Build against the sovereign data mesh from any client. Every write is GDBx-signed (ECDSA P-256), PoW-gated and replay-protected; reads are open.
/did
register a DID document — body {addr, pubkey, pubkeyHex, ts, nonce, diff, hash, sig}
/did/:addr
resolve a did:gdbx document
/identity/role
superadmin-signed promote/demote (RBAC guest→superadmin)
/identity
GDPR right-to-be-forgotten — cryptographic erasure of everything
/sync
apply a signed LWW delta batch — body includes deltas[], ts, nonce, diff, hash, sig
/sync/:addr?prefix=
read merged state (primary + mirror pool, newest-clock wins)
ws?addr=:addr
real-time hub — send hello → put → receive applied + delta broadcasts
/relay
Nostr kind-23124 ingest — GDBx envelope in content, same firewall as HTTP/WS
/peers
presence heartbeat — {addr, transports[], name}
/stats
global counters — dids, deltas, active peers, policy block
/leaderboard
top active addresses + transport mix + live peers
/pool
replication pool status — primary + mirror health
/health
liveness probe
/export
signed backup snapshot of an address (owner-proof required)