From 47c90400afe80547c131d4258a27cd253c31b83c Mon Sep 17 00:00:00 2001
From: Albrecht Degering <albrecht@degering.name>
Date: Thu, 20 Aug 2026 13:00:59 +0200
Subject: [PATCH] chore: classify governed administration endpoints

---
 .../endpoint-surface-declarations.json        | 77 +++++++++++++++++++
 1 file changed, 77 insertions(+)

diff --git a/tools/inventory/endpoint-surface-declarations.json b/tools/inventory/endpoint-surface-declarations.json
index eca7bcc..42c27f6 100644
--- a/tools/inventory/endpoint-surface-declarations.json
+++ b/tools/inventory/endpoint-surface-declarations.json
@@ -469,6 +469,69 @@
       "rationale": "This capability-first module intentionally exposes a headless API for other modules and integrations.",
       "repository": "govoplan-connectors"
     },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/connectors/governed/configurations",
+      "rationale": "The Connector governance administration page lists tenant configurations through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/configurations",
+      "rationale": "The Connector governance administration page creates tenant configurations through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "PUT",
+      "path": "/connectors/governed/configurations/{}",
+      "rationale": "The Connector governance administration page constructs this revision-guarded URL from the selected configuration identifier.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/configurations/{}/dry-runs",
+      "rationale": "The Connector governance administration page constructs this bounded dry-run URL from the selected configuration identifier.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/configurations/{}/simulations",
+      "rationale": "The Connector governance administration page constructs this bounded simulation URL from the selected configuration identifier.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/connectors/governed/definitions",
+      "rationale": "The Connector governance administration page lists governed connector definitions through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/definitions",
+      "rationale": "The Connector governance administration page publishes immutable connector-definition revisions through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "GET",
+      "path": "/connectors/governed/runs",
+      "rationale": "The Connector governance administration page lists dry-run and simulation evidence through this endpoint.",
+      "repository": "govoplan-connectors"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/connectors/governed/runs/{}/review",
+      "rationale": "The Connector governance administration page constructs this review-decision URL from the selected run identifier.",
+      "repository": "govoplan-connectors"
+    },
     {
       "category": "intentionally_headless",
       "method": "GET",
@@ -924,6 +987,20 @@
       "rationale": "Retained compatibility endpoint; current module surfaces use the replacement contract.",
       "repository": "govoplan-identity"
     },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/identity/identities/{}/activate",
+      "rationale": "The Identity administration workspace constructs this explicit lifecycle-action URL from the selected identity identifier.",
+      "repository": "govoplan-identity"
+    },
+    {
+      "category": "ui_reachable",
+      "method": "POST",
+      "path": "/identity/identities/{}/deactivate",
+      "rationale": "The Identity administration workspace constructs this explicit lifecycle-action URL from the selected identity identifier.",
+      "repository": "govoplan-identity"
+    },
     {
       "category": "intentionally_headless",
       "method": "POST",