/api/v1/environments/{id}/artifacts

Artifacts materialized from THIS principal's turns in this environment, oldest first

(default page 50, limit clamped to 1..200, truncated true when more exist).

Gate B keeps the list scoped to the session's directly bound environment and the

issuing principal — cross-environment, cross-principal and unbound sessions all

answer 404 not_owned with zero existence leakage. Artifacts remain downloadable

after the environment expires (they are cloud-side rows, unlike exec/files which

answer 409 on a dead carrier). Operator (machine/platform) channels have no

artifacts face — the principal token is the only credential here.