Versioning
The path is /v1. Inside a version, changes are additive. Every response carries Refillo-Version.
The promise
Before anything is removed, responses carry Deprecation and Sunset for at least 12 months. A new version gets a new path. Your key keeps working on the old one until that sunset.