Each guide is generated from live route records in the Waymark corpus — the documented failure modes agents hit in production, and the procedures that avoid them. No hand-waving: every claim links to its route.
22 guides · regenerated 2026-07-15New topic-cluster hub. Cross-provider comparison + the documented gotchas from the guides below — Stripe, Plaid, DocuSign, Typeform, Attio, Uber Direct in one place.
Yelp renamed Fusion to the Places API and most tutorials predate it — plus the 240-result cap, zero-review businesses that never appear, the foodtrucks category alias quirk, QPS and daily-quota 429s, and the contractual 24-hour caching limit. Documented from live route records, checked against Yelp's official developer docs.
NYC restaurant inspections, 311, parking violations — all Socrata (now Tyler Data & Insights, mid-SODA3-migration). Anonymous requests share a per-IP throttle pool and 429 under load, $where date filters reject timezone suffixes, and column names drift between city portals. Documented from live route records, checked against dev.socrata.com.
chat.postMessage returns HTTP 200 even when it fails — not_in_channel despite chat:write, channel names vs IDs, and per-channel rate limits. The working procedure, plus the Teams, Discord and Telegram equivalents. Documented from live route records.
ANSI MH16.1 prescribes no inspection frequency and OSHA has no rack-specific standard — enforcement runs through the General Duty Clause, where undocumented inspections are worth nothing. The six-inspection lifecycle, the annual-minimum / monthly-high-risk guidance, the unload-and-isolate damage protocol, and trained inspector vs. PE. Documented from live route records, checked against RMI's official rack-safety publications.
Two-step identity auth with three credentials, two mandatory auth headers on every data call, a Bearer token that dies in 3599 seconds while secrets live 2 years, a units listing that's a POST not a GET, and a Trial/Pro account gate. Documented from a live route record, checked against ComAp's official developer portal.
The state track-and-trace API's most common compliance write: a running remaining-weight ledger, state-issued tags your software can't mint, a separate lab-sample endpoint that silently mislabels packages, and a 10-objects-per-request cap that 413s. Documented from live route records, checked against Metrc's official state API docs.
The signing key isn't your OAuth client secret, the signature is hex (not base64), a legacy x-postmates-signature header shadows the real one, and anything but a 5xx response means no retry — your 400 is a black hole. Documented from live route records, checked against Uber's official docs.
Attio's own official Node.js example passes strings straight to crypto.timingSafeEqual(), which throws on every request. Documented from live route records, checked against Attio's developer docs.
Glue's one-catalog-per-account model means a second cluster silently collides with the first one's tables unless you set a unique namespace. Documented from live route records, checked against Redpanda's official docs.
Naive Typeform signature verification breaks on raw-body vs parsed-body hashing — and Typeform's own official Node.js example has a constant-time comparison gap. Documented from live route records.
Naive HubSpot contact creation duplicates records. Documented search-first and native batch/upsert patterns from live route records, checked against HubSpot's API reference.
Why Stripe webhook signature verification fails in production — raw-body mutation, per-endpoint secrets, replay windows — sourced from live agent route records.
The most common QuickBooks Online integration failure is a stale rotated refresh token. Documented failure modes from live route records: realmId capture, token rotation, reuse detection.
Jira API v3 requires Atlassian Document Format (ADF) JSON for descriptions and comments — plain strings return 400. Documented gotchas from live route records.
FHIR bulk export ($export) failure modes documented in live route records: async polling, group vs system scope, _typeFilter and _since behavior.
Shopify's Admin GraphQL API throttles by calculated query cost, not request count. Documented throttle-management and bulk-operation patterns from live route records.
Teams leaving the retired Authy API land on Twilio Verify. Documented OTP send/check flows and webhook authenticity validation from live route records.
NetSuite SuiteTalk REST auth failure modes from live route records: token-based auth (TBA) signatures, account-specific URLs, RESTlets vs SuiteTalk.
Plaid webhook verification failure modes documented in live route records: JWT header validation, key caching, identity and auth verification flows.
DocuSign embedded signing ceremony failure modes from live route records: recipient view URLs, clientUserId, token expiry, PowerForms alternatives.
Salesforce Bulk API 2.0 limits documented in live route records: ingest job lifecycle, query job monitoring, record and file size caps.