chore(0pt): document the canonical-fact machine route (no behavior change)

2026-11-05 20:00:43 +01:00
parent 48f94d8af2
commit faf1df8a39
1 changed files with 1 additions and 1 deletions
@@ -4,7 +4,7 @@
 * Customer calls use verified Zitadel bearer identity and receive immutable
 * x-0pt-verified-* headers. Explicit machine routes may instead use the
 * shared X-Internal-Token convention; mutation handlers verify it again for
- * defence in depth.
+ * defence in depth. The canonical-fact write is one such explicit machine route.
 */
 import { NextResponse, type NextRequest } from 'next/server';
 import { assertAuthConfigSafe, resolveAuthContext } from '@/src/auth/context';