ouroboros-engine

/ouroboros/ouroboros-engine

The **Python backend** of [Ouroboros](https://github.com/NobuData/ouroboros): the service that executes the work `ouroboros-rest` brokers. It is **internal only**. Every request arrives from `ouroboros-rest`, inside the cluster, carrying a shared secret on the `X-Ouro-Internal-Key` header; a browser never reaches it. That is a deployment claim, so the service enforces it itself rather than trusting it — **every path but `/healthz` requires the key**, the comparison is constant time, and a request without one is refused before routing. A rejection is therefore a bare `401 {"detail":"Unauthorized"}` whether the path exists or not: status codes are how a surface gets mapped from outside, and an unauthenticated caller cannot tell `/v0/status` from `/v0/anything-else`. Read the `401` documented on each operation below as the answer to *anything* unauthenticated, including paths this document does not list. `/v0` is the versioned internal prefix. It is unstable by definition — it changes with the two services that share it, which deploy together — and a stable `/v1` is a later promise, not this one.