POST /v1/approvals/{actionKey}:approve); own: an investor reaches only its own holder’s records.
The venue’s own staff
The venue’s own systems
Outside parties working with the venue
Public routes need no bearer and admit anyone:
GET /v1/tenants/{tenantId}, GET /v1/health, GET /v1/openapi.json.
Related: Conventions · Duties and governance · Deployment patterns
