST /api/events/:event/duel | a judge of the event, while judging is open |
| duels.next | GET /api/events/:event/duel | a judge of the event |
| duplicates.list | GET /api/events/:event/manage/duplicates | a organizer of the event |
| duplicates.triage | POST /api/events/:event/manage/duplicates/triage | a organizer of the event |
| events.clock | GET /api/events/:event/clock | a organizer of the event |
| events.create | POST /api/events | an account this deployment's operator listed as a founder |
| events.dashboard | GET /api/events/:event/dashboard | a organizer of the event |
| events.invite | POST /api/events/:event/invitations | a organizer of the event |
| events.judges | GET /api/events/:event/judges | a organizer of the event |
| events.list | GET /api/events | anyone, signed in or not |
| events.mine | GET /api/mine | any signed-in account |
| events.ping_webhook | POST /api/events/:event/webhooks/ping | a organizer of the event |
| events.revoke_role | POST /api/events/:event/roles/revoke | a organizer of the event |
| events.show | GET /api/events/:event | anyone, signed in or not |
| events.update | POST /api/events/:event | a organizer of the event |
| events.warp_clock | POST /api/events/:event/clock/warp | a organizer of the event |
| events.webhooks | GET /api/events/:event/webhooks | a organizer of the event |
| exports.archive_manifest | GET /api/events/:event/archive | a organizer of the event |
| exports.audit_csv | GET /api/events/:event/export/audit.csv | a organizer of the event |
| exports.download | GET /api/events/:event/csv/:stage | a organizer of the event |
| exports.projects_csv | GET /api/events/:event/export/projects.csv | a organizer of the event |
| exports.registrations_csv | GET /api/events/:event/export/registrations.csv | a organizer of the event |
| exports.results_csv | GET /api/events/:event/export/results.csv | a organizer of the event |
| exports.scores_csv | GET /api/events/:event/export/scores.csv | a organizer of the event |
| exports.teams_csv | GET /api/events/:event/export/teams.csv | a organizer of the event |
| judges.configure | POST /api/events/:event/judges/configure | a organizer of the event |
| judges.recusal | POST /api/events/:event/judges/recusal | a organizer of the event |
| judges.roster | GET /api/events/:event/judges/roster | a organizer of the event |
| judges.self_recusal | POST /api/events/:event/judging/:project/recuse | a judge of the event, while judging is open |
| judging.queue | GET /api/events/:event/judging | a judge of the event |
| projects.create | POST /api/events/:event/projects | a participant of the event, while submissions are open |
| projects.disqualify | POST /api/events/:event/projects/:project/disqualify | a organizer of the event |
| projects.list | GET /api/events/:event/projects | anyone, signed in or not |
| projects.pull | POST /api/events/:event/projects/:project/pull | a organizer of the event |
| projects.show | GET /api/events/:event/projects/:project | anyone, signed in or not |
| projects.submit | POST /api/events/:event/projects/:project/submit | a participant of the event, on the project's own team, while submissions are open |
| projects.update | POST /api/events/:event/projects/:project | a participant of the event, on the project's own team, while submissions are open |
| projects.withdraw | POST /api/events/:event/projects/:project/withdraw | a participant of the event, on the project's own team, while submissions are open |
| results.certificate_status | GET /api/events/:event/certificates/status | anyone, signed in or not |
| results.certificate_studio | GET /api/events/:event/certificates/studio | a organizer of the event |
| results.certificates | GET /api/events/:event/certificates | a organizer of the event |
| results.confidence | GET /api/events/:event/results/confidence | anyone, signed in or not |
| results.configure_certificate_template | POST /api/events/:event/certificates/template | a organizer of the event |
| results.correct_cert | POST /api/events/:event/certificates/corrections | a organizer of the event |
| results.evidence_packet | GET /api/events/:event/results/evidence | anyone, signed in or not |
| results.explain | GET /api/events/:event/results/explain | a participant of the event |
| results.history | GET /api/events/:event/results/history | anyone, signed in or not |
| results.issue_certs | POST /api/events/:event/certificates | a organizer of the event |
| results.judge_evidence | POST /api/events/:event/results/judge-evidence | a organizer of the event |
| results.preflight | GET /api/events/:event/results/preflight | a organizer of the event |
| results.public_certificate | GET /api/events/:event/certificates/:serial | anyone, signed in or not |
| results.publish | POST /api/events/:event/results/publish | a organizer of the event |
| results.sandbox | GET /api/events/:event/results/sandbox | a organizer of the event |
| results.show | GET /api/events/:event/results | anyone, signed in or not |
| results.unpublish | POST /api/events/:event/results/unpublish | a organizer of the event |
| reviews.cancel | POST /api/events/:event/review-requests/:request/cancel | a organizer of the event |
| reviews.request | POST /api/events/:event/review-requests | a organizer of the event |
| reviews.requests | GET /api/events/:event/review-requests | a organizer of the event |
| rubrics.create | POST /api/events/:event/rubric | a organizer of the event |
| rubrics.publish | POST /api/events/:event/rubric/publish | a organizer of the event |
| rubrics.show | GET /api/events/:event/rubric | anyone, signed in or not |
| system.about | GET /api/about | anyone, signed in or not |
| system.capabilities | GET /api/capabilities | anyone, signed in or not |
| system.docs | GET /api/docs | anyone, signed in or not |
| system.healthz | GET /api/healthz | anyone, signed in or not |
| system.home | GET /api | anyone, signed in or not |
| system.limits | GET /api/system/limits | anyone, signed in or not |
| system.openapi | GET /api/openapi.json | anyone, signed in or not |
| system.rate_probe | POST /api/system/rate-probe | anyone, signed in or not |
| teams.invite_rotate | POST /api/events/:event/teams/:team/invites/rotate | a participant of the event, while submissions are open |
| teams.join | POST /api/events/:event/teams/:team/members | a participant of the event, while submissions are open |
| teams.leave | POST /api/events/:event/teams/:team/leave | a participant of the event, while submissions are open |
| teams.list | GET /api/events/:event/teams | a participant of the event |
| tokens.create | POST /api/me/tokens | any signed-in account |
| tokens.list | GET /api/me/tokens | any signed-in account |
| tokens.revoke | POST /api/me/tokens/:tokenId/revoke | any signed-in account |
| tracks.create | POST /api/events/:event/tracks | a organizer of the event |
| votes.abuse | GET /api/events/:event/voting/abuse | a organizer of the event |
| votes.ballot | GET /api/events/:event/voting | anyone, signed in or not |
| votes.cast | POST /api/events/:event/votes | anyone, signed in or not |
| votes.configure_abuse | POST /api/events/:event/voting/abuse/policy | a organizer of the event |
| votes.discount_cluster | POST /api/events/:event/voting/discount | a organizer of the event |
| votes.results | GET /api/events/:event/votes | anyone, signed in or not |
| votes.review_abuse | POST /api/events/:event/voting/abuse/review | a organizer of the event |
| votes.start | POST /api/events/:event/votes/start | anyone, signed in or not |
| votes.void_voter | POST /api/events/:event/voting/void | a organizer of the event |
appeals.list
GET /api/events/:event/appeals
List public appeal resolutions, or private appeals you may inspect.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
appeals.open
POST /api/events/:event/appeals
Open a private appeal for your submitted team project.
Callable by a participant of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | body | Project ID — a 26-character identifier. Required. |
privateMessage | body | Private appeal message — text, any number of lines, between 8 and 2000 characters. Required. Only organizers and you can read this text. |
Records appeal.opened.
Limited to 30 submission edits by one team per window.
appeals.resolve
POST /api/events/:event/appeals/:appeal/resolve
Resolve an appeal and optionally publish a corrected result revision.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
appeal | path | Appeal ID — a 26-character identifier. Required. |
decision | body | Decision — one of accepted, rejected. Required. |
republish | body | Publish corrected results — yes or no. Defaults to false. |
expectedRevision | body | Current publication revision — a whole number, at least 1. Required. |
publicSummary | body | Public explanation — text on one line, between 8 and 300 characters. Required. |
internalReason | body | Private resolution reason — text on one line, between 8 and 1000 characters. Required. |
Records appeal.resolved, result.corrected.
Limited to 120 organizer changes to one event per window.
assignments.draw
POST /api/events/:event/assignments
Assign judges to projects, honouring conflicts and balancing the load.
Uses the event's own reviews-per-project setting. Safe to run twice: the plan is applied as a difference. An assignment that already has a ballot against it is never removed.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
track | body | Track — text on one line, at most 40 characters. Optional. Draw within one track only. Leave blank to draw the whole event. |
dryRun | body | Preview only — yes or no. Defaults to false. Compute the plan and report shortfalls without writing any assignments. |
expectedRevision | body | Preview revision — text on one line, between 64 and 64 characters. Optional. Prevents applying a plan after event evidence changes. |
Records assignment.run, assignment.created, assignment.removed.
Limited to 120 organizer changes to one event per window.
assignments.preview
GET /api/events/:event/assignments/preview
Preview assignment coverage before applying a draw.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
track | query | Track — text on one line, at most 40 characters. Optional. Draw within one track only. Leave blank to draw the whole event. |
auth.link
GET /api/signin/:token
Show the button that completes a sign-in.
Deliberately inert. It does not consume the link, so a scanner or prefetcher that opens the URL cannot spend it before the person does.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
token | path | Sign-in token — text on one line, between 43 and 43 characters. Required. Never echoed back or written to the ledger. The token from the link that was sent to you. |
auth.request
POST /api/signin
Send a sign-in link to an email address.
Answers identically for a known and an unknown address, so this cannot be used to find out who has an account here.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
email | body | Email address — an email address. Required. Where to send the link. It is the address an organizer invited, if you were invited. |
Records signin.requested.
Limited to 10 sign-in links for one address per window.
auth.session
POST /api/session
Exchange a sign-in link for a session.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
token | body | Sign-in token — text on one line, between 43 and 43 characters. Required. Never echoed back or written to the ledger. The token from the link that was sent to you. |
Records link.consumed, account.created, membership.granted, session.created.
Limited to 10 sign-in links for one address per window.
auth.signin
GET /api/signin
Show how to sign in.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
sent | query | Link sent — yes or no. Defaults to false. Set by the redirect after a link has been requested. Nothing reads it but the page. |
auth.signout
POST /api/signout
Sign out of this session, or of every session.
Callable by any signed-in account.
| Field | Where | Meaning |
|---|---|---|
everywhere | body | Sign out everywhere — yes or no. Defaults to false. Revoke every session for this account, not just this one. Use it if you think a link or a token has been seen by somebody else. |
Records session.revoked.
Limited to 600 requests from one session per window.
auth.whoami
GET /api/whoami
Describe the signed-in account and its live sessions.
Callable by any signed-in account.
awards.decide
POST /api/events/:event/awards
Record an organizer award decision against the published revision.
Repeated award keys in one revision explicitly represent shared awards. A corrected publication requires new decisions.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | body | Submitted project — a 26-character identifier. Required. |
awardKey | body | Award name/key — text on one line, between 3 and 80 characters. Required. |
type | body | Award type — one of placement, special. Required. |
place | body | Place — a whole number between 1 and 100. Optional. |
publicSummary | body | Public explanation — text on one line, between 8 and 500 characters. Required. |
internalReason | body | Private decision record — text on one line, between 8 and 1000 characters. Required. |
Records award.decided.
Limited to 120 organizer changes to one event per window.
awards.list
GET /api/events/:event/awards
List explicit award decisions for the current results revision.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
ballots.save
POST /api/events/:event/projects/:project/ballot
Score a project against the published rubric.
The ballot is always filed as the signed-in judge; there is no way to enter one on another judge's behalf over HTTP. Saving again replaces the earlier ballot and records the revision. Scoring an unassigned project assigns it to you.
Callable by a judge of the event, the judge the ballot belongs to, while judging is open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's id, as it appears in the URL. |
scores | body | Scores — one whole number per rubric criterion, keyed by criterion. Optional. One whole number per criterion of the published rubric, keyed by criterion. From a form, send them as scores.<key> — a JSON client sends an object. |
comment | body | Comment — text, any number of lines, at most 4000 characters. Optional. What the team should hear. Organizers see this; whether the team does is their call. |
draft | body | Save as draft — yes or no. Defaults to false. A draft is not counted anywhere. Leave this off to file the ballot. |
Records assignment.created, ballot.submitted, ballot.revised.
Limited to 60 ballot writes by one judge per window.
comments.hide
POST /api/events/:event/projects/:project/comments/hide
Hide a project comment with an audited reason.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
comment | body | Comment identifier — text on one line, at most 20 characters. Required. |
reason | body | Reason — text, any number of lines, between 3 and 1000 characters. Required. The team will be shown this. It goes on the record either way. |
Records comment.hidden.
Limited to 120 organizer changes to one event per window.
duels.decide
POST /api/events/:event/duel
Record which of two projects is stronger.
A skip is recorded rather than discarded: it does not move the ranking, but a judge skipping most of their duels is something an organizer needs to see. Deciding the same pair again replaces the earlier verdict and records the change.
Callable by a judge of the event, while judging is open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
left | body | Project — a 26-character identifier. Required. The project's id, as it appears in the URL. |
right | body | Project — a 26-character identifier. Required. The project's id, as it appears in the URL. |
verdict | body | Verdict — one of left, right, skip. Required. Which of the two shown projects is stronger, or skip if you cannot separate them. |
reason | body | Offered because — one of bridge, informative, explore, exposure, manual. Defaults to "manual". The reason the pairing scheduler gave for this pair. Recorded, not trusted. |
Records comparison.recorded, comparison.revised.
Limited to 60 ballot writes by one judge per window.
duels.next
GET /api/events/:event/duel
The next pair of projects for you to compare.
Callable by a judge of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
duplicates.list
GET /api/events/:event/manage/duplicates
Review quarantined project collisions.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
duplicates.triage
POST /api/events/:event/manage/duplicates/triage
Confirm or clear a quarantined project.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | body | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
decision | body | Decision — one of confirmed, cleared. Required. |
reason | body | Reason — text, any number of lines, between 3 and 1000 characters. Required. The team will be shown this. It goes on the record either way. |
Records project.duplicate_confirmed, project.duplicate_cleared.
Limited to 120 organizer changes to one event per window.
events.clock
GET /api/events/:event/clock
Inspect virtual event clock and time offsets.
Reports real system time vs virtual offset time and current phase gates for demo evaluation.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
events.create
POST /api/events
Create an event and become its organizer.
Limited to the addresses this deployment's operator named as founders. Holding any role in an existing event, including organizer, does not grant it.
Callable by an account this deployment's operator listed as a founder.
| Field | Where | Meaning |
|---|---|---|
slug | body | URL name — text on one line, between 2 and 64 characters. Required. Lower-case letters, digits and hyphens. It appears in every link to this event and cannot be changed. |
name | body | Event name — text on one line, at most 200 characters. Required. What people call it. “Dogfood Hackathon 2026”, not “dogfood-2026”. |
prizes | body | Prizes and recognition — text, any number of lines, at most 4000 characters. Optional. One prize per line, including its amount and eligibility. |
questions | body | Submission questions — text, any number of lines, at most 4000 characters. Optional. One question per line. Teams answer these publicly on their project page. |
timezone | body | Timezone — text on one line, at most 64 characters. Defaults to "UTC". An IANA zone such as Europe/Lisbon, used for displaying times. Every deadline is still one instant for everybody. |
submissionsOpenAt | body | Submissions open — a date and time, as epoch milliseconds or an ISO timestamp. Required. When teams may start submitting. |
submissionsCloseAt | body | Submissions close — a date and time, as epoch milliseconds or an ISO timestamp. Required. The deadline. It is enforced to the millisecond. |
judgingOpenAt | body | Judging opens — a date and time, as epoch milliseconds or an ISO timestamp. Required. When judges may start scoring. It may be before submissions close. |
judgingCloseAt | body | Judging closes — a date and time, as epoch milliseconds or an ISO timestamp. Required. When scoring stops. |
reviewsPerProject | body | Reviews per project — a whole number between 1 and 20. Defaults to 3. How many judges should see each project. Three is the usual answer; below three there is nothing to cross-check a lenient judge against. |
pairwiseEnabled | body | Collect pairwise comparisons — yes or no. Defaults to false. Ask judges which of two projects is better, as well as scoring each. It sharpens the top of the leaderboard and costs judges time. |
votingOpenAt | body | Voting opens — a date and time, as epoch milliseconds or an ISO timestamp. Optional. When community voting begins. |
votingCloseAt | body | Voting closes — a date and time, as epoch milliseconds or an ISO timestamp. Optional. When community voting ends. |
votingMode | body | Voting access — one of off, open, account. Defaults to "off". Choose off, open to a voter token, or signed-in accounts only. |
votingCredits | body | Voting credits — a whole number between 1 and 100000. Defaults to 100. The quadratic voting budget per voter. |
Records event.created, membership.granted.
Limited to 20 events created by one founder per window.
events.dashboard
GET /api/events/:event/dashboard
Show judging progress, coverage and judge effects for an event.
Organizer-only. The judge-effect table is here and nowhere else: results.show publishes per-project rankMove instead, which shows that normalization happened without naming a judge. reliability and criteria are the read-only passes over the fit — uncertainty and tiers, and what each line of the rubric is doing. results.show gets the anonymous half of the first and none of the second. calibration is the pre-publish read on the panel itself: one row per judge with a verdict on whether their part of it is ready, and the judge pairs who agreed more than these comparisons predict. It is the only place in the product that prints a verdict about a person, and it reaches no public surface at any role. Because it exists, rubric.warnings is panel-level whenever calibration is not null: a sentence about one judge belongs in that judge's row, with the action beside it, rather than twice on one page.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
lab | query | Run advanced evidence diagnostics — yes or no. Defaults to false. |
finalists | query | Finalist places — a whole number between 1 and 100. Defaults to 3. |
sensitivity | query | Run reviewer influence analysis — yes or no. Defaults to false. |
events.invite
POST /api/events/:event/invitations
Send somebody a link that joins them to this event in a role.
The response contains the invitation link. Organizer-only, and the ledger records who issued it, to which address and in which role.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
email | body | Email address — an email address. Required. The address to invite. It does not need an account here yet. |
role | body | Role — one of organizer, judge, participant. Required. What they will be able to do. A judge scores projects; a participant submits one; an organizer can do everything here, including inviting more organizers. |
Records invite.issued.
Limited to 200 invitations from one event per window.
events.judges
GET /api/events/:event/judges
List the judges and organizers of this event.
Organizer-only on purpose. Publishing a judge roster would let anybody un-blind the judging by reading a URL.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
events.list
GET /api/events
List the events this deployment is running.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
archived | query | Include finished events — yes or no. Defaults to false. Include events that have been archived. They stay reachable by slug either way. |
events.mine
GET /api/mine
List the events the caller holds a role in.
Callable by any signed-in account.
events.ping_webhook
POST /api/events/:event/webhooks/ping
Generate a signed webhook test payload without sending it.
Generates a signed test payload locally and records it. Does not contact the supplied URL or verify delivery.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
url | body | Webhook Receiver URL — an http or https link. Required. The HTTPS receiver endpoint. |
secret | body | Webhook Signing Secret — text on one line, between 32 and 128 characters. Required. Never echoed back or written to the ledger. Shared secret for HMAC-SHA256 signature verification (minimum 32 characters). |
Records webhook.pinged.
Limited to 120 organizer changes to one event per window.
events.revoke_role
POST /api/events/:event/roles/revoke
Remove an event role while retaining its historical records.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
account | body | Account ID — text on one line, at most 64 characters. Required. |
role | body | Role — one of organizer, judge, participant. Required. |
Records membership.revoked.
Limited to 120 organizer changes to one event per window.
events.show
GET /api/events/:event
Describe one event, its clock and its tracks.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
events.update
POST /api/events/:event
Update this event's dates and judging settings.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
name | body | Event name — text on one line, at most 200 characters. Required. What people call it. “Dogfood Hackathon 2026”, not “dogfood-2026”. |
timezone | body | Timezone — text on one line, at most 64 characters. Defaults to "UTC". An IANA zone such as Europe/Lisbon, used for displaying times. Every deadline is still one instant for everybody. |
prizes | body | Prizes and recognition — text, any number of lines, at most 4000 characters. Optional. One prize per line, including its amount and eligibility. |
questions | body | Submission questions — text, any number of lines, at most 4000 characters. Optional. One question per line. Teams answer these publicly on their project page. |
submissionsOpenAt | body | Submissions open — a date and time, as epoch milliseconds or an ISO timestamp. Required. When teams may start submitting. |
submissionsCloseAt | body | Submissions close — a date and time, as epoch milliseconds or an ISO timestamp. Required. The deadline. It is enforced to the millisecond. |
judgingOpenAt | body | Judging opens — a date and time, as epoch milliseconds or an ISO timestamp. Required. When judges may start scoring. It may be before submissions close. |
judgingCloseAt | body | Judging closes — a date and time, as epoch milliseconds or an ISO timestamp. Required. When scoring stops. |
reviewsPerProject | body | Reviews per project — a whole number between 1 and 20. Defaults to 3. How many judges should see each project. Three is the usual answer; below three there is nothing to cross-check a lenient judge against. |
pairwiseEnabled | body | Collect pairwise comparisons — yes or no. Defaults to false. Ask judges which of two projects is better, as well as scoring each. It sharpens the top of the leaderboard and costs judges time. |
votingOpenAt | body | Voting opens — a date and time, as epoch milliseconds or an ISO timestamp. Optional. When community voting begins. |
votingCloseAt | body | Voting closes — a date and time, as epoch milliseconds or an ISO timestamp. Optional. When community voting ends. |
votingMode | body | Voting access — one of off, open, account. Defaults to "off". Choose off, open to a voter token, or signed-in accounts only. |
votingCredits | body | Voting credits — a whole number between 1 and 100000. Defaults to 100. The quadratic voting budget per voter. |
Records event.updated.
Limited to 120 organizer changes to one event per window.
events.warp_clock
POST /api/events/:event/clock/warp
Fast-forward or reset the virtual clock for demo and evaluation.
Fast-forwards virtual time in-memory. Appends clock.warped audit ledger entry.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
targetPhase | body | Target Competition Phase — one of realtime, submissions, judging, results. Optional. Jump virtual clock directly into competition milestone. |
targetAt | body | Target Absolute Instant — a date and time, as epoch milliseconds or an ISO timestamp. Optional. Set virtual clock to an exact timestamp. |
offsetMs | body | Relative Offset Milliseconds — a whole number. Optional. Apply an explicit millisecond offset to real time. |
Records clock.warped.
Limited to 120 organizer changes to one event per window.
events.webhooks
GET /api/events/:event/webhooks
Inspect webhook dispatch status, receiver configuration and signing specifications.
Organizer-only. Provides HMAC-SHA256 signature specification and supported event action types.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.archive_manifest
GET /api/events/:event/archive
Export the full lossless archive manifest and schema metadata.
Organizer-only. Exposes archive structure and verified row counts across all strict tables.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.audit_csv
GET /api/events/:event/export/audit.csv
Download audit as CSV.
Organizer-only event data. Text cells are escaped against spreadsheet formulas. Use the JSONL archive for a lossless backup.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.download
GET /api/events/:event/csv/:stage
Download event records as CSV.
Includes private event data. Requires the event organizer role for every stage, including results and projects. Use the JSONL archive for lossless backups; spreadsheet exports neutralize formula-like text.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
stage | path | Export stage — one of registrations, teams, projects, assignments, ballots, results, votes, audit. Required. |
exports.projects_csv
GET /api/events/:event/export/projects.csv
Download projects as CSV.
Organizer-only event data. Text cells are escaped against spreadsheet formulas. Use the JSONL archive for a lossless backup.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.registrations_csv
GET /api/events/:event/export/registrations.csv
Download registrations as CSV.
Organizer-only event data. Text cells are escaped against spreadsheet formulas. Use the JSONL archive for a lossless backup.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.results_csv
GET /api/events/:event/export/results.csv
Download results as CSV.
Organizer-only event data. Text cells are escaped against spreadsheet formulas. Use the JSONL archive for a lossless backup.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.scores_csv
GET /api/events/:event/export/scores.csv
Download scores as CSV.
Organizer-only event data. Text cells are escaped against spreadsheet formulas. Use the JSONL archive for a lossless backup.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
exports.teams_csv
GET /api/events/:event/export/teams.csv
Download teams as CSV.
Organizer-only event data. Text cells are escaped against spreadsheet formulas. Use the JSONL archive for a lossless backup.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
judges.configure
POST /api/events/:event/judges/configure
Set one judge's eligible tracks and review capacity.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
judge | body | Judge account ID — text on one line, at most 64 characters. Required. |
tracks | body | Eligible track keys — text on one line, at most 2000 characters. Optional. Comma separated. Leave blank for every track. |
capacity | body | Maximum reviews — a whole number between 0 and 1000. Optional. Leave blank for no explicit limit. Zero pauses new assignments. |
Records judge.configured.
Limited to 120 organizer changes to one event per window.
judges.recusal
POST /api/events/:event/judges/recusal
Record or clear a project recusal for one judge.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
judge | body | Judge account ID — text on one line, at most 64 characters. Required. |
project | body | Project ID — text on one line, at most 64 characters. Required. |
decision | body | Decision — one of recuse, clear. Required. |
reason | body | Reason — text on one line, between 3 and 500 characters. Required. |
Records judge.recused, judge.recusal_cleared, assignment.removed, assignment.run, assignment.created.
Limited to 120 organizer changes to one event per window.
judges.roster
GET /api/events/:event/judges/roster
List judge track, capacity, and recusal controls.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
judges.self_recusal
POST /api/events/:event/judging/:project/recuse
Leave an assigned project review and request an eligible replacement.
Callable by a judge of the event, while judging is open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's id, as it appears in the URL. |
reason | body | Reason for recusal — text on one line, between 3 and 500 characters. Required. |
Records judge.recused, assignment.removed, assignment.run, assignment.created.
Limited to 60 ballot writes by one judge per window.
judging.queue
GET /api/events/:event/judging
The projects assigned to you, and how far you got with each.
Callable by a judge of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
judge | query | Judge id — text on one line, at most 64 characters. Optional. The judge whose queue or scores to inspect. Non-organizers may only inspect their own. |
focus | query | Review to keep open — text on one line, at most 64 characters. Optional. |
projects.create
POST /api/events/:event/projects
Enter a project into an event.
Saves a draft. Nothing is entered until projects.submit, and the draft is visible only to the team and the organizers until then.
Callable by a participant of the event, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
teamName | body | Team name — text on one line, at most 120 characters. Optional. Only needed the first time. Leave it empty to enter under your own name. |
tagline | body | One-line pitch — text on one line, at most 200 characters. Optional. |
description | body | The full story — text, any number of lines, at most 20000 characters. Optional. Explain the problem, your approach, what works, and what you learned. |
thumbnailUrl | body | Cover image URL — an http or https link. Optional. Optional HTTPS image. The portal also works without external images. |
videoUrl | body | Demo video URL — an http or https link. Optional. |
imageUrls | body | Screenshot URLs — text, any number of lines, at most 16000 characters. Optional. Up to eight HTTPS image links, one per line. |
techTags | body | Technologies — text on one line, at most 1000 characters. Optional. Comma-separated tags, for example TypeScript, SQLite, WebCrypto. |
answers | body | Answers to event questions — text, any number of lines, at most 12000 characters. Optional. Answer the organizer’s questions in order. These answers appear on your public project page. |
title | body | Project title — text on one line, at most 200 characters. Required. What the judges will see at the top of the page. |
summary | body | What it does — text, any number of lines, at most 4000 characters. Required. What you built and what it is for. This is the first thing a judge reads. |
repoUrl | body | Source code — an http or https link. Optional. An https link to the repository. Judges will open it. |
demoUrl | body | Demo — an http or https link. Optional. An https link to something running, or to a recording. Optional. |
trackKey | body | Track — text on one line, at most 40 characters. Optional. Which track to enter. Leave empty if the event has none. |
Records team.created, team.joined, project.created.
Limited to 30 submission edits by one team per window.
projects.disqualify
POST /api/events/:event/projects/:project/disqualify
Disqualify a project, with a stated reason.
The reason is written to the ledger and shown to the team. There is no way to reverse it.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
reason | body | Reason — text, any number of lines, between 3 and 1000 characters. Required. The team will be shown this. It goes on the record either way. |
Records project.disqualified.
Limited to 120 organizer changes to one event per window.
projects.list
GET /api/events/:event/projects
List the projects entered in an event.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
trackKey | query | Track — text on one line, at most 40 characters. Optional. Show only this track. Leave empty for all of them. |
q | query | Search projects — text on one line, at most 200 characters. Optional. |
projects.pull
POST /api/events/:event/projects/:project/pull
Withdraw a project on a team's behalf.
For a team that asked to be pulled. It is not a penalty and it is not recorded as one — use projects.disqualify when the finding is against the team.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
reason | body | Reason — text, any number of lines, between 3 and 1000 characters. Required. The team will be shown this. It goes on the record either way. |
Records project.withdrawn.
Limited to 120 organizer changes to one event per window.
projects.show
GET /api/events/:event/projects/:project
Show one project.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
projects.submit
POST /api/events/:event/projects/:project/submit
Submit a project for judging.
Callable by a participant of the event, on the project's own team, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
Records project.submitted.
Limited to 30 submission edits by one team per window.
projects.update
POST /api/events/:event/projects/:project
Replace a project's details.
Every field is sent, every time. An empty link or track clears it, because a form cannot tell the difference between a box somebody cleared and a field they left out.
Callable by a participant of the event, on the project's own team, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
tagline | body | One-line pitch — text on one line, at most 200 characters. Optional. |
description | body | The full story — text, any number of lines, at most 20000 characters. Optional. Explain the problem, your approach, what works, and what you learned. |
thumbnailUrl | body | Cover image URL — an http or https link. Optional. Optional HTTPS image. The portal also works without external images. |
videoUrl | body | Demo video URL — an http or https link. Optional. |
imageUrls | body | Screenshot URLs — text, any number of lines, at most 16000 characters. Optional. Up to eight HTTPS image links, one per line. |
techTags | body | Technologies — text on one line, at most 1000 characters. Optional. Comma-separated tags, for example TypeScript, SQLite, WebCrypto. |
answers | body | Answers to event questions — text, any number of lines, at most 12000 characters. Optional. Answer the organizer’s questions in order. These answers appear on your public project page. |
title | body | Project title — text on one line, at most 200 characters. Required. What the judges will see at the top of the page. |
summary | body | What it does — text, any number of lines, at most 4000 characters. Required. What you built and what it is for. This is the first thing a judge reads. |
repoUrl | body | Source code — an http or https link. Optional. An https link to the repository. Judges will open it. |
demoUrl | body | Demo — an http or https link. Optional. An https link to something running, or to a recording. Optional. |
trackKey | body | Track — text on one line, at most 40 characters. Optional. Which track to enter. Leave empty if the event has none. |
Records project.updated.
Limited to 30 submission edits by one team per window.
projects.withdraw
POST /api/events/:event/projects/:project/withdraw
Withdraw a project from an event.
Reversible while submissions are open: submitting again clears the withdrawal.
Callable by a participant of the event, on the project's own team, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | path | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
reason | body | Reason — text, any number of lines, between 3 and 1000 characters. Optional. Optional, and only the organizers will read it. |
Records project.withdrawn.
Limited to 30 submission edits by one team per window.
results.certificate_status
GET /api/events/:event/certificates/status
Download signed certificate revocations and supersessions without recipient data.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.certificate_studio
GET /api/events/:event/certificates/studio
Design certificates and view the issued recipient roster.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.certificates
GET /api/events/:event/certificates
View issued Ed25519 verifiable certificates for this event.
Organizer-only, read-only. Returns the stored signed snapshot, or an empty report before issuance. Never creates keys or signatures.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.confidence
GET /api/events/:event/results/confidence
Say which parts of the duel ranking the comparisons establish, and which are a tie.
Resamples the panel to ask whether another panel would have produced this order. pairs is the answer to "is first place real": a pair with ordered: false is two projects the comparisons cannot separate, however far apart they sit in the table. A tier holds the projects that are not separated from the one at the top of it, which is the unit to award on; two projects can share a tier and still be separated from each other, so pairs is where a boundary is established. Organizers can read this before publishing; everybody else gets results.notPublic until then. Costs about a second and is limited to 20 a minute per event.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
replicates | query | Resamples — a whole number between 50 and 2000. Defaults to 400. How many times to refit the ranking on resampled data. More is finer and slower; the default resolves a quarter of a percentage point. |
confidence | query | Confidence — one of 0.9, 0.95, 0.99. Defaults to "0.95". How much of the resampled spread each interval should cover. A higher level separates fewer pairs, because it demands more evidence to call one project ahead of another. |
Limited to 20 resampled analyses of one event per window.
results.configure_certificate_template
POST /api/events/:event/certificates/template
Save the event certificate design before issuance.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
heading | body | Heading — text on one line, between 3 and 90 characters. Required. |
body | body | Message — text, any number of lines, between 3 and 350 characters. Required. |
footer | body | Footer — text on one line, at most 120 characters. Required. |
signatory | body | Signatory — text on one line, between 2 and 100 characters. Required. |
Records certificate.template.updated.
Limited to 120 organizer changes to one event per window.
results.correct_cert
POST /api/events/:event/certificates/corrections
Sign a revocation or supersession for an issued certificate.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
serial | body | Certificate serial — text on one line, between 8 and 180 characters. Required. |
action | body | Correction — one of revoke, supersede. Required. |
reason | body | Reason — text on one line, between 8 and 1000 characters. Required. |
recipientName | body | Corrected recipient name — text on one line, at most 120 characters. Optional. |
recipientEmail | body | Corrected recipient email — an email address. Optional. |
category | body | Corrected category — one of participation, judge, placement. Optional. |
detail | body | Corrected detail — text on one line, at most 500 characters. Optional. |
Records certificate.revoke, certificate.supersede.
Limited to 120 organizer changes to one event per window.
results.evidence_packet
GET /api/events/:event/results/evidence
Download the public method and evidence summary bound to one result revision.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.explain
GET /api/events/:event/results/explain
Explain your team's frozen published ranking with anonymous review contributions.
Callable by a participant of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.history
GET /api/events/:event/results/history
List result publication revisions and correction reasons.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.issue_certs
POST /api/events/:event/certificates
Issue and sign Ed25519 certificates for participants, judges, and winners.
Issues cryptographic Ed25519 certificates. Refuses before results are published.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
Records certificate.issued.
Limited to 120 organizer changes to one event per window.
results.judge_evidence
POST /api/events/:event/results/judge-evidence
Exclude or restore one judge's evidence with an audited reason.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
judge | body | Judge account ID — text on one line, at most 64 characters. Required. |
decision | body | Decision — one of exclude, include. Required. |
reason | body | Reason — text on one line, between 3 and 500 characters. Required. |
Records judge.evidence_excluded, judge.evidence_restored, result.corrected.
Limited to 120 organizer changes to one event per window.
results.preflight
GET /api/events/:event/results/preflight
Check coverage, model warnings, and publication status before publishing.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
results.public_certificate
GET /api/events/:event/certificates/:serial
View an issued certificate and its current correction status.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
serial | path | Certificate serial — text on one line, between 8 and 180 characters. Required. |
results.publish
POST /api/events/:event/results/publish
Publish the ranking for everybody to read.
Reversible: results.unpublish takes the page down again. The warnings on this response are the ones the public page carries, so publishing never looks cleaner than the ranking is.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
reason | body | Internal correction reason — text on one line, at most 500 characters. Optional. Private organizer note. Give a reason to publish a new revision after correcting evidence. |
publicSummary | body | Public revision summary — text on one line, between 4 and 160 characters. Optional. Visible to everyone in result history. Keep judge and participant details private. |
Records event.results_published, result.published, result.corrected.
Limited to 120 organizer changes to one event per window.
results.sandbox
GET /api/events/:event/results/sandbox
Compare normalization methods on current evidence without changing published results.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
Limited to 20 resampled analyses of one event per window.
results.show
GET /api/events/:event/results
Show the ranking, once an organizer has published it.
Organizers can read this before publishing, as a preview. Everybody else gets results.notPublic until results.publish has been called. Judge leniency and scale are not on this response at any role: see events.dashboard. panel and the per-project tier say how much of the order the evidence supports: a tier holds the projects that are not separated from the one at the top of it.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
revision | query | Publication revision — a whole number, at least 1. Optional. Leave blank for the latest frozen publication. |
results.unpublish
POST /api/events/:event/results/unpublish
Take the published ranking back down.
The ledger keeps the publication and the withdrawal, so a ranking that was briefly public cannot be made never to have happened.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
Records event.results_withdrawn.
Limited to 120 organizer changes to one event per window.
reviews.cancel
POST /api/events/:event/review-requests/:request/cancel
Cancel an unfinished targeted review request.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
request | path | Review request ID — a 26-character identifier. Required. |
Records review.cancelled, assignment.removed.
Limited to 120 organizer changes to one event per window.
reviews.request
POST /api/events/:event/review-requests
Assign one additional eligible judge to a submitted project.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
project | body | Project — a 26-character identifier. Required. The project's id, as it appears in the URL. |
reasonCode | body | Reason code — one of coverage, fragility, appeal, other. Required. |
internalReason | body | Private reason — text on one line, between 8 and 500 characters. Required. |
priority | body | Priority — a whole number between 1 and 3. Defaults to 2. |
dueAt | body | Due time (Unix milliseconds) — a whole number, at least 1. Optional. |
Records review.requested, assignment.created.
Limited to 120 organizer changes to one event per window.
reviews.requests
GET /api/events/:event/review-requests
List targeted additional review requests and completion state.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
rubrics.create
POST /api/events/:event/rubric
Write a new version of an event's rubric.
Saves a draft version. Judges score against the published version, so this changes nothing until rubrics.publish.
Callable by a organizer of the event.
| Field | Where | Meaning | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. | ||||||||||
criteria | body | Criteria — text, any number of lines, at most 8000 characters. Required. One per line: key | Label | weight | min | max. The last three are optional and default to 1 | 1 | 5. Example: craft | Technical craft | 2 | 1 | 5 |
Records rubric.created.
Limited to 120 organizer changes to one event per window.
rubrics.publish
POST /api/events/:event/rubric/publish
Publish a rubric version for judges to score against.
There is no way to unpublish. Write a new version and publish that instead.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
version | body | Version — a whole number between 1 and 10000. Required. Which version to publish. Rubrics are never edited, only superseded. |
Records rubric.published.
Limited to 120 organizer changes to one event per window.
rubrics.show
GET /api/events/:event/rubric
Show the rubric judges score against.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
version | query | Version — a whole number between 1 and 10000. Optional. Defaults to the published version. |
system.about
GET /api/about
Describe what this deployment is and who wrote it.
Every claim below names the route or the file that settles it. Nothing on this page is measured at request time, so two deployments of the same version answer identically.
Callable by anyone, signed in or not.
system.capabilities
GET /api/capabilities
Publish the access matrix for every operation.
stranger is a signed-in account with no role in the event, which is also how an organizer of a different event presents itself. A notFound cell is the isolation rule: not yours means not found, never forbidden.
Callable by anyone, signed in or not.
system.docs
GET /api/docs
Describe every operation this deployment performs.
Callable by anyone, signed in or not.
system.healthz
GET /api/healthz
Report whether this deployment is serving correctly.
Callable by anyone, signed in or not.
system.home
GET /api
List the events this deployment is running.
Callable by anyone, signed in or not.
system.limits
GET /api/system/limits
List fixed-window rate limiting policies and status 429 contract.
Public policy specification. Explains fixed-window rate meters and Retry-After header semantics.
Callable by anyone, signed in or not.
system.openapi
GET /api/openapi.json
Publish the OpenAPI description of this deployment.
The document is derived from the same command declarations the server dispatches, so a generated client is generated against what is actually running.
Callable by anyone, signed in or not.
system.rate_probe
POST /api/system/rate-probe
Safe rate limit probe endpoint to exercise 429 flood refusal.
Enforces 2 requests per minute. Exceeding triggers HTTP 429 Too Many Requests with Retry-After header.
Callable by anyone, signed in or not.
Records system.probed.
Limited to 2 rate limit test probes per window.
teams.invite_rotate
POST /api/events/:event/teams/:team/invites/rotate
Rotate the private invitation link for this team.
Callable by a participant of the event, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
team | path | Team — a 26-character identifier. Required. The team's identifier, from the team list or from an invitation. |
Records team.invite_rotated.
Limited to 30 submission edits by one team per window.
teams.join
POST /api/events/:event/teams/:team/members
Join a team in an event.
Callable by a participant of the event, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
team | path | Team — a 26-character identifier. Required. The team's identifier, from the team list or from an invitation. |
Records team.joined.
Limited to 30 submission edits by one team per window.
teams.leave
POST /api/events/:event/teams/:team/leave
Leave a team in an event.
Callable by a participant of the event, while submissions are open.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
team | path | Team — a 26-character identifier. Required. The team's identifier, from the team list or from an invitation. |
Records team.left.
Limited to 30 submission edits by one team per window.
teams.list
GET /api/events/:event/teams
List the teams in an event.
Callable by a participant of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
tokens.create
POST /api/me/tokens
Create an expiring API token for one event and scope.
Callable by any signed-in account.
| Field | Where | Meaning |
|---|---|---|
event | body | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
label | body | Token label — text on one line, at most 80 characters. Required. |
scope | body | Scope — one of read:projects, read:results, write:projects, write:judging. Defaults to "read:projects". |
days | body | Expires in days — a whole number between 1 and 90. Defaults to 30. |
Records token.created.
Limited to 120 organizer changes to one event per window.
tokens.list
GET /api/me/tokens
Manage your scoped API tokens.
Callable by any signed-in account.
tokens.revoke
POST /api/me/tokens/:tokenId/revoke
Immediately revoke one of your API tokens.
Callable by any signed-in account.
| Field | Where | Meaning |
|---|---|---|
tokenId | path | Token ID — a 26-character identifier. Required. |
Records token.revoked.
Limited to 120 organizer changes to one event per window.
tracks.create
POST /api/events/:event/tracks
Add a track to an event.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
key | body | Track key — text on one line, at most 40 characters. Required. Lower case, digits, hyphens and underscores. It appears in URLs and in the results table. |
label | body | Track name — text on one line, at most 120 characters. Required. What participants will see. “Best use of local models”, not “local-models”. |
ordering | body | Position — a whole number between 0 and 999. Defaults to 0. Lower numbers come first. Ties are broken by key, so leaving this alone lists them alphabetically. |
Records track.created.
Limited to 120 organizer changes to one event per window.
votes.abuse
GET /api/events/:event/voting/abuse
Detect and analyze suspicious voting rings and Sybil attacks.
Organizer-only. Surfaces collusive voting rings, burst timings, and recommendation factors.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
votes.ballot
GET /api/events/:event/voting
View your voting budget and shuffled project ballot.
Uses the event-scoped HttpOnly cookie set by votes.start. API clients retain the Set-Cookie header. Projects are shuffled for that credential; only your own allocations are shown. No aggregate standings appear here.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
votes.cast
POST /api/events/:event/votes
Spend voting credits on a submitted project.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
token | body | Voter token — text on one line, between 43 and 43 characters. Optional. Never echoed back or written to the ledger. The token returned when voting started. |
project | body | Project — a 26-character identifier. Required. The project's identifier, as it appears in the URL. |
influence | body | Influence — a whole number between 1 and 10. Defaults to 1. A vote of n influence costs n squared credits. |
Records vote.cast.
Limited to 30 public vote writes by one voter per window.
votes.configure_abuse
POST /api/events/:event/voting/abuse/policy
Set this event's voting anomaly thresholds.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
patternPercent | body | Pattern similarity percent — a whole number between 50 and 100. Required. |
sharedOriginPercent | body | Shared-origin similarity percent — a whole number between 50 and 100. Required. |
highRisk | body | High-risk score threshold — a whole number between 0 and 100. Required. |
Records abuse.policy_updated.
Limited to 120 organizer changes to one event per window.
votes.discount_cluster
POST /api/events/:event/voting/discount
Apply an audited discount after confirming a voting signal through human review.
Requires a confirmed review. Raw ballots are preserved; an audited factor is applied in aggregation.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
clusterTokens | body | Voter Token Hashes — text on one line, at most 4096 characters. Required. Comma-separated list of voter hashes to discount. |
discountPercent | body | Discount Percentage — a whole number between 0 and 100. Defaults to 100. Percentage to reduce ballot weights by (default 100% = nullify). |
reason | body | Audit Reason — text on one line, between 5 and 256 characters. Required. Reason for applying discount (logged permanently to audit trail). |
Records vote.cluster_discounted.
Limited to 120 organizer changes to one event per window.
votes.results
GET /api/events/:event/votes
List the current public voting totals.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
votes.review_abuse
POST /api/events/:event/voting/abuse/review
Record an investigator's assessment of one voting signal.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
clusterTokens | body | Voter token hashes — text on one line, between 64 and 4096 characters. Required. |
state | body | Review state — one of investigating, benign, confirmed. Required. |
reason | body | Evidence and reason — text on one line, between 8 and 1000 characters. Required. |
Records abuse.reviewed.
Limited to 120 organizer changes to one event per window.
votes.start
POST /api/events/:event/votes/start
Start a voting session for this event.
Callable by anyone, signed in or not.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
Records voter.created.
Limited to 30 public vote writes by one voter per window.
votes.void_voter
POST /api/events/:event/voting/void
Void all votes cast by a suspicious voter identity.
Nullifies voter weight to zero and logs permanent audit record.
Callable by a organizer of the event.
| Field | Where | Meaning |
|---|---|---|
event | path | Event — text on one line, between 2 and 64 characters. Required. The event's slug or id, as it appears in the URL. |
voterToken | body | Voter Token Hash — text on one line, at most 4096 characters. Required. The token hash of the voter to void. |
reason | body | Audit Reason — text on one line, between 3 and 256 characters. Required. Reason for voiding voter ballots. |
Records vote.voter_voided.
Limited to 120 organizer changes to one event per window.
comments.add
POST /api/events/:event/projects/:project/commentsComment on a submitted project.
Callable by any signed-in account.
eventprojectbodyRecords
comment.created.Limited to 30 public vote writes by one voter per window.