404, never 403. The 404 is deliberate: a 403 would confirm that a platform-wide reference surface exists, which is itself the disclosure. The operation is published here so that it carries a typed client, not because it is callable by a customer organization.
The status record
exchange_geography is only one and a half cadences old, which on age alone would be aging — it reads stale because its most recent refresh (last_attempt_at, later than last_success_at) ran and did not install. ca_postal_codes has never loaded at all, which is failed rather than a missing entry.
Source fields
sources carries one entry per declared source, always — including a source that has never loaded. A source is never omitted, because an omitted source is one nobody notices has broken.
drift’s two fields distinguish null from 0, and the distinction matters: null means unknown — there is nothing earlier to compare against, while 0 means measured, and nothing moved. Collapsing the first into the second would make a brand-new source look like a perfectly stable one.
Status vocabulary
The status is computed on the server, from the source’s own declared cadence, by the same code that drives the monitoring alerts. A source reported here asstale or failed is already alerting — this value is never only a colour.
Collection fields
collections is keyed by collection name. The key set is declared server-side and is the same on every response.
These three fields describe the installed corpus, not the most recent attempt. A refresh that fails validation leaves the previous corpus serving untouched, so they keep describing that corpus — the failure is visible in the relevant source’s
status, which is where it belongs.
Errors
The endpoint uses the standard{"detail": "..."} envelope.
A
403 is deliberately not part of this endpoint’s documented surface.