# Bindu

## Docs

- [Get the agent card](https://docs.getbindu.com/api-reference/agent-discovery/get-the-agent-card.md): The A2A standard discovery document. Any client that knows the agent's base URL can `GET` this to learn the agent's DID, capabilities, published skills, and where to send requests.
- [Root redirect to agent card](https://docs.getbindu.com/api-reference/agent-discovery/root-redirect-to-agent-card.md): A convenience: `GET /` returns `302 Found` pointing at the agent card. Useful for humans browsing to the agent's base URL — they end up at something meaningful instead of a 404.
- [Resolve a DID (via JSON body)](https://docs.getbindu.com/api-reference/did-resolution/resolve-a-did-via-json-body.md): Alternate form for clients that prefer POST (keeps the DID out of URL logs). Returns the same document `GET` would.
- [Liveness + readiness probe](https://docs.getbindu.com/api-reference/health-&-monitoring/liveness-+-readiness-probe.md): Returns 200 when healthy, 503 when any mandatory dependency (storage, scheduler, message bus, grpc) is degraded. The body carries per-component status so orchestrators can show which specific thing is broken.
- [Prometheus metrics (text exposition)](https://docs.getbindu.com/api-reference/health-&-monitoring/prometheus-metrics-text-exposition.md): Standard Prometheus text format. Key series include:
- [Liveness and basic configuration probe.](https://docs.getbindu.com/api-reference/health/liveness-and-basic-configuration-probe.md): Unauthenticated, cheap, returns immediately. Does NOT verify downstream connectivity (Supabase, OpenRouter, Hydra) — it only reports whether the gateway process has booted with the expected config. Use this for container liveness checks; for readiness probes that include downstream health, build a h…
- [The gateway's self-published DID document.](https://docs.getbindu.com/api-reference/identity/the-gateways-self-published-did-document.md): Returns a W3C DID Core v1-compatible document with the gateway's Ed25519 public key under `authentication[]`. A2A peers that accept `did_signed` requests fetch this to verify the gateway's outbound signatures.
- [JSON-RPC 2.0 endpoint (all agent operations dispatch here)](https://docs.getbindu.com/api-reference/json-rpc/json-rpc-20-endpoint-all-agent-operations-dispatch-here.md): Every write or read operation on tasks, messages, and contexts uses this endpoint. The `method` field in the body selects the operation. See the *Error catalog* in the top-level description for every possible `error.code`.
- [Ask whether this agent can handle a task](https://docs.getbindu.com/api-reference/negotiation/ask-whether-this-agent-can-handle-a-task.md): Orchestrators use this to pick the best agent for a task before sending a real `message/send`. The agent returns a capability score (0–1) weighted across skill match, I/O compatibility, performance, load, and cost.
- [Browser-facing payment capture page (HTML)](https://docs.getbindu.com/api-reference/payment-x402/browser-facing-payment-capture-page-html.md): HTML page users browse to in order to complete payment via a browser wallet. Not a machine-callable endpoint — clients that want programmatic payment should use the x402 flow directly.
- [Poll (or long-poll) a payment session](https://docs.getbindu.com/api-reference/payment-x402/poll-or-long-poll-a-payment-session.md)
- [Start an x402 payment session](https://docs.getbindu.com/api-reference/payment-x402/start-an-x402-payment-session.md): Initiates a payment session for agents that charge per request. Returns a session handle the caller uses with `message/send` (via the `X-PAYMENT` header or session-linked metadata) until the session is spent or expired.
- [Open a plan; stream SSE of the orchestration.](https://docs.getbindu.com/api-reference/plan/open-a-plan;-stream-sse-of-the-orchestration.md): Accepts a user question + agent catalog, starts (or resumes) a session, and streams Server-Sent Events as the planner runs.
- [Get details for one skill](https://docs.getbindu.com/api-reference/skills/get-details-for-one-skill.md)
- [Get skill documentation (Markdown)](https://docs.getbindu.com/api-reference/skills/get-skill-documentation-markdown.md): The authoritative user-facing doc for this skill. Returns the frontmatter-ed Markdown file the agent shipped. Use this instead of the short `description` when you need full usage guidance, examples, or input schemas.
- [List all skills this agent publishes](https://docs.getbindu.com/api-reference/skills/list-all-skills-this-agent-publishes.md)
- [API Introduction](https://docs.getbindu.com/api/introduction.md): Complete HTTP API reference for Bindu agents
- [Task-First Pattern & Architecture](https://docs.getbindu.com/bindu/concepts/task-first-and-architecture.md): Why Bindu treats tasks as the core execution unit and the layered architecture that powers it
- [Identity & Signed Calls](https://docs.getbindu.com/bindu/gateway/identity.md): Give the gateway a DID - every outbound call gets a cryptographic signature that agents can verify.
- [Adding a Second Agent](https://docs.getbindu.com/bindu/gateway/multi-agent.md): Three agents working on one question - the planner decides the order and passes results between them.
- [The Bindu Gateway](https://docs.getbindu.com/bindu/gateway/overview.md): An end to end story - planner, recipes, DID signing, all wired together.
- [Going to Production](https://docs.getbindu.com/bindu/gateway/production.md): What to read, what to try, what to pin down before you ship.
- [Quickstart](https://docs.getbindu.com/bindu/gateway/quickstart.md): Six steps - one question, one agent, one streaming response.
- [Recipes - Teaching Patterns](https://docs.getbindu.com/bindu/gateway/recipes.md): Write a playbook once in plain markdown. The planner lazy-loads it when it recognizes a match.
- [Config reference](https://docs.getbindu.com/bindu/get-started/config-reference.md): Every key in the bindufy config dict, what it does, and the env var that overrides it.
- [What's next](https://docs.getbindu.com/bindu/get-started/next-steps.md): You have a live agent. Here's the order to read the rest of the docs in, depending on what you're trying to do.
- [Your first agent](https://docs.getbindu.com/bindu/get-started/your-first-agent.md): Copy 20 lines of Python, run it, watch your agent come online with a DID, an A2A endpoint, and an agent card other agents can discover.
- [Agent Implementation](https://docs.getbindu.com/bindu/grpc/agent-client.md): Handler patterns, state transitions, configuration, and how the bridge works under the hood
- [API Reference](https://docs.getbindu.com/bindu/grpc/api-reference.md): Complete gRPC contract between SDKs and the Bindu core
- [Custom SDKs](https://docs.getbindu.com/bindu/grpc/custom-sdks.md): How to build Bindu SDKs for Rust, Go, Swift, or any language with gRPC
- [gRPC Overview](https://docs.getbindu.com/bindu/grpc/overview.md): Why the gRPC sidecar exists, how the architecture works, and where the current limits are
- [gRPC Quickstart](https://docs.getbindu.com/bindu/grpc/quickstart.md): The fastest path to your first working gRPC agent
- [Install](https://docs.getbindu.com/bindu/how-to/install.md): Get Bindu into your environment in 30 seconds. uv is the short path; pip works too.
- [The Bindu Inbox](https://docs.getbindu.com/bindu/inbox/overview.md): A Gmail-shaped operator console for the A2A network — every signed JSON-RPC call between two DIDs, threaded and verifiable from the right rail.
- [Troubleshooting](https://docs.getbindu.com/bindu/inbox/troubleshooting.md): Common boot failures, what causes them, and the exact command that fixes each one.
- [Using the inbox](https://docs.getbindu.com/bindu/inbox/using.md): Layout, sending to one or many agents, reading a thread, and replying.
- [Verify the auth](https://docs.getbindu.com/bindu/inbox/verify-auth.md): Don't trust the UI — prove from your terminal that calls really are signed and authed, and learn which layer rejects what.
- [What is Bindu](https://docs.getbindu.com/bindu/introduction/what-is-bindu.md): The identity, communication, and payments layer for AI agents — built for production agent swarms like the Trade Compliance OS
- [Making Authenticated Requests](https://docs.getbindu.com/bindu/learn/authentication/making-requests.md): The four headers, the four gates, and exactly what to put on the wire
- [Authentication](https://docs.getbindu.com/bindu/learn/authentication/overview.md): How your agent decides whether to answer a stranger knocking on the door
- [Security Stack: mTLS + Hydra + DID](https://docs.getbindu.com/bindu/learn/authentication/security-stack.md): Three layers, three different questions, one chain of trust
- [Decentralized Identifiers (DIDs)](https://docs.getbindu.com/bindu/learn/did/overview.md): How agents prove they're really them — without trusting Big Tech
- [Health & metrics](https://docs.getbindu.com/bindu/learn/health-metrics/overview.md): /health says yes — and if it can't, returns 503. /metrics says how, in Prometheus text. Both are wired up the moment bindufy() starts the server.
- [Agent negotiation](https://docs.getbindu.com/bindu/learn/negotiation/overview.md): Three agents can do this job. Which one should the orchestrator pick? Ask them — they know.
- [Push notifications](https://docs.getbindu.com/bindu/learn/notification/overview.md): Stop polling. Your agent webhooks the caller when a task changes state, so they only ask once.
- [Observability](https://docs.getbindu.com/bindu/learn/observability/overview.md): OpenInference traces and Sentry errors. The boring stuff that saves you at 2am.
- [Payment Integration (x402)](https://docs.getbindu.com/bindu/learn/payment/introduction.md): Charge wallets per request — HTTP 402, on-chain settlement, replay-safe
- [Retry Mechanism](https://docs.getbindu.com/bindu/learn/retry/overview.md): Tenacity-based retry with exponential backoff (and optional jitter) for resilient Bindu agents
- [Scheduler](https://docs.getbindu.com/bindu/learn/scheduler/overview.md): The queue between an HTTP request and the actual work — so two callers don't stall each other, and a crash doesn't take your inbox with it.
- [Storage](https://docs.getbindu.com/bindu/learn/storage/overview.md): Where Bindu keeps tasks, contexts, artifacts, and webhook configs so a restart doesn't eat your work.
- [Tunneling](https://docs.getbindu.com/bindu/learn/tunneling/overview.md): Expose your local Bindu agent to the internet during development and testing
- [Agent card and discovery](https://docs.getbindu.com/bindu/protocol/agent-card.md): AgentCard structure, AgentCapabilities, AgentInterface, AgentExtension, and the discovery flow.
- [Context management](https://docs.getbindu.com/bindu/protocol/context.md): ContextId, history sessions, and how Bindu threads conversations across turns.
- [Credit system](https://docs.getbindu.com/bindu/protocol/credit.md): Bindu-specific credit accounting that sits next to x402. Not part of A2A.
- [Messages and parts](https://docs.getbindu.com/bindu/protocol/messages-and-parts.md): Parts (TextPart, FilePart, DataPart), Message vs Artifact, and how content flows between agents.
- [Agent negotiation](https://docs.getbindu.com/bindu/protocol/negotiation.md): How two agents agree on price, latency, and SLA before doing work. Bindu-specific extension.
- [Push notifications](https://docs.getbindu.com/bindu/protocol/notifications.md): Webhook configuration so callers stop polling once a long-running task starts moving.
- [Protocol reference](https://docs.getbindu.com/bindu/protocol/overview.md): Every type, enum, and message Bindu speaks. Split by topic so you don't have to scroll past 4,000 lines to find the one you need.
- [Payments (x402)](https://docs.getbindu.com/bindu/protocol/payment.md): How a Bindu agent demands stablecoin payment before doing work — via the x402 HTTP-402 extension.
- [Security and authentication](https://docs.getbindu.com/bindu/protocol/security.md): Authentication schemes, security definitions, and how agents prove they're allowed to do what they're doing.
- [Tasks and lifecycle](https://docs.getbindu.com/bindu/protocol/tasks.md): Task object, status, state transitions, and the events agents emit during execution.
- [Trust and identity](https://docs.getbindu.com/bindu/protocol/trust.md): TrustLevel, identity providers, and how DID verification fits into the protocol.
- [Types and enums](https://docs.getbindu.com/bindu/protocol/types-and-enums.md): TypeAlias and Enum definitions: TaskState, TrustLevel, NegotiationStatus, IdentityProvider, and the rest.
- [Boxd runtime](https://docs.getbindu.com/bindu/runtime/box.md): Deploy your bindu agent to a boxd microVM
- [Custom image (A1 mode)](https://docs.getbindu.com/bindu/runtime/custom-image.md): Deploy your bindu agent with a custom Docker image
- [Overview](https://docs.getbindu.com/bindu/runtime/overview.md): Deploy your bindu agent from your computer to the internet.
- [Quickstart](https://docs.getbindu.com/bindu/runtime/quickstart.md): Walkthrough to deploy your bindu agent that is on your computer but lives on the internet.
- [Skills](https://docs.getbindu.com/bindu/skills/introduction/overview.md): Define what your agent can do and make it discoverable across the Internet of Agents
- [Private skills](https://docs.getbindu.com/bindu/skills/private_skills/private_skills.md): Serve a public skill catalog to the world and a full catalog to approved partners only.
- [v2026.12.5](https://docs.getbindu.com/changelog/v2026.12.5.md): A new document-reading agent, many-currency payments, and a pile of reliability fixes
- [v2026.20.2](https://docs.getbindu.com/changelog/v2026.20.2.md): Hybrid auth fail-closed hotfix, plus bindu deploy and the boxd runtime
- [v2026.20.3](https://docs.getbindu.com/changelog/v2026.20.3.md): x402 v2 hardening, private skills gated by DID, multi-chain payments
- [v2026.20.7](https://docs.getbindu.com/changelog/v2026.20.7.md): bindu-communication inbox, secured outbound A2A, stateless gateway, personal agent
- [v2026.21.1](https://docs.getbindu.com/changelog/v2026.21.1.md): mTLS on by default for the personal agent, plus the supporting fixes
- [v2026.3.3](https://docs.getbindu.com/changelog/v2026.3.3.md): Give each agent its own private room in the database
- [v2026.3.5](https://docs.getbindu.com/changelog/v2026.3.5.md): See how your agent is doing, live
- [v2026.6.6](https://docs.getbindu.com/changelog/v2026.6.6.md): One login system, done properly
- [v2026.7.3](https://docs.getbindu.com/changelog/v2026.7.3.md): Moving the UI out of the server
- [v2026.8.5](https://docs.getbindu.com/changelog/v2026.8.5.md): Less code, same agent
- [v2026.8.7](https://docs.getbindu.com/changelog/v2026.8.7.md): Bug fixes, updated packages, and three new example agents
- [v2026.8.7.1](https://docs.getbindu.com/changelog/v2026.8.7.1.md): Build re-tag of v2026.8.7
- [v2026.8.7.2](https://docs.getbindu.com/changelog/v2026.8.7.2.md): Build re-tag of v2026.8.7
- [v2026.8.7.3](https://docs.getbindu.com/changelog/v2026.8.7.3.md): Build re-tag of v2026.8.7
- [v2026.9.1](https://docs.getbindu.com/changelog/v2026.9.1.md): Build re-tag of v2026.8.7
- [v2026.9.2](https://docs.getbindu.com/changelog/v2026.9.2.md): Agent frameworks become optional dependencies, plus auth cleanup
- [v2026.9.2.1](https://docs.getbindu.com/changelog/v2026.9.2.1.md): Relaxed version constraints on uvicorn and pydantic
- [v2026.9.2.2](https://docs.getbindu.com/changelog/v2026.9.2.2.md): Build re-tag of v2026.9.2.1
- [v2026.9.4](https://docs.getbindu.com/changelog/v2026.9.4.md): Your agent keeps its identity, even after a restart
- [3.3 AG2 Research Team](https://docs.getbindu.com/examples/advanced/ag2-research-team.md): Multi-agent research team that produces structured reports
- [3.1 Agent Swarm](https://docs.getbindu.com/examples/advanced/agent-swarm.md): Multi-agent collaboration system with specialized roles
- [3.2 CBT Therapy Protocol](https://docs.getbindu.com/examples/advanced/cbt-therapy.md): CBT therapy protocol generator for mental health applications
- [3.11 Dutch Law Research Agent](https://docs.getbindu.com/examples/advanced/dutch-law-agent.md): Citation-grounded Dutch legal research over the BWB statute corpus via the Ansvar Dutch-Law-MCP server
- [3.15 Gateway Test Fleet](https://docs.getbindu.com/examples/advanced/gateway-test-fleet.md): Five tiny agents + a 13-case test matrix that exercises the Bindu Gateway planner end-to-end
- [3.10 Hermes Agent](https://docs.getbindu.com/examples/advanced/hermes-agent.md): Advanced tool-using agent with web, filesystem, and code execution capabilities
- [3.4 Kotlin OpenAI Agent](https://docs.getbindu.com/examples/advanced/kotlin-openai-agent.md): Kotlin agent that uses OpenAI API with Bindu SDK
- [3.5 LangGraph Blog Writing Agent](https://docs.getbindu.com/examples/advanced/langgraph-blog-writing-agent.md): Multi-agent blog writing system using LangGraph workflow
- [3.9 Multilingual Collaborative Agent v2](https://docs.getbindu.com/examples/advanced/multilingual-collab-agent-v2.md): An identity-aware agent that detects user language and responds in the same language with persistent memory
- [3.14 Private Skills Agent](https://docs.getbindu.com/examples/advanced/private-skills-agent.md): Two-tier skill discovery: public skills appear on the well-known card, private skills only surface to allowlisted partner DIDs
- [3.8 Quiz Generator Agent](https://docs.getbindu.com/examples/advanced/quiz-generator-agent.md): A TypeScript-based agent that generates educational quizzes using LangChain and OpenRouter
- [3.13 Runtime Boxd Agent](https://docs.getbindu.com/examples/advanced/runtime-boxd-agent.md): Deploy a vanilla Bindu agent to a boxd microVM with one CLI command
- [3.12 Taiwan Legal Research Agent](https://docs.getbindu.com/examples/advanced/taiwan-legal-agent.md): MCP-grounded Taiwan (ROC) legal research over 司法院 judgments, 全國法規資料庫 regulations, and 憲法法庭 interpretations
- [3.6 TypeScript LangChain Agent](https://docs.getbindu.com/examples/advanced/typescript-langchain-agent.md): TypeScript agent using LangChain.js with Bindu SDK
- [3.7 TypeScript OpenAI Agent](https://docs.getbindu.com/examples/advanced/typescript-openai-agent.md): TypeScript agent using OpenAI SDK with Bindu
- [1.7 AG2 Question Answering Agent](https://docs.getbindu.com/examples/beginner/ag2-agent.md): Simple Q&A agent built on AG2 (formerly AutoGen), wrapped with Bindu
- [1.9 DSPy Question Answering Agent](https://docs.getbindu.com/examples/beginner/dspy-agent.md): Simple Q&A agent powered by DSPy framework
- [1.1 Echo Agent](https://docs.getbindu.com/examples/beginner/echo-agent.md): Minimal echo bot that repeats your input
- [1.12 Echo Agent Behind Paywall](https://docs.getbindu.com/examples/beginner/echo-paywall-agent.md): Minimal echo agent gated by an x402 paywall on Base Sepolia
- [1.5 FAQ Agent](https://docs.getbindu.com/examples/beginner/faq-agent.md): Documentation search agent for answering questions
- [1.3 Joke Generator](https://docs.getbindu.com/examples/beginner/joke-generator.md): Simple agent that generates jokes on demand
- [1.11 MiniMax Research Agent](https://docs.getbindu.com/examples/beginner/minimax-research-agent.md): A Bindu agent powered by MiniMax's M2.7 model via OpenAI-compatible API
- [1.10 Motivational Agent](https://docs.getbindu.com/examples/beginner/motivational-agent.md): A Bindu agent that provides motivation, encouragement, and positive inspiration
- [1.6 Notion Agent](https://docs.getbindu.com/examples/beginner/notion-agent.md): Agent with Notion workspace integration
- [1.8 Premium Research Assistant](https://docs.getbindu.com/examples/beginner/premium-research-assistant.md): Simple research assistant that charges for usage
- [1.4 Research Assistant](https://docs.getbindu.com/examples/beginner/research-assistant.md): Research assistant with DuckDuckGo search integration
- [1.2 Zero Config Agent](https://docs.getbindu.com/examples/beginner/zero-config-agent.md): Zero-config agent with web search capabilities
- [2.4 AI Data Analysis Agent](https://docs.getbindu.com/examples/specialized/ai-data-analysis-agent.md): Data analysis agent that processes CSV files and generates visualizations
- [2.5 Cybersecurity Newsletter Editor](https://docs.getbindu.com/examples/specialized/cybersecurity-newsletter-editor.md): AI agent that researches threats and generates security newsletters
- [2.6 Document Analyzer](https://docs.getbindu.com/examples/specialized/document-analyzer.md): AI agent that analyzes uploaded PDF and DOCX documents based on user prompts
- [2.10 Medical Research Agent](https://docs.getbindu.com/examples/specialized/medical-research-agent.md): A Bindu agent that provides medical information and health guidance using web search
- [2.7 News Summarizer](https://docs.getbindu.com/examples/specialized/news-summarizer.md): AI agent that searches and summarizes latest news on any topic
- [2.12 Notte Browser Agent](https://docs.getbindu.com/examples/specialized/notte-browser-agent.md): Real-browser automation agent powered by Notte — navigates JS-rendered pages, fills forms, solves captchas, and uses proxies
- [2.11 PDF Research Agent](https://docs.getbindu.com/examples/specialized/pdf-research-agent.md): A Bindu agent that processes PDF files and generates structured summaries
- [2.3 Premium Advisor](https://docs.getbindu.com/examples/specialized/premium-advisor.md): Paid agent with X402 payments (0.01 USDC per query)
- [2.8 Speech-to-Text Agent](https://docs.getbindu.com/examples/specialized/speech-to-text-agent.md): AI agent that transcribes audio files and formats transcripts
- [2.1 Text Summarizer](https://docs.getbindu.com/examples/specialized/text-summarizer.md): Creates concise summaries of any input text
- [2.2 Weather Research](https://docs.getbindu.com/examples/specialized/weather-research.md): Weather intelligence agent providing real-time weather data and forecasts
- [2.9 Web Scraping AI Agent](https://docs.getbindu.com/examples/specialized/web-scraping-agent.md): AI agent that crawls web pages and extracts structured data
- [Frequently Asked Questions](https://docs.getbindu.com/faq/introduction/overview.md): Answers to common questions about Bindu, setup, architecture, and troubleshooting
- [Gateway API](https://docs.getbindu.com/gateway-api/introduction.md): The external HTTP surface of the Bindu Gateway — one endpoint, streaming SSE, many agents behind it.
- [Welcome to Bindu](https://docs.getbindu.com/index.md): The open-source trust and transaction layer for the autonomous web.
- [Roadmap](https://docs.getbindu.com/roadmap/introduction/overview.md)
- [Low](https://docs.getbindu.com/roadmap/known-issues/core/low.md): One small Core issue — artifact name sanitization
- [Medium](https://docs.getbindu.com/roadmap/known-issues/core/medium.md): Seven more Core bugs — auth edges, CORS, and a concurrency race
- [High](https://docs.getbindu.com/roadmap/known-issues/core/overview.md): Four real problems in the Python runtime — all about money
- [Low](https://docs.getbindu.com/roadmap/known-issues/gateway/low.md): Sixteen smaller gateway issues — mostly 'good to know'
- [Medium](https://docs.getbindu.com/roadmap/known-issues/gateway/medium.md): Thirteen gateway bugs worth skimming before you deploy
- [Nits](https://docs.getbindu.com/roadmap/known-issues/gateway/nits.md): Small stuff that bugs the careful reader
- [High](https://docs.getbindu.com/roadmap/known-issues/gateway/overview.md): Two gateway bugs you'll actually hit. Let's talk about them.
- [Overview](https://docs.getbindu.com/roadmap/known-issues/overview.md): A quiet, honest tour of where Bindu isn't great yet
- [DID resolution endpoint bypassed the camelCase wire contract](https://docs.getbindu.com/roadmap/known-issues/postmortems/core/did-document-endpoint-raw-dict.md): A fixed bug worth remembering.
- [DID signature middleware fails open when signature headers or public key are missing](https://docs.getbindu.com/roadmap/known-issues/postmortems/core/did-signature-fail-open.md): A bug that shipped serious. Here's what happened and what we changed.
- [verify_signature caught every exception and made real bugs look like bad signatures](https://docs.getbindu.com/roadmap/known-issues/postmortems/core/did-signature-overbroad-exceptions.md): A fixed bug worth remembering.
- [Any authenticated caller could read or mutate another caller's tasks and contexts](https://docs.getbindu.com/roadmap/known-issues/postmortems/core/idor-task-ownership.md): A bug that shipped serious. Here's what happened and what we changed.
- [Server rejected snake_case input even though Python types used snake_case attributes](https://docs.getbindu.com/roadmap/known-issues/postmortems/core/types-populate-by-name.md): A medium-severity bug we fixed. Here's the story.
- [Concurrent /plan requests on same session ran compaction twice, racing on the summary](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/compaction-concurrent-races.md): A high-severity bug we fixed. Here's what happened and what we changed.
- [Session compaction overwrote prior summary, progressively losing facts](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/compaction-lossy-second-pass.md): A bug that shipped serious. Here's what happened and what we changed.
- [Compaction split landed mid-turn, breaking tool_use/tool_result pairing](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/compaction-mid-turn-cut.md): A bug that shipped serious. Here's what happened and what we changed.
- [A stuck peer could stall a /plan for five minutes per tool call](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/poll-budget-unbounded-wall-clock.md): No wall-clock ceiling, no abort propagation — one hung peer held entire plans hostage.
- [SSE reader fibers never terminated, leaking PubSub subscribers per request](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/spawnreader-fiber-leak.md): A bug that shipped serious. Here's what happened and what we changed.
- [SSE events leaked across concurrent /plan requests](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/sse-cross-contamination.md): A bug that shipped serious. Here's what happened and what we changed.
- [Bearer token comparison was timing-unsafe, recoverable byte-by-byte](https://docs.getbindu.com/roadmap/known-issues/postmortems/gateway/timing-unsafe-token-compare.md): A high-severity bug we fixed. Here's what happened and what we changed.
- [Overview](https://docs.getbindu.com/roadmap/known-issues/postmortems/overview.md): The archive of fixed bugs worth remembering

## OpenAPI Specs

- [gateway-openapi](https://docs.getbindu.com/gateway-openapi.yaml)
- [openapi](https://docs.getbindu.com/openapi.yaml)