Recent changes

This page tracks user-visible contract changes. Internal infrastructure work is omitted unless it changes how clients call the service.

2026-07-15

Artifact owners can delete when every referencing job is terminal. Only non-terminal job references return 409 artifact_in_use.
An accepted deletion hides metadata and releases account quota immediately. Namespaced backing data keeps its default 24-hour physical-GC grace period. Legacy backing data stays guarded operational inventory and does not consume user quota.
GET /api/v1/artifacts and 507 artifact_quota_exceeded responses expose the authoritative quota limit, used, and remaining bytes. Artifact metadata separates active and terminal reference counts.

Wallet access is open: any wallet can authenticate (POST /api/v1/auth/wallet/challenge → sign → POST /api/v1/auth/wallet/verify) and fund the account. No allowlist entry or approval step is necessary. The first verify for a new wallet creates the account. Computalot continues to issue API keys (flk_…) on request through the waitlist.

MPP (Machine Payments Protocol) is accepted with x402 on the funding rail. Every quote 402 now carries a WWW-Authenticate: Payment challenge (method evm, intent charge, with a decoded copy in the mpp block of the body) in addition to the x402 PAYMENT-REQUIRED header.
Quotes settle over either carrier at the same endpoints: x402 through the PAYMENT-SIGNATURE header (bearer auth), or MPP through Authorization: Payment <base64url credential> with an EIP-3009 authorization payload and no bearer token. Successful MPP settlements return a base64url JSON Payment-Receipt response header. Repeats stay replay-safe (replay: true).
GET /api/v1/account/quotes/:id includes the decoded MPP challenge (mpp block) for open quotes.

Public uploads now use the authenticated controller relay, with a 2 GiB request limit, or register an existing external URL. Direct and multipart object-store upload endpoints return 410 Gone.
The default retained-byte quota is 100 GiB per account. Computalot deduplicates local and R2 content hashes within the account. When the quota is full, the API returns 507 artifact_quota_exceeded.
Artifacts stay retained until you delete them. References from producing jobs and job inputs block deletion with 409 artifact_in_use during the 30-day terminal-job retention window. Unreferenced namespaced backing data is collected after the default 24-hour grace period.
Job submission validates concrete _artifacts.download IDs, account ownership, and retained references atomically before work or billing admission.

Worker process exit status is the authoritative terminal truth. result_quality and result_warnings are reserved as null and []. The API accepts and ignores legacy object-shaped result_schema metadata. Non-object values return 422.
Admission rejects unsupported task-shaped payloads, excessive retries or dependencies, invalid fan-out or resource shapes, and inaccessible artifacts before it creates work or reserves funds.
max_retries accepts 0 through 10. Holds cover the requested attempt budget. Infrastructure requeues do not consume that retry budget.
Dependencies wait for real terminal task outcomes. completed and partial dependencies unblock work. failed and cancelled dependencies cancel blocked jobs.
Non-empty callback_url values return 422. Use job SSE, multi-job watch, or polling for completion updates.

User uploads require OCI execution with runtime.sandbox: "gvisor".
User-upload manifests cannot declare runtime.init.commands, runtime.services, or validation.commands. Put installs and build steps in the Dockerfile, and use declarative executable and file validation.

Public health and readiness endpoints stay available. Prometheus metrics are for operators only. They require a local request, admin authorization, or the dedicated metrics token.