List the disbursement confirmations recorded for this tenant
Walks the confirmations client banks recorded against this tenant, most recently confirmed first: money the client says it ALREADY paid a worker.
‘orphan’ is the field to read first. It is true when this deployment holds NO averbado contract under the confirmation’s contract number, which means a client reported paying against a contract that is not here. It is DERIVED on every read from the same predicate the antecipação gate uses, never stored: storing it would create a second owner of the truth about whether a contract exists, and the two would disagree the moment an averbação landed after its confirmation.
Filter with ‘orphan=true’ to see only those, or ‘orphan=false’ for the matched ones. OMITTING the parameter is the whole book, which is what an operator arriving with no filter is asking for.
‘amount’ is the canonical BRL decimal STRING the client asserted, byte for byte as it was recorded, and it is never re-rendered: ‘payload_digest’ is taken over exactly those bytes, so a reformatted number would stop re-deriving the digest a client checks its own receipt against.
‘confirmed_at’ is when THIS GATEWAY stamped the confirmation and it is what orders the book. ‘paid_at’ is when the CLIENT says the money left, which is declared rather than observed, so it never orders anything: a client may declare any instant it likes, and a late confirmation ordered by it would insert itself in the middle of a page an operator had already walked past.
There is deliberately NO time window. A confirmation is immutable and is never purged, and a window would hide exactly the old orphan nobody ever reconciled.
Paging is keyset over the gateway’s stamp and the confirmation id. Send the previous page’s page.next_after as after. has_more is true exactly when another page exists, and next_after is null exactly when it is false, so a client loop may terminate on either. The cursor never expires; a cursor this service did not mint is refused with 422 rather than silently restarting the walk from the top.
It answers from a LOCAL table and crosses no government boundary. It answers 501 on a deployment that composed no disbursement family, the same posture the confirmation intake answers there: a deployment that can never record a confirmation has none to report, and an empty page would say the opposite. The tenant is derived from the validated identity and is never read from the request.
Authorizations
JWT bearer token issued by the identity provider.
Query Parameters
Narrows the page to confirmations with no averbado contract here (true) or to matched ones (false). Omitted means the whole book, which is never the same as either half.
true, false "true"
The previous page's page.next_after. Omitted starts at the most recent confirmation. A cursor this service did not mint is refused, never restarted from the top.
"eyJ2IjoxLCJyIjoiYm9hcmQiLCJ0IjoiMjAyNi0wOC0xNFQwOToxMjozM1oiLCJrIjpbImMwMDEyIl19"
Maximum number of confirmations to return. Omitted means the ceiling of 200.
1 <= x <= 20050