Answer
Yes — the BPA engine exposes a process-start endpoint keyed by the process definition's name, which can be called directly from a REST client, optionally requesting variables back in the response — treat this as a genuine supported integration point, but confirm current behavior and any recent fixes against your specific release before relying on it in a new integration.