Webhooks
HTTPS POST of outbox events. Header X-Lattice-Signature: sha256=… (HMAC of the raw body). Topics: lease.granted, renewed, released, expired, declined, ipam.audit, or *. Retries with the outbox; leases are never rolled back.
Product / Integrations
Hooks into the tools you already run.
Signed HTTP, NetBox prefixes, OpenAPI, Prometheus. No phone-home.
NetBox
Export prefixes and subnets. Import creates missing prefixes only; it never deletes. Lattice stays DHCP master.
OpenAPI 3.1
docs/openapi.yaml in the product repo. Bearer lattice_live_…. Idempotency-Key on creates that can double-submit.
Prometheus
Unauthenticated /metrics on api, each dhcpd HTTP port, and the worker. Scrape from a private network.
JSON logs
slog on stdout. DHCP lines include node, xid, mac, ip, subnet_id, msg_type. Ship journald / Vector / rsyslog yourself. Lattice does not speak syslog or SNMP.
Terraform
REST is the interface. A resource map lives in the product docs as a sketch. There is no published provider in v1.