# Overview

## Deployments

Signed pack deployments (register, list, get). The single wire surface that lands a signed OCI image + index.json into the platform. Register runs a six-step atomic transaction: Ed25519 signature verify over the canonical `{imageDigest, artifactVersion, indexHash, tenantId, publishedAt}` envelope, tenant-scoped trust-list check via `SigningKeyRegistryBinding`, image pullability + `/app/index.json` sha256 match via `ImageRegistryBinding`, per-primitive manifest validation, registry upserts (tools + guardrails + agents + flows), append-only deployment ledger row via `DeploymentBinding`. All-or-nothing rollback on any failure; digest-based idempotency (redeploying the same image returns the existing record). Records are immutable — rollback = re-register the previous digest.

## Operations

GET

[/v1/deployments](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentslist.md)

POST

[/v1/deployments](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentsregister.md)

GET

[/v1/deployments/{deploymentId}](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentsget.md)

GET

[/v1/deployments/{deploymentId}/pack-env](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentspackenv.md)

POST

[/v1/deployments/{deploymentId}/secrets](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentssyncsecrets.md)

GET

[/v1/deployments/{deploymentId}/values](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentsvalueslist.md)

POST

[/v1/deployments/{deploymentId}/promotions](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentspromote.md)

POST

[/v1/deployments/{deploymentId}/promotions/check](https://docs.kindgi.com/v0.1.10/reference/api/operations/deploymentspromotecheck.md)