Core Primitives

Operations

An Operation is a persistent stateful object coordinating the pursuit of a real-world outcome. It is the central primitive — everything else attaches to it.

The Operation object

Operation

{
  "id": "op_abc123",
  "type": "crypto_investment_fraud",
  "intent": "asset_recovery",
  "posture": "litigation_ready",
  "state": "active",
  "title": "BTC Recovery — Victim 2847",
  "created_at": "2025-01-15T09:00:00Z",
  "updated_at": "2025-01-20T14:30:00Z",
  "metadata": {}
}

Parameter	Type	Description
`id`	string	Unique identifier. Prefixed with op_
`type`required	string	Operation type — determines available states and transitions
`intent`required	string	Why the operation exists
`posture`required	string	How the operation behaves under risk
`state`	string	Current lifecycle state
`title`	string	Human-readable title
`created_at`	datetime	ISO 8601 creation timestamp
`updated_at`	datetime	ISO 8601 last update timestamp
`metadata`	object	Arbitrary key-value pairs

Operation types

crypto_investment_fraudpig_butcheringvictim_recoveryexchange_escalationlaw_enforcement_packetcyber_incidentcompliance_investigationasset_recovery

Posture values

monitoringactive_investigationlitigation_readylaw_enforcement_engagedemergency

Lifecycle

Operations move through a defined state machine. Each transition is recorded with who initiated it, what proof supported it, and when it happened.

created→

intake→

triaged→

verified→

active→

escalated→

action_pending→

resolution_pending→

resolved→

closed→

archived

Endpoints

Create an operation

POST

/v1/operations

curl https://api.microndelta.com/v1/operations \
  -H "Authorization: Bearer md_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "crypto_investment_fraud",
    "intent": "asset_recovery",
    "posture": "litigation_ready",
    "title": "BTC Recovery — Victim 2847"
  }'

Response

{
  "id": "op_abc123",
  "type": "crypto_investment_fraud",
  "intent": "asset_recovery",
  "posture": "litigation_ready",
  "state": "created",
  "title": "BTC Recovery — Victim 2847",
  "created_at": "2025-01-15T09:00:00Z",
  "updated_at": "2025-01-15T09:00:00Z",
  "metadata": {}
}

Retrieve an operation

GET

/v1/operations/:id

cURL

curl https://api.microndelta.com/v1/operations/op_abc123 \
  -H "Authorization: Bearer md_live_xxxxxxxxxxxxx"

List operations

GET

/v1/operations

Returns a paginated list of operations

Parameter	Type	Description
`limit`	integer	Number of results per page (default 20, max 100)
`cursor`	string	Pagination cursor from previous response
`state`	string	Filter by operation state
`type`	string	Filter by operation type

Update an operation

PATCH

/v1/operations/:id

cURL

curl -X PATCH https://api.microndelta.com/v1/operations/op_abc123 \
  -H "Authorization: Bearer md_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{ "posture": "law_enforcement_engaged" }'

Transition state

POST

/v1/operations/:id/transitions

Move the operation to a new state

curl -X POST https://api.microndelta.com/v1/operations/op_abc123/transitions \
  -H "Authorization: Bearer md_live_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "to": "verified",
    "reason": "Evidence reviewed and confirmed",
    "proof": ["att_456"]
  }'

←Design Principles Evidence→