Authentication
If an engagement exposes an API, authentication and authorization are selected for the customer's environment and documented in its interface specification. Do not assume an ActiveMotion dashboard or a universal bearer-token scheme.
Core Endpoints
API endpoints, payloads, webhooks, status handling, and operational-record access are defined for the implemented workflow. The contract should document schemas, errors, idempotency, permissions, and versioning.
Rate Limits and Quotas
Rate limits and quotas depend on the deployed components and workload. Define them from capacity tests, expose retry information where the interface supports it, and document client backoff and overload behavior.