Immutable bounded collection metadata; member bytes use verified artifact uploads and downloads.

GET

/connector/v1/assignments/{assignment}/collections/{id}/members

At most 64 KiB per request/page and 16 MiB per manifest. Freeze membership before binding members. Completion seals exact verified versions atomically. Replay original identities after uncertainty. Unknown/duplicate fields and query parameters are rejected, except the member cursor. Member pages contain at most 100 entries and 64 KiB; next_cursor is an immutable index, bound by the collection UUID. Every listed member is required. A sealed manifest remains historical evidence when bytes become unavailable.

Authorizations

• connector_bearer

Parameters

Path Parameters

assignment

required

string format: uuid

id

required

string format: uuid

Query Parameters

cursor

integer

0 <= 10000

Header Parameters

X-Connector-Session

required

string format: uuid

Responses

200

Original receipt or bounded current view.

Media typeapplication/json

object

items

required

Array<object>

object

artifact_id

string | null format: uuid

available

required

boolean

index

required

integer format: int32

member_id

required

string format: uuid

spec

required

object

checksum_sha256

required

string

>= 44 characters <= 44 characters /^[A-Za-z0-9+/]{42}[AEIMQUYcgkosw048]=$/

media_type

required

string

path

required

string

scientific_metadata

required

size_bytes

required

integer format: int64

version_id

string | null

next_cursor

integer | null format: int32

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

400

Unsupported query parameters.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

401

Active credential required.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

404

Unknown and unauthorized collections are indistinguishable.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

409

Frozen evidence conflict or members not verified.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

413

Request body exceeds its bound.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

415

Collection writes require application/json.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

422

Invalid manifest, paths, metadata or member evidence.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

429

Collection admission limit exceeded.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

503

Unavailable or uncertain acknowledgement; repeat original operation.

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.

default

An HTTP request failed; inspect the stable error code and request ID.

Media typeapplication/json

The common JSON body for errors returned by the HTTP application.

object

code

required

Stable machine-readable error code.

string

details

One of:

null

null

object

Bounded corrections for authorized scientific-schema failures only. Absent on other failures. The complete validation error body is <=4608 bytes.

object

truncated

required

More violations exist than fit in this response.

boolean

violations

required

At most eight violations, in validator traversal order.

Array<object>

<= 8 items

A schema failure without submitted values or arbitrary property names.

object

correction

required

Fixed guidance; actual bounds and allowed values remain in the publication schema.

string

<= 160 characters

position

required

JSON Pointer relative to inputs; the empty string denotes its root. Only ordinary, explicitly declared property names and array indices appear.

string

<= 128 characters

Example

/value

position_redacted

required

The position stops at a safe ancestor instead of naming the exact field.

boolean

rule

required

Stable categories independent of the validator’s free-form diagnostics.

string

Allowed values: type required additionalProperties propertyNames unevaluatedProperties minimum maximum exclusiveMinimum exclusiveMaximum multipleOf minLength maxLength pattern format enum const minItems maxItems uniqueItems additionalItems unevaluatedItems contains minProperties maxProperties anyOf oneOf not contentEncoding contentMediaType schema

message

required

Safe explanation without internal errors or submitted input values.

string

request_id

required

Matches the response’s x-request-id header.

string

Headers

Cache-Control

string

No-store

x-request-id

string

Always present. A fresh server-generated UUID for this request; incoming IDs are ignored. On errors, this equals the response body’s request_id.