What changed, and when.

API contract frozen

• The OpenAPI document covers 213 operations: vision, render, sandboxes, routines, actions, infer, the vault, webhooks, keys, usage, limits and the request log.
• Errors are RFC 9457 problem documents with stable codes. Firecrawl and OpenAI paths keep their upstream error shapes.
• Every response carries x-request-id and Server-Timing; the request log keeps each request's phase breakdown for 7 days.
• API keys use the b3os_sk_ format with a checksum suffix, so secret scanners can recognize them.