Skip to main content
POST
Record signed credit instrument

Authorizations

Authorization
string
header
required

JWT bearer token issued by the identity provider.

Path Parameters

applicationId
string<uuid>
required

Loan application identifier.

Body

application/json
document
string<byte>
required

The signed PDF, base64-encoded (standard alphabet), at most 20 MiB decoded.

evidenceRef
string
required

The integrator's reference to the signature evidence.

Required string length: 1 - 1024
signatories
object[] | null
required

Every party that signed.

Required array length: 1 - 20 elements
signedAt
string<date-time>
required

When the signature completed (RFC3339); at most 5 minutes after the Lender's clock, the signature provider's clock skew.

signedDocumentDigest
string
required

sha-256 hex of the decoded document. The Lender computes its own and refuses a mismatch (LENDER-0605).

Pattern: ^[0-9a-fA-F]{64}$
creditInstrumentId
string<uuid>

The Lender-emitted CCB that was signed. Required when the product version has the Lender emit; refused when the client issues.

originalDocumentDigest
string

sha-256 hex of the document that was signed. Required when the client issues; when the Lender emitted, optional and checked against its CCB.

Pattern: ^[0-9a-fA-F]{64}$
replacementReason
string

Only to replace: why, in one line of at most 500 characters. Goes with supersedes.

Maximum string length: 500
supersedes
string<uuid>

Only to replace: the id of the proposal's newest record. Goes with replacementReason.

Response

Created

custodian
string
required

Who holds the signed PDF: lender, downloadable here; or integrator, whose gateway holds it while the Lender keeps its digest.

evidenceRef
string
required

The integrator's reference to the signature evidence.

id
string
required

Record identifier (uuid).

loanApplicationId
string
required

Loan application identifier (uuid).

origin
string
required

Who issued what was signed: lender_emitted or client_issued.

originalDocumentDigest
string
required

sha-256 hex of the document that was signed. Empty when the integrator declared no original.

recordedAt
string
required

When the Lender recorded it (RFC3339, UTC).

signatories
object[] | null
required

Every party that signed, without name or document.

signedAt
string
required

When the signature completed (RFC3339, UTC).

signedDocumentDigest
string
required

sha-256 hex the Lender computed over the signed PDF.

signedDocumentSize
integer<int64>
required

Size of the signed PDF in bytes.

creditInstrumentId
string

The Lender-emitted CCB that was signed (uuid). Absent when the client issued.

replacementReason
string

Why this record replaced the previous one. Absent on the first record.

supersedesId
string

The record this one replaced (uuid). Absent on the proposal's first record.