API versioning

The public Partner surface is /api/external/v1. Webhook endpoints pin api_version: v1 (default) and receive X-API-Version: v1 on deliveries.

Breaking changes will ship under a new major path or version pin — existing v1 contracts stay stable.