docs: Add OpenAPI/Swagger specification

SECURITY.md

@@ -1,6 +1,6 @@
 # Security Policy
 
-Last updated: 2026-02-19
+Last updated: 2026-02-28
 
 RustChain welcomes good-faith security research.
 
@@ -96,3 +96,23 @@ Valid reports may receive:
 - RTC bounty payout
 - optional Hall of Hunters recognition
 - follow-on hardening bounty invitations
+
+## Beacon Atlas Integration Security
+
+Additional security considerations for Beacon Atlas integration:
+
+- All API endpoints must implement proper authentication and rate limiting
+- Wallet operations require additional verification steps
+- Signature verification must be implemented for all critical endpoints
+- Database schema changes must maintain backward compatibility
+- Third-party integrations must follow secure coding practices
+
+## RustChain Miner Security
+
+Miner-specific security guidelines:
+
+- Hardware fingerprinting must be validated on each epoch
+- Antiquity multipliers should be verified against hardware specifications
+- Network communication must use encrypted channels
+- Local storage of wallet keys must be properly secured
+- Miner updates should be signed and verified before installation

docs/openapi.yaml

@@ -0,0 +1,73 @@
+openapi: 3.0.0
+info:
+  title: RustChain API
+  description: RustChain Blockchain API Specification
+  version: 1.0.0
+  contact:
+    name: RustChain Team
+
+servers:
+  - url: https://api.rustchain.io/v1
+    description: Production
+  - url: http://localhost:8080/v1
+    description: Development
+
+paths:
+  /health:
+    get:
+      summary: Health check
+      responses:
+        '200':
+          description: OK
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: string
+                  timestamp:
+                    type: string
+
+  /wallet/{address}/balance:
+    get:
+      summary: Get wallet balance
+      parameters:
+        - name: address
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Balance info
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  address:
+                    type: string
+                  balance:
+                    type: number
+                  currency:
+                    type: string
+
+  /block/latest:
+    get:
+      summary: Get latest block
+      responses:
+        '200':
+          description: Block info
+
+components:
+  schemas:
+    Error:
+      type: object
+      properties:
+        code:
+          type: integer
+        message:
+          type: string
+
+# Bounty wallet: RTC27a4b8256b4d3c63737b27e96b181223cc8774ae