Cloud-Architektur · High-Safety

# ─── EMERGENCY_SYNC API-SPEZIFIKATION ──────────────────────────
# Alle Endpunkte: TLS 1.3 · Bearer JWT · Rate-Limit 1000 req/min

# ═══════════════════════════════════════════════════════════════
# POST /api/v2/emergency/sync
# Haupt-Sync-Endpunkt: Session-State zwischen Regionen
# ═══════════════════════════════════════════════════════════════
REQUEST:
  Authorization: Bearer {session_jwt}
  Content-Type:  application/json
  {
    "session_id":    "ses_abc123",
    "alert_id":      "alr_xyz789",
    "event_type":    "sos_triggered" | "gps_update" | "audio_chunk" | "heartbeat",
    "payload": {
      "gps":         { "lat": 48.137, "lng": 11.575, "accuracy_m": 8 },
      "audio_meta":  { "codec": "opus", "bitrate": 24000, "encrypted": true },
      "escalation":  "intervention",
      "timestamp":   "2026-03-11T22:14:33.123Z"
    },
    "integrity_hmac": "sha256=abc123..."   # HMAC über payload+ts
  }

RESPONSE 200:
  {
    "synced":        true,
    "region":        "eu-central-1",
    "failover_ready": true,           # Backup-Region hat State
    "latency_ms":    18,
    "next_heartbeat": 5000            # ms bis nächster Heartbeat erwartet
  }

RESPONSE 503 (Region down → Failover):
  Retry-After: 0                      # Sofort zu Backup
  X-Failover-Endpoint: https://api-dub.sec-si.de/api/v2/emergency/sync

# ═══════════════════════════════════════════════════════════════
# GET /api/v2/emergency/session/{session_id}
# Session-State abrufen (für Failover-Reconnect)
# ═══════════════════════════════════════════════════════════════
RESPONSE 200:
  {
    "session_id":    "ses_abc123",
    "status":        "active",
    "alert_id":      "alr_xyz789",
    "user_id":       "usr_111",
    "guardians":     ["guardian@sec-si.de"],
    "last_gps":      { "lat": 48.137, "lng": 11.575 },
    "escalation":    "intervention",
    "encryption": {
      "algorithm":   "AES-256-GCM",
      "pfs":         true,
      "key_id":      "key_2026_03_11"  # Nur Key-Referenz, nie Key selbst!
    },
    "region_primary":  "eu-central-1",
    "region_backup":   "eu-west-1",
    "created_at":    "2026-03-11T22:00:00Z",
    "last_sync_at":  "2026-03-11T22:14:33Z"
  }

# ═══════════════════════════════════════════════════════════════
# POST /api/v2/emergency/audio/signal
# WebRTC Signaling für Audio-Kanal (SDP Exchange)
# ═══════════════════════════════════════════════════════════════
REQUEST:
  {
    "session_id":  "ses_abc123",
    "signal_type": "offer" | "answer" | "ice_candidate",
    "sdp":         "v=0
o=- ...",    # SDP für offer/answer
    "candidate":   { "candidate": "...", "sdpMid": "audio" }
  }

RESPONSE 200:
  { "forwarded": true, "to_peer": "guardian@sec-si.de" }

# ═══════════════════════════════════════════════════════════════
# POST /api/v2/emergency/escalate
# Eskalation: Pre-Alarm → Validation → Intervention → Police
# ═══════════════════════════════════════════════════════════════
REQUEST:
  {
    "session_id":   "ses_abc123",
    "from_level":   "validation",
    "to_level":     "intervention",
    "trigger":      "no_checkin" | "audio_score" | "guardian_manual" | "duress_pin",
    "auto_police":  false             # true = 110 automatisch auslösen
  }

RESPONSE 200:
  {
    "new_level":         "intervention",
    "notified":          ["guardian@sec-si.de", "leitstelle@sec-si.de"],
    "police_dispatched": false,
    "eta_police_s":      null
  }

# ═══════════════════════════════════════════════════════════════
# WebSocket: wss://api.sec-si.de/ws/emergency/{session_id}
# Bi-direktionaler Echtzeit-Kanal für alle Events
# ═══════════════════════════════════════════════════════════════
EVENTS CLIENT → SERVER:
  { "type": "GPS_UPDATE",     "gps": {...} }
  { "type": "HEARTBEAT",      "ts": "..." }
  { "type": "AUDIO_READY",    "turn_candidates": [...] }
  { "type": "ALARM_CANCEL",   "pin_type": "normal" | "duress" }

EVENTS SERVER → CLIENT:
  { "type": "GUARDIAN_JOINED",   "guardian": "..." }
  { "type": "ESCALATION_CHANGE", "level": "intervention" }
  { "type": "ALIBI_CALL",        "payload": {...} }
  { "type": "FAILOVER",          "endpoint": "wss://api-dub.sec-si.de/..." }
  { "type": "SESSION_CLOSED",    "reason": "resolved" }