Endpoints
Manage actions
Authorization
Employer reads requireproject_todos:read; employer manage actions require project_todos:write and a claimed account, plus access to the job or form. Worker coaching requires the separate worker-minted project_todos:respond scope and exact assignment ownership; employer keys and employer Full access never include it. Mutating actions require idempotencyKey (8–128 characters of letters, digits, ., _, :, or -).