Public, read-only resources
Public pages are server-rendered, have canonical language URLs and include structured data where appropriate. The knowledge feed below contains the same public guides and answers visible on this website. It excludes accounts, private messages, delivery files and transaction data.
- GET /knowledge.json — versioned public page and question records, with canonical URLs, language and update date.
- GET /llms.txt — a concise directory of official market resources.
- GET /sitemap.xml — published public pages and film URLs in supported languages.
- Project pages — public INDEX identifiers, source links and available project information.
Knowledge feed contract
Use the schemaVersion field to detect a format change. Each page has a stable path, url, title, description, sections and questions. Each question has an id, question, answer and optional next-step link. The lang query accepts a supported locale, for example /knowledge.json?lang=zh-Hant. Unsupported language values return HTTP 400. Use conditional requests with the ETag header; unchanged resources return HTTP 304.
Cite the canonical page URL, language and update date when presenting an answer. Preserve qualifications about rights, service availability and source-reported figures. Public access to metadata does not grant a licence to reuse a film, poster or other creative asset.
curl -i 'https://hkaiiff.market/knowledge.json?lang=en'Private integrations and write access
Authenticated application endpoints are first-party workflows, not a public partner API. No public developer key issuance, external purchase API or automatic settlement integration is currently offered. A proposed integration needs organisation-scoped credentials, least-privilege access, idempotent actions, an audit trail and a separate agreement before write access is enabled.
Report a technical or security issue
Send the affected public URL, timestamp, expected result and a minimal reproduction to business@hkaiiff.org. For security issues, share a description first and request a private channel for evidence. Do not include access tokens, login codes, private keys or another organisation’s data. Do not perform destructive testing or bulk collection of private records.