Explicitly reveal an encrypted payload through application policy.

Optional, read-only inspection capability. An embedding application supplies one callback that both authorizes the established request identity and decrypts the complete stored job. Headgate never receives key material and the browser never performs decryption. The route fetches payload bytes only after confirming the capability is configured; it never edits, re-encrypts, retries, or otherwise mutates the job. Every successful plaintext response is Cache-Control: no-store. When the callback is absent, /meta omits payload_reveal and this route is 404.

GET /jobs/{id}/payload/reveal

Error

A valid request URL is required to generate request examples

200

{
  "plaintext": "<string>"
}

Path Parameters

id · string · required

Response

200

application/json

Application-authorized plaintext bytes. Never cache this response.

plaintext · string · required