The workspace passive entity ledger: an append-only, SHA-256-sealed log of subjects, designators, public observations, and claims with verification states and valid-time intervals. Reads fold the log at a record time and a valid time; exports produce canonical NDJSON lines and STIX 2.1 bundles. Served from `https://api.y2.dev/api/v2/ledger/*` with workspace-bound keys holding `ledger:read` or `ledger:write`. Not available with x402 payment.

GET /api/v2/ledger/subjects

List ledger subjects

POST /api/v2/ledger/subjects

Open a ledger subject

GET /api/v2/ledger/subjects/{subjectId}

Fold a ledger subject

GET /api/v2/ledger/subjects/{subjectId}/stix

Export a ledger subject as STIX 2.1

GET /api/v2/ledger/records

Export sealed ledger lines

POST /api/v2/ledger/records

Append a ledger record

GET /api/v2/ledger/verify

Verify the ledger seal

GET /x402/receipts/{nonce}