# Tesla Buyer's Radar

> Independent Tesla evidence and accountless partner-guide automation.

## Public machine interfaces

- OpenAPI: https://teslabuyersradar.com/api/v1/openapi.json
- Human documentation: https://teslabuyersradar.com/developers
- Partner workspace: https://teslabuyersradar.com/partners

## Agent operating rules

- Read public evidence through the OpenAPI contract. Every claim carries its
  retained source, source tier, status, and observed or verified time when
  available. Do not describe an item as fresh when the response has no such
  timestamp.
- Source tiers are official Tesla material first; government or regulator
  material next; and retained secondary reporting, including news and market
  context, last. Source tier and status are evidence metadata, not a guarantee
  that a claim is current.
- The `daily-evidence-build` worker is not provisioned by the public API.
  Operators must explicitly configure that separate process and inspect its
  returned source status; its existence is not evidence that every source ran.
- Anyone can create a partner guide with the public, anonymous
  `POST /api/v1/partners` operation. It returns `agent_token` and
  `management_capability` only once. Save both before closing the response;
  neither can be recovered from public discovery documents.
- The management capability controls that guide, including issuance of a new
  scoped agent token through the `X-Partner-Management-Capability` header.
  Treat the private management link made from that capability, and the
  capability itself, like a password: anyone holding it can control the guide.
  Do not put either in a referral, publication, ticket, analytics event,
  or public page.
- Agent keys are scoped to one partner. `read` permits guide, kit, and
  aggregate activity reads; `write` permits guide updates and drafts; `publish`
  `publish` is required for publication. An agent may act autonomously only within those
  granted scopes until expiry or revocation. Publishing remains a separate,
  explicit authorized action.
- Send `Idempotency-Key` on every mutation. Reuse it only to retry the same
  route and request body.
- Do not request, send, or store Tesla account credentials, personal referral
  tokens, buyer contact details, or purchase/reward assertions.

## Indexing

Public discovery documents may be indexed. Partner workspaces, operator pages,
partner vanity guides, results, embeds, logos, and authentication-proxy paths
are private or noindex and must not be crawled.