platform-api/docs/deployment.md

The API-owned contract surface accepts app declarations, validates owner and environment metadata, and prevents callers from mutating cloud resources directly.