Integration

API reference

Health endpoints, signed PA webhooks, and the required Project Alpha integration surface.

AlphaLedger endpoints

  • GET /healthz: process health
  • GET /readyz: database/application readiness
  • POST /api/v1/integrations/pa/events: signed PA webhook receiver

Webhook headers:

  • X-PA-Event-ID: must match the envelope event ID
  • X-PA-Timestamp: UTC ISO-8601 timestamp within five minutes
  • X-PA-Signature: lowercase HMAC-SHA256 of timestamp.raw_body

Required PA endpoints

  • GET /api/v1/integrations/alphaledger/manifest
  • POST /api/v1/integrations/alphaledger/installations
  • GET /api/v1/integrations/alphaledger/changes?cursor=...
  • POST /api/v1/integrations/alphaledger/time-records/batch
  • POST /api/v1/integrations/alphaledger/pay-accruals/batch
  • POST /api/v1/integrations/alphaledger/reconciliation

All AL deliveries include an Idempotency-Key; PA must return the original result for duplicates.

Event IDs and idempotency keys identify effects, not attempts. Retrying the same logical event must never create a second time record or pay accrual.