@joeyAghion => Pragmatic RESTful API Design in the Artsy Public HAL+JSON API

I wrote a post introducing the new API and some design decisions behind its public face. I didn't go into details about testing or implementation, those could be probably separate and good topics.

Would appreciate feedback from @joeyAghion and everyone else, especially if you saw something in APIv2 that you think is worth talking about.
"The API developer must simply answer the question of whether a client is authorized to retrieve a resource or not. The API will return a 403 or 404 otherwise and it's not necessary to customize the response for different types of access."