From 209a43592ffdea53e5a48448fb0138b6f57446dd Mon Sep 17 00:00:00 2001
From: Albrecht Degering <albrecht@degering.name>
Date: Fri, 7 Aug 2026 14:54:09 +0200
Subject: [PATCH] chore: declare new API endpoint surfaces

---
 .../endpoint-surface-declarations.json        | 28 +++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/tools/inventory/endpoint-surface-declarations.json b/tools/inventory/endpoint-surface-declarations.json
index ad4dc7d..dbffe49 100644
--- a/tools/inventory/endpoint-surface-declarations.json
+++ b/tools/inventory/endpoint-surface-declarations.json
@@ -357,6 +357,27 @@
       "rationale": "The local bootstrap handoff reads only minimum first-run readiness before a normal authenticated shell exists.",
       "repository": "govoplan-core"
     },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/admin/privacy/data-subject-requests/{}/erasure-plan",
+      "rationale": "The Data-subject requests administration panel builds this revision-guarded action URL from the selected request identifier.",
+      "repository": "govoplan-core"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/admin/privacy/data-subject-requests/{}/execute",
+      "rationale": "The Data-subject requests administration panel builds this explicitly confirmed action URL from the selected request identifier.",
+      "repository": "govoplan-core"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/admin/privacy/data-subject-requests/{}/search",
+      "rationale": "The Data-subject requests administration panel builds this provider-search action URL from the selected request identifier.",
+      "repository": "govoplan-core"
+    },
     {
       "category": "public_integration",
       "method": "GET",
@@ -805,6 +826,13 @@
       "rationale": "A short-lived purpose-bound bearer grant lets the public Forms Runtime surface stream one attachment directly to Files without granting general Files access.",
       "repository": "govoplan-files"
     },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/files/{}/versions/{}/download",
+      "rationale": "Postbox resolves immutable Files evidence references to this exact-version download URL; Files performs the final tenant and access check.",
+      "repository": "govoplan-files"
+    },
     {
       "category": "ui_reachable",
       "method": "POST",