Internal GitLab API (S33)
## Summary The platform-to-registry API surface under `/api/gitlab/v1`, per [ADR-009](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/009_api_design/#gitlab-api). Serves GitLab platform deployments (initially the Rails monolith) with service-to-service authentication, never end users. Owns the namespace lifecycle previously planned as S17 Phase 2. ## Phases 1. **Namespace provisioning and lifecycle (atomic)**: spec merged 2026-07-16 ([S33](https://gitlab.com/gitlab-org/ops/artifact-registry/-/blob/main/docs/specs/S33-gitlab-api.md), [#309](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/309) closed); plan [#353](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/353); lifecycle columns and serviceability gating ([#202](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/202)), provisioning/resolution/service-condition endpoints ([#194](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/194)), Brand-List Validator on slug validation ([#261](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/261)). 1. **Two-step provisioning (lease/confirm)**: ADR-009 amendment ([#310](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/310)), then implementation ([#311](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/311)). 1. **Resource verifications**: batch repository verification ([#181](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/181)). ## Out of scope - Namespace offboarding execution (nothing sets `deleted_at`/`purged_at` yet; trigger undefined in ADR-009) - `delivery_mode_override` exposure (unplaced in ADR-009) - Service authentication mechanism ([ADR-020](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/020_authentication_flow/), [#255](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/255)) ## References [ADR-007 namespaces](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/007_database_schema/#namespaces) · [ADR-009 GitLab API](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/009_api_design/#gitlab-api) · [ADR-022](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/022_namespace_decoupling/) · [ADR-015 (internal)](https://internal.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/015_slug_policy/) · Rails counterpart: [gitlab#603023](https://gitlab.com/gitlab-org/gitlab/-/work_items/603023)
epic