[disclaimer: I have limited usage within teams so relatively light on useful suggestions] re the

/_pact/provider_states"

endpoint, I quite liked that pattern, iirc I did have a conversation about why you have to have this other way of starting it along the lines of "well, alternatively we could have the /_pact/provider_states_ endpoint exposed alongside the other routes, where people could then wipe the database from a single unauthenticated call" -> "ohhhhh! I get it now, this way is better" 🙂 but I agree having to explain it one person at a time is tricky to scale