Affects
Teams that configure Lender or Streaming Hub event delivery, retrieve Consignado manifests, or operate STA file transfers.
What changed
STREAMING_TLS_CA_CERT in Lender must contain a base64-encoded PEM certificate. Invalid base64 or decoded non-PEM content prevents startup.
Kafka-based applications using the current event-streaming runtime attempt to create their Kafka fact and dead-letter topics during startup. The behavior is enabled by default and uses the broker defaults for partition count and replication factor. A missing CREATE ACL or broker error produces a warning but does not prevent startup. If your platform provisions topics through infrastructure as code, set STREAMING_TOPIC_AUTO_PROVISION=false. Use STREAMING_TOPIC_PARTITIONS and STREAMING_TOPIC_REPLICATION_FACTOR only when the application, rather than the broker, must choose those values.
Consignado exposes its streaming manifest at GET /v1/streaming/manifest. In Streaming Hub BYOC deployments, STREAMING_HUB_MANIFEST_SOURCES discovers producer manifests; optional manifest credentials must be set as a pair. Catalog matching uses <resourceType>.<eventType>, while topic is the producer application topic.
SILOC and STA guidance now distinguish local processing states from external outcomes. In particular, an out-of-band STA reply is recorded in local audit history but does not emit an external outcome event.
This corrects documentation of implemented contracts. It does not announce a runtime release.
Impact
Classification: Action required. Raw PEM values, the former Consignado manifest path, catalog matching based on topics, or missing topic provisioning can make integrations fail or resolve the wrong event identity.
What you need to do
1
Base64-encode the PEM value before setting
STREAMING_TLS_CA_CERT in Lender.2
Grant the application principal
CREATE for its Kafka fact and dead-letter topics, or pre-provision them and set STREAMING_TOPIC_AUTO_PROVISION=false.3
Update Consignado manifest discovery to
GET /v1/streaming/manifest and verify Streaming Hub manifest sources and credential pairs.4
Match catalog events by
resourceType and eventType, not by the shared producer topic.5
Keep STA out-of-band replies as local audit outcomes; do not treat them as BACEN acceptance or rejection events.