> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt
> Use this file to discover all available pages before exploring further.

# Event streaming configuration and STA outcome contracts

> Corrected configuration, catalog, and native-rail outcome guidance for Lender, Streaming Hub, and STA.

<Badge stroke icon="calendar-days" iconType="regular">August 25, 2026</Badge> <Badge stroke icon="file-code" iconType="regular">Documentation correction</Badge> <Badge color="red" size="lg" stroke icon="triangle-exclamation" iconType="regular">Action required</Badge>

## Affects

***

Teams that configure Lender or Streaming Hub event delivery, retrieve Consignado manifests, or operate STA file transfers.

## What changed

***

`STREAMING_TLS_CA_CERT` in Lender must contain a base64-encoded PEM certificate. Invalid base64 or decoded non-PEM content prevents startup.

Kafka-based applications using the current event-streaming runtime attempt to create their Kafka fact and dead-letter topics during startup. The behavior is enabled by default and uses the broker defaults for partition count and replication factor. A missing `CREATE` ACL or broker error produces a warning but does not prevent startup. If your platform provisions topics through infrastructure as code, set `STREAMING_TOPIC_AUTO_PROVISION=false`. Use `STREAMING_TOPIC_PARTITIONS` and `STREAMING_TOPIC_REPLICATION_FACTOR` only when the application, rather than the broker, must choose those values.

Consignado exposes its streaming manifest at `GET /v1/streaming/manifest`. In Streaming Hub BYOC deployments, `STREAMING_HUB_MANIFEST_SOURCES` discovers producer manifests; optional manifest credentials must be set as a pair. Catalog matching uses `<resourceType>.<eventType>`, while `topic` is the producer application topic.

SILOC and STA guidance now distinguish local processing states from external outcomes. In particular, an out-of-band STA reply is recorded in local audit history but does not emit an external outcome event.

This corrects documentation of implemented contracts. It does not announce a runtime release.

## Impact

***

**Classification: Action required.** Raw PEM values, the former Consignado manifest path, catalog matching based on topics, or missing topic provisioning can make integrations fail or resolve the wrong event identity.

## What you need to do

***

<Steps>
  <Step>Base64-encode the PEM value before setting `STREAMING_TLS_CA_CERT` in Lender.</Step>
  <Step>Grant the application principal `CREATE` for its Kafka fact and dead-letter topics, or pre-provision them and set `STREAMING_TOPIC_AUTO_PROVISION=false`.</Step>
  <Step>Update Consignado manifest discovery to `GET /v1/streaming/manifest` and verify Streaming Hub manifest sources and credential pairs.</Step>
  <Step>Match catalog events by `resourceType` and `eventType`, not by the shared producer topic.</Step>
  <Step>Keep STA out-of-band replies as local audit outcomes; do not treat them as BACEN acceptance or rejection events.</Step>
</Steps>

### Deadline

Review before the next event-streaming or STA integration deployment.