Allowlist (KYD/KYO)

Owner-keyed allowlist entries with trust score and purpose filters.

Allowlist entries are keyed on the account owner, not individual agents. Every active agent owned by the whitelisted account is then permitted, subject to trust score and purpose filters. Two identifiers are accepted:

• ASTRAD-* — KYD identifier for individual developers (sole traders).
• ASTRAO-* — KYO identifier for organisations. Column exists today; organisation onboarding that issues ASTRAO-ids ships in a follow-up.

POST /api/endpoints/:id/allowlist
Authorization: Bearer <api-key>

{
  "allowedOwnerIdentifier": "ASTRAD-4l061o2x",
  "minTrustScore": 30,
  "allowedPurposes": ["read_data"]
}