## Summary The platform-to-registry API surface under `/api/gitlab/v1`, per [ADR-009](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/009_api_design/#gitlab-api). Serves GitLab platform deployments (initially the Rails monolith) with service-to-service authentication, never end users. Owns the namespace lifecycle previously planned as S17 Phase 2. **Closed 2026-08-10: every endpoint the spec defines is merged** ([S33 is marked Implemented](https://gitlab.com/gitlab-org/ops/artifact-registry/-/blob/main/docs/specs/README.md)). Service authentication for this surface continues as [#356](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/356) under the AuthN epic (&22504). ## Phases 1. **Namespace provisioning and lifecycle (atomic)**: spec merged 2026-07-16 ([S33](https://gitlab.com/gitlab-org/ops/artifact-registry/-/blob/main/docs/specs/S33-gitlab-api.md), [#309](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/309) closed); plan [#353](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/353); lifecycle columns and serviceability gating ([#202](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/202)), provisioning/resolution/service-condition endpoints ([#194](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/194)), Brand-List Validator on slug validation ([#261](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/261)). 1. **Atomic-only registration**: ADR-015 amendment and ADR-009 revert ([#310](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/310)); lease/confirm and the availability pre-check endpoint were dropped, since provisioning's refusal answers availability at form submission ([#311](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/311) closed). 1. **Resource verifications**: batch repository verification ([#181](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/181)). ## Out of scope - Namespace offboarding execution (nothing sets `deleted_at`/`purged_at` yet; trigger undefined in ADR-009) - `delivery_mode_override` exposure (unplaced in ADR-009) - Service authentication mechanism ([ADR-020](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/020_authentication_flow/), [#255](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/255)); its application to this surface is [#356](https://gitlab.com/gitlab-org/ops/artifact-registry/-/work_items/356), moved to the AuthN epic ## References [ADR-007 namespaces](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/007_database_schema/#namespaces) · [ADR-009 GitLab API](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/009_api_design/#gitlab-api) · [ADR-022](https://handbook.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/022_namespace_decoupling/) · [ADR-015 (internal)](https://internal.gitlab.com/handbook/engineering/architecture/design-documents/artifact_registry/decisions/015_slug_policy/) · Rails counterpart: [gitlab#603023](https://gitlab.com/gitlab-org/gitlab/-/work_items/603023)