{
  "service": "nio-surge-capture-worker",
  "mode": "encrypted-mailbox",
  "endpoints": [
    "POST /capture (encrypted envelope, MAC verified)",
    "GET /health",
    "GET /latest (Bearer READ_TOKEN → ciphertext)",
    "GET /history (Bearer READ_TOKEN)"
  ],
  "note": "Decrypt and NIO replay run on local Docker only"
}