openapi: 3.1.0
info:
  title: Mobile-ID QuantumSafe API Design Skeleton
  version: 0.1.0-design
  description: >-
    Non-production interface design artifact. Endpoint availability, authentication,
    schemas and product versions must be confirmed in an approved release.
servers:
  - url: https://sandbox.example.invalid
    description: Placeholder only; not an active service
paths:
  /v1/readiness-assessments:
    post:
      summary: Create a scoped readiness assessment request
      parameters:
        - in: header
          name: Idempotency-Key
          required: true
          schema: { type: string }
        - in: header
          name: X-Correlation-Id
          required: true
          schema: { type: string }
      responses:
        '202': { description: Accepted for controlled processing }
        '400': { $ref: '#/components/responses/Problem' }
  /v1/signatures:
    post:
      summary: Submit a policy-bound signing operation
      responses:
        '202': { description: Accepted; implementation release required }
        '400': { $ref: '#/components/responses/Problem' }
  /v1/verifications:
    post:
      summary: Submit an artifact for policy-bound verification
      responses:
        '200': { description: Verification result }
        '400': { $ref: '#/components/responses/Problem' }
components:
  responses:
    Problem:
      description: RFC 9457-style problem detail
      content:
        application/problem+json:
          schema:
            type: object
            required: [type, title, status, correlationId]
            properties:
              type: { type: string, format: uri-reference }
              title: { type: string }
              status: { type: integer }
              detail: { type: string }
              correlationId: { type: string }
