api.md makes it sound like it should be public, and I'd like to be able to use it so I can decide whether to act on a request or not, based on its resolution.