using-api-platform-skillslisted

# Using API Platform Skills > Router only. Load the smallest skill. Never load the whole pack. ## Overview This pack owns the **evolution layer** (compat, breaks, deprecation, CDC, idempotency, webhooks, API surface security, consumer changelogs). For pure REST style guides, say out-of-scope. ## Routing table | User intent | Primary | Optional second | |-------------|---------|-----------------| | New API / OpenAPI first | `contract-first-openapi` | `secure-api-surface` | | Who breaks if we change X? | `compatibility-matrix` | `breaking-change-review` | | PR: remove field, type change, status rename | `breaking-change-review` | `deprecation-playbook` | | Sunset v1, dual-track, migrate clients | `deprecation-playbook` | `compatibility-matrix` | | Pact / consumer expectations | `consumer-driven-contract` | `contract-first-openapi` | | Double charge, Idempotency-Key, retries | `idempotency-and-retries` | - | | Callbacks, signed events | `webhook-design` | `idempotency-and-retries` | | BOLA/BFLA, excess data, mass assignment | `secure-api-surface` | - | | Release notes / partner changelog | `api-changelog` | `breaking-change-review` | | Pre-merge can we ship? | Ship-check below | - | | Only "is plural nouns correct?" | Out of scope (shape packs) | - | ## Ship-check sequence Run in order; stop at first hard gate failure: 1. `contract-first-openapi` - reviewable contract exists 2. `breaking-change-review` - no silent breaks 3. `secure-api-surface` - critical authz / exposur