Working references and deep-dives on web API design — REST, GraphQL, WebSockets, authentication, security, and the operational practices that distinguish robust APIs from fragile ones.