Intake an ASLC file
Receives an ASLC file. aslc_passthrough accepts an already-signed, opaque artifact: it is received, stored and audited WITHOUT parsing its content, and the signature outcome is recorded (never a hard reject). aslc_xml intake is not implemented in this phase (501). The uploading participantId is an explicit, validated body field; the tenant comes from the request identity, never the body. Field presence/type is validated against the schema (422); a bad participantId or non-base64 content is a coded 400. RBAC: operations:write.
Authorizations
JWT bearer token issued by the identity provider.
Body
Received file bytes, base64-encoded (standard encoding).
"PEFTTENET0M+PC9BU0xDRE9DPg=="
Intake mode: aslc_passthrough (opaque already-signed artifact) or aslc_xml (not implemented this phase, 501).
"aslc_passthrough"
Uploading participant id (UUID); validated to exist, tenant-scoped. Never tenant identity.
"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"
Optional client correlation/reference value; written verbatim to files.control_number (max 100 chars). Not an idempotency key.
"CTRL-20260615-0001"
Optional free-text reason the artifact took the opaque passthrough path.
"client pre-signed artifact"
Optional original filename the participant sent; recorded for audit (max 255 chars).
"ASLC027.xml"
Response
Accepted
Timestamp the file row was created (RFC3339).
"2026-06-15T07:50:00Z"
File id (UUID).
"018f8a3e-4b2c-7c1a-9e5d-2f6a1b3c4d5e"
Intake mode the file was received under.
"aslc_passthrough"
Operation ids (UUIDs) linked to this file; always a non-nil array (empty when none).
File lifecycle status.
"RECEIVED"

