{"service":"dfl-strategy-snapshots","version":"0.1.0","plan":"https://plans.devfellowship.com/20261027-bmcanvas-versionamento","endpoints":["GET /health","GET /canvas/:bu/diff?from=<ref>&to=<ref> (user JWT required; ref = version | snapshot uuid | latest | ratified | current [to only])","GET /canvas/:bu/build (user JWT required; read-only preview of the shape-2 snapshot)"],"note":"Holds zero service_role. Every read forwards the caller's own JWT and RLS is the gate. This service never writes a snapshot: the atomic create and the ratify stay in SQL."}