Skip to main content
Lerian Consignado — Dataprev drives its work through five flows. Two are command-driven — the credit engine asks for a margin or an averbação — and the rest are poller-driven, sweeping Dataprev on a cadence for auctions and settlement. Before any of them can run, a tenant registers its credentials.

​
Credential setup

A tenant transacts only after registering two credentials through the gateway’s control plane:
  • an ICP-Brasil A1 client certificate (PEM certificate and key), validated before it is stored;
  • an OAuth2 client-credentials secret.
Both are held in a managed secret store and are never returned by any read. A status read reports whether a certificate is present, its fingerprint and expiry, and whether the OAuth secret is set — returning those flags (all false when nothing is stored) rather than an error.

​
Margin fetch

When the credit engine needs a worker’s payroll margin, it issues a margin-request command. The gateway queries Dataprev for the worker’s available margin and disposable remuneration, and emits a fact carrying that margin, keyed to the originating request.

​
Averbação

To register a signed contract, the credit engine issues an averbação-request command. The gateway registers the contract with Dataprev and emits one of two facts:
  • an averbação-confirmed fact carrying the rail’s own success code — relayed, never hardcoded; or
  • an averbação-rejected fact carrying the rail’s error code and message.

​
Loan auction (leilão)

Worker loan requests (solicitações) each open a 24-hour auction. A discovery poller lists these requests page by page. For every request it has not yet seen, the gateway scatters the auction concurrently to a configured set of external bid managers, collects their bids, and selects the lowest annual-CET bid — ties broken by the lowest installment, and a bid whose CET cannot be parsed can never win. It then submits the winning bid. A second, win-detection poller watches the submitted proposals. When a proposal reaches an accepted state, the gateway emits a proposal-accepted fact so the downstream lending system can originate the loan.

​
Reconciliation

On a configurable cadence, a reconciliation poller sweeps a sliding window of payroll competências. For each competência it reads two independent sources — the per-contract escrituração records and the CEF D+2 repasse records that settle paid installments — normalizes them, and emits one reconciliation fact per record. The two legs are independent: a failure reading one never blocks the other.