Public reads are safe for browsers. State-changing APIs require wallet signatures or registered service authority.
| Capability | Interface | State | Authority |
|---|---|---|---|
| Member session and enrollment | GET/POST /api/wallet-session.php | LIVE | Same-origin SiloID member |
| Testnet wallet activity | GET/POST /api/wallet-live.php | LIVE | Authenticated SiloID + CSRF |
| MainNet release gates | GET /api/mainnet-readiness.php | FAIL-CLOSED | Public read; production activation requires all gates |
| Validator explorer | GET /explorer.php | LIVE | Public read |
| Testnet NFT verification | GET /api/public-testnet-nft.php?id= | LIVE | Public read |
| SiloDrive wallet provisioning | POST /api/testnet-wallet-ensure.php | GATED | Signed service |
| NFT quote and mint | POST /api/testnet-mint-quote.php POST /api/testnet-nft-mint.php | GATED | Signed service + explicit confirmation |
| Contract deployment | Not published | PLANNED | Future wallet / multisig |
