Subject-scoped: a proposal is returned only when the effective subject owns
both endpoint nodes and both are high-authority (>= 0.5) — identical to the
dashboard Insights surface. Ordered by createdAt descending with id
as a stable tiebreaker; page with nextCursor until hasMore is false.Rejections are DURABLE: a pair you reject is recorded, and the daemon that
regenerates this queue excludes it from then on, so the same suggestion does
not come back on the next cycle. Accepting a pair you previously rejected
clears that record.
This route requires the read scope.A missing or invalid credential returns 401 authentication_error. A valid credential without the scope returns 403 permission_denied, and the problem body names the exact scope required.