Sample Workflows

The following examples illustrate how trusted clients interact with the FastAPI gateway. Replace placeholder URLs with the final custom domains once DNS is provisioned.

Submit Evidence (User)

POST https://fastapi-gateway-y5jge5w2cq-uc.a.run.app/api/v1/cases
Authorization: Bearer <id_token>
Content-Type: application/json

{
  "channel": "web-intake",
  "description": "I was contacted by someone claiming to be a crypto advisor...",
  "attachments": [
    {
      "type": "image",
      "uri": "gs://i4g-evidence-dev/uploads/case_1234/chat1.png"
    }
  ]
}

Response (Submit Evidence)

{
  "case_id": "case_1234",
  "status": "queued",
  "next_steps": "An analyst will review your case within 72 hours."
}

Analyst Decision

PATCH https://fastapi-gateway-y5jge5w2cq-uc.a.run.app/api/v1/cases/case_1234
Authorization: Bearer <analyst_token>
Content-Type: application/json

{
  "scam_type": "romance",
  "confidence": 0.92,
  "resolution": "approved",
  "notes": "Matches pattern seen in Case 1187 (shared wallet)."
}

Report Download (Law Enforcement)

GET https://fastapi-gateway-y5jge5w2cq-uc.a.run.app/api/v1/reports/case_1234
Authorization: Bearer <leo_token>
Accept: application/pdf

Response (Report Download)

• 200 OK with PDF payload.

• Headers include X-I4G-Report-Hash for signature verification.

Error Handling

Errors conform to the following envelope:

{
  "error": {
    "code": "pii_access_denied",
    "message": "PII rehydration requires admin approval",
    "correlation_id": "7f5f8b0c-4af9-4d0a-9aef-52cefc3dfa1f"
  }
}

Include the correlation ID when escalating issues to the engineering team.