From f407419d25bd0688ee28709b1e52ce67bd254ce1 Mon Sep 17 00:00:00 2001
From: Albrecht Degering <albrecht@degering.name>
Date: Thu, 20 Aug 2026 03:42:58 +0200
Subject: [PATCH] chore(inventory): declare Postbox client transform endpoint

---
 tools/inventory/endpoint-surface-declarations.json | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/tools/inventory/endpoint-surface-declarations.json b/tools/inventory/endpoint-surface-declarations.json
index cb50ea9..eca7bcc 100644
--- a/tools/inventory/endpoint-surface-declarations.json
+++ b/tools/inventory/endpoint-surface-declarations.json
@@ -1377,6 +1377,13 @@
       "rationale": "Postbox delivery, access-decision, and routing-preview APIs are consumed by Campaign and other module capabilities.",
       "repository": "govoplan-postbox"
     },
+    {
+      "category": "public_integration",
+      "method": "POST",
+      "path": "/postbox/admin/postboxes/{}/protection-transitions/{}/transform",
+      "rationale": "An approved external encryption client uses this governed endpoint to submit per-message E2EE or plaintext transforms with digest and authority evidence; the ordinary server-rendered WebUI never handles E2EE private keys.",
+      "repository": "govoplan-postbox"
+    },
     {
       "category": "intentionally_headless",
       "method": "POST",