DECENTRA / CORE ARCHITECTURE
Internal architecture proposal · v0.11 · Complete final Dossier payload

Decentra Core.
Five components. Three parties. One agreed history.

A financial-control layer for independent agents. Seller, buyer and Decentra Core each retain and verify a shared signed transaction history—from invoice issuance to buyer authority, controlled execution and settlement. The shared, portable signed history is the Transaction Dossier.

PROPOSED LOGICAL ARCHITECTUREPROVIDER-NEUTRAL CORENO PRODUCTION READINESS CLAIM
Decentra Core: five logical components and a shared operation recordFive logical Core components over a shared transaction protocol. In the worked example, seller, buyer and Core retain signed history, validate proposals and sign acceptance of each committed transition. Core is not the sole authoritative state holder. Observed provider facts are retained separately until accepted. Existing payment providers still execute payments and supply settlement evidence.OUTSIDE CORE · INDEPENDENT OWNERS AND AUTHORITATIVE SOURCESIndependent agentsor business softwarePropose an exact financial actionBuyer-owned sourcesidentity, approval and policyEstablish who may act and payBusiness systemsinvoice truth and accountingOwn the obligation and booksCaller + proposalBuyer-issued authorityRead invoice /apply verified resultDECENTRA COREProposed logical architecture · not five required deploymentsIntegration portsCaller · invoice · buyer approval · payment · accountingFIVE COMPONENT CONTRACTS · RECHECK AT ADMISSION AND EXECUTION01Identity &accessVerify caller and tenantResolve represented buyerRestrict invoice access02Authority &policyBind legitimate buyer approvalCheck exact terms and policyPermit, deny or seek approval03Spend & methodcontrolsEnforce the approved amountCheck permitted method useKeep credentials out of agents04Execution &recoveryPersist admission and attemptUse a protected provider portResolve unknowns before retry05Evidence &reconciliationLink decisions and outcomesVerify provider evidenceConfirm accounting applicationShared transaction protocolPropose → verify → three-party accept → append → replaySeller, buyer and Core retain the agreed history. Observations awaiting agreement remain explicit.The worked example requires three-party shared state; agent reasoning and existing business systems stay independent.Controlled provider portCommitted admission + valid windowAuthoritative statusSubmission ≠ settlementPayment providerExecution · status · settlementExisting rails; selected contractHOW TO READControlled operationExternal buyer authorityExternal result / evidence

Five logical components over the shared transaction protocol. The worked example requires seller, buyer and Core to retain and accept the same committed history. Logical boundaries are not five required microservices.

Download diagram ↗

Scroll the diagram horizontally to keep labels readable. The five component descriptions below fit your screen.

Core is not the only state holder. Seller, buyer and Core each retain the agreed chain and evidence. Core coordinates proposals and provider monitoring; each party independently verifies and signs acceptance.

Keep agreement separate from external facts. A provider observation can exist before all parties acknowledge it. Three signatures commit a shared record; they cannot create financial authority or settle funds.

Shared-state design / proposed

The transaction belongs to all three parties.

Transaction Dossier: the growing, signed, append-only history of one commercial obligation, retained and independently verifiable by seller, buyer and Core. At settlement, its accepted final seal creates the Sealed Transaction Dossier.

Three-party replicated signed transaction stateSeller, buyer and Core each retain the agreed chain and retained evidence. Core coordinates proposals, every party verifies and signs acceptance of the same candidate digest, and all three accept before a business transition commits. New provider facts remain observed until agreement; monitoring continues independently.ONE TRANSACTION / THREE INDEPENDENT STATE HOLDERSSELLEROwn copy of the agreed chainSigned events + retained evidenceSame accepted head; independent replayBUYEROwn copy of the agreed chainSigned events + retained evidenceSame accepted head; independent replayDECENTRA COREOwn copy of the agreed chainSigned events + retained evidenceSame accepted head; independent replayPROPOSE → VERIFY → THREE SIGNED ACCEPTANCES → COMMITEach acceptance binds transaction, envelope, sequence, previous head and candidate digest.OBSERVED / NOT YET AGREEDRetain incoming payment facts even if someone is offline.COMMITTED / SHARED STATEAll three signed acceptance; append and replicate the record.Core coordinates; it is not the sole holder of truth. A signature is not a replacement for settlement evidence.

All three sign acceptance of each committed transition. Ordinary signatures over one candidate digest are sufficient for this proposal; an aggregated multisignature scheme is optional, not assumed.

Download state map ↗

Genesis boundary: seller preparation and Core registration occur before buyer delivery. They remain signed source evidence, not an already three-party-approved state. Shared commitment starts when the buyer verifies that dossier and all three accept its initial head. No earlier buyer participation is silently invented.

Availability trade-off: three-of-three acceptance can stall while one party is offline. Core still records incoming provider evidence and monitors an admitted payment. Once the party returns, validate and commit pending milestones in order. An unavailable participant does not cause an automatic quorum downgrade.

Transaction Dossier terminology
Transaction Dossier
The complete signed history and retained evidence for one invoice-to-settlement transaction. Earlier signed versions remain intact as new records are appended.
Signed Event
A signed instruction, attestation or evidence record. A committed transition also carries separate seller, buyer and Core acceptance signatures.
Agreed Head
The latest committed record accepted by all three parties. Pending observations are explicitly separate, not silently part of the agreed state.
Sealed Transaction Dossier
The settlement-complete dossier, including the final manifest/seal and three-party acceptance bundle. Later returns, disputes and corrections create additional history; they do not rewrite this sealed version.

Shared Envelope: all three accept the same transaction-scoped descriptor at genesis. Every in-envelope actor statement and acceptance binds its digest; pre-execution agreement must complete before the submission deadline. Later provider observations and completion still commit through the same three-party protocol.

Example / Payroc B2B receivables

Invoice → shared agreement → buyer-signed payment → sealed dossier.

For fictional invoice INV-1042 ($12,500 USD), seller and Core prepare signed source records; the buyer verifies them and joins the initial shared state. Every subsequent committed transition carries seller, buyer and Core acceptance, through payment, evidence and the final settlement dossier.

Illustrative, proposed integration. The invoice, participants and amount are invented for explanation—not customer evidence. This does not claim an existing Decentra–Payroc deployment or a qualified BlueSnap-to-Payroc API path.
Happy-path assumptions: seller and buyer agents are already registered through KYA; enrollment is designed separately. The seller may issue invoices and the buyer agent has valid payment authority for this exact instruction. Core still verifies that authority. Registration, invoice authenticity and permission to pay are distinct.

A / Prepare, sign and register the invoice

Seller invoice preparation, signing, Decentra registration and delivery to the buyerSeller preparation, seller signature and Core registration precede buyer delivery. Both agents are registered through KYA, but these seller/Core records are signed prehistory, not yet three-party committed. After delivery, the buyer verifies them and all three accept an initial shared head in phase B. Invoice issuance and registration do not constitute buyer payment permission.A / PREPARE, SIGN AND REGISTERSigned prehistory · buyer joins agreement after deliveryENVELOPE OPENS / NO PAYMENT AUTHORITYSeller AR / ERPOriginal invoice remains hereSeller agentRegistered · authorized issuerDecentra CoreIdentity + evidence componentsBuyer agentAlready registered1. Read existing invoiceINV-1042 · $12,500 USD2. Parse + structure the invoiceAgreed, versioned agent-ready schemaUnclear fields return to seller for review3. Seller-sign the exact versionUnder explicit invoice-issuing authority4. Submit seller-signed invoiceOriginal signature + structured document5. Open envelope + registerCheck issuer, signature, schema + versionStore the exact signed invoice versionCountersign registration + envelope01 Identity & access · 05 Evidence6. Return registration + envelopeSeller signature + Decentra attestation7. Seller sends the registered invoice to the buyer agentSeller-controlled delivery channel; no payment permission impliedISSUER PROVENANCE ≠ BUYER ACCEPTANCEDecentra attests to registration and specified checks—not the commercial debt or permission to pay.CHECKS FAIL?Return issues; do not silently edit.

Seller-issued invoice and Core-signed registration are retained prehistory. Once delivered, the buyer verifies this dossier and all three accept the initial shared head. No buyer acceptance or payment permission is implied by the seller/Core signatures.

Download preparation ↗

Scroll horizontally or read the preparation steps below. Agent enrollment and KYA are assumed—not diagrammed.

Read the invoice-preparation steps
  1. Read: the seller agent reads the original invoice from the seller’s existing AR/ERP system. That system remains the authoritative commercial record.
  2. Structure: parse it into an agreed, versioned agent-ready invoice schema. The v0.2 specimen proposes an invoice structure; production invoice-schema governance must cover seller, intended buyer, invoice identity/version, line items, amount, currency, terms and payee reference. Do not invent missing commercial facts.
  3. Seller-sign: the seller or its explicitly authorized invoice-issuing agent signs the exact structured version. Registration alone does not grant invoice-issuing authority.
  4. Submit: send the seller-signed invoice and its provenance to Decentra through the proposed invoice-registration interface.
  5. Validate and register: verify the issuer and invoice-issuing authority, signature, agreed schema, required fields and duplicate/revised version handling. On success, store the exact signed version and countersign an explicit registration attestation bound to it. The attestation records which checks passed; it does not guarantee the debt or approve payment.

    Open the proposed Envelope: at this first Core interaction, create the transaction-scoped descriptor and absolute submission deadline. Bind it into Core registration. The seller invoice was already signed; do not retroactively bind its original issuance to a future envelope. Buyer has not joined and no payment permission exists.

  6. Return: return the registered dossier to the seller: structured invoice, seller signature, Decentra registration reference and countersigned attestation. Failed checks return issues; correction of signed commercial terms requires a new seller-signed version, not silent Decentra editing.

    Return the proposed envelope descriptor with the signed registration dossier. Seller delivery carries both to the buyer; no sliding deadline refresh occurs.

  7. Deliver: the seller agent sends that registered dossier to the already-registered buyer agent using its selected business channel. The buyer can now inspect the invoice; acceptance and payment authority remain separate.
What is signed, stored and returned?

Seller signature: “This seller issued this exact invoice version.” Decentra countersignature: “Decentra registered this exact seller-signed version and these specified checks passed.” The v0.2 specimen specifies example signature and attestation fields; production key trust, retention/access and verification governance still need qualification.

Store the signed invoice and linked registration evidence without replacing the seller’s AR ledger. Duplicate submissions should resolve against the same registration; a revised invoice preserves its history and requires its own validation. Buyer approval must bind to the version eventually presented for payment.

This is primarily 01 Identity & access plus 05 Evidence & reconciliation, with issuer-permission checks. It is a proposed invoice interface—not a sixth mandatory Core service. Invoice-registration attestation is distinct from payment-decision signing or provider settlement evidence.

The proposed envelope opens at registration and is activated by later three-party genesis. Existing identity credentials plus the agreed descriptor are the preferred first profile; a certificate is a signed claim, not a separate signer. Temporary transaction-specific keys/certificates remain an optional future isolation mechanism, not extra credentials implemented in this fixture.

B / Buyer authenticity, payment and settlement

Buyer-side happy path with three-party agreement through settlementBoth agents are registered. Buyer receives seller and Core prehistory, verifies invoice authenticity and all three accept the initial shared head. Buyer signs an exact pay intent, all three commit it, Core signs admission, and all three commit before payment. Core collects and signs provider evidence, continues monitoring while acknowledgments are pending, and commits successive milestones with seller and buyer. Settlement and accounting evidence feed a Core-signed final seal accepted by all three and delivered identically to both parties.BUYER HAPPY PATH / AUTHENTICATE → AGREE → PAY → SETTLEProposed protocol · registration assumedSeller agent / AROwn agreed-state copyBuyer agentOwn agreed-state copyDecentra CoreCoordinates + retains its copyPayrocAuthoritative payment evidence1. Receive seller-signed invoice dossierSeller issuance + Core registration from phase A2. Check the exact invoice against CoreLookup stored version; verify issuer, digest and signatures3. Return Core-signed authenticity attestationAuthentic registered version ≠ acceptance of the debt4. ALL THREE ACCEPT GENESIS + ENVELOPEThe earlier seller/Core records become retained genesis evidence—not retroactive buyer approval.5. BUYER SIGNS THE PAY INTENTInvoice + payee + envelope digest$12,500 USD · method · valid authority6. Send buyer-signed message to payAll three accept the intent event before it commits7. CORE SIGNS ADMISSIONRecheck authority + envelope deadlinePersist the one permitted provider attempt8. THREE-PARTY ACCEPTANCE COMMITS THE ADMISSIONSeller and Core acknowledgments do not replace the buyer’s payment authorization.9. Submit before envelope deadlineEffect gate → selected Payroc contract10. Receive provider receipt / statusCore signs a linked observation; this is not settlement11. ACCEPT THE RECEIPT EVENT → COMMIT THE INTERIM dossierCore proposes; seller and buyer verify and acknowledge the same digest; distribute the agreed version.AFTER SUBMISSION / MONITOR TO SETTLEMENT12a. Query / receive lifecycle facts12b. Verify + retain new evidence13. EACH NEW MILESTONE: SIGN OBSERVATION → PROPOSE → THREE ACCEPT → COMMITReplicate the new agreed head and dossier to all parties. Old records and signatures remain intact.14. Authoritative settlement evidenceCore observes settlement; shared commitment still requires agreement15a. Confirm seller accounting application through the designated writerIf already posted, confirm the existing application; no additional collection15b. Retain accounting readback linked to the settled payment16. COMMIT SETTLEMENT EVIDENCE → CORE SIGNS THE FINAL MANIFEST → ALL THREE ACCEPT THE SEALThe seal binds the complete prior agreed history and retained evidence; no recursive self-signing.17a. Sealed Transaction Dossier to buyer17b. Same sealed dossier to sellerExpiry stops new submission—not monitoring or evidence commitment.Final means this settlement workflow closed. Later returns, disputes and corrections are new events.

Three-party agreement gates are shown as full-width bands. Core coordinates proposals; seller, buyer and Core each verify and accept the same digest. Provider observations can arrive before agreement; monitoring continues until authoritative settlement. Both recipients receive the identical Sealed Transaction Dossier.

Download example ↗

Scroll horizontally or read the buyer-side steps below. Settlement timing is provider-specific; no timing promise is implied.

Read the three-party buyer happy path
  1. Receive and verify: buyer receives the seller-signed invoice and Core registration, requests a lookup and receives Core’s signed authenticity attestation for the exact version.
  2. Initialize shared state: seller, buyer and Core verify and sign acceptance of the same genesis candidate. Retain the earlier seller/Core records as evidence; do not pretend the buyer signed them before delivery.

    Activate the Envelope: all three accept the same descriptor through genesis before the exclusive deadline. Verify scoped identities and invoice digest; retain the descriptor under context.envelope.

  3. Authorize payment: the entitled buyer signs the exact pay intent, binding invoice/version, authenticity attestation, payee, amount/currency, method, constraints and replay protection. All three sign acceptance before this intent commits. Seller/Core acceptance is not an additional payer authorization.

    Bind the pay intent event to envelopeDigest; envelope acceptance is not a substitute for the buyer’s scoped payment mandate.

  4. Admit the effect: Core checks current buyer authority, limits and method, signs the admission and persists the permitted attempt. All three accept that admission before the adapter initiates the provider effect.

    Execution-time gate: after all three commit admission, the protected executor must recheck the envelope, authority/intent expiry and revocation, exact scope and consumed-attempt state immediately before submission. Submit strictly before the earliest applicable deadline. Submission evidence references the completed admission certificate. Offline timestamps are only signed fixture assertions.

  5. Execute and observe: the selected Payroc interface receives the permitted instruction. Core retains and signs provider receipts/status as observations, correlated to the original attempt. Provider transport follows its actual qualified API, not an assumed custom-signature protocol.

    If the request outcome is uncertain, retain the same attempt and reconcile—even after expiry. Never interpret timeout or expiry as proof that no payment occurred, or use a fresh identifier as a retry shortcut.

  6. Commit the interim evidence: Core proposes the receipt transition; seller and buyer verify it, and all three acknowledge the same candidate digest. Append and replicate the committed record and interim dossier. Initial receipt, authorization and capture are not settlement.
  7. Monitor continuously: Core continues durable monitoring even while acknowledgments are pending. For each distinct new provider milestone, retain a signed observation, propose the next ordered transition and obtain all three acceptances before commitment. No earlier event is rewritten.

    After the submission window expires, prohibit new submission but continue authenticated observations, three-party evidence commitment and recovery. The separate monitoring deadline triggers escalation, not automatic failure, reversal or another charge.

  8. Settle and confirm the books: verify authoritative settlement evidence under the selected product’s agreed definition and confirm the seller’s accounting application/readback. Core signature and party agreement attest to evidence; neither causes settlement. Commit those evidence transitions through three-party acceptance.
  9. Seal: Core signs a manifest binding the prior agreed history and retained evidence; all three accept the seal as the final committed event. Deliver the identical final dossier to seller and buyer and retain Core’s copy.

    The final seal may be accepted after submission expiry. Check historical validity under a defined clock/key-trust policy; do not discard earlier signatures merely because the window is now closed.

  10. Replay independently: any party with its retained authorized dossier verifies the links, actor signatures and three acceptances and reconstructs the agreed state. Later corrections, returns or disputes append new history rather than alter this completed settlement workflow.

C / The Transaction Dossier: every committed transition carries three acceptances.

Actor signatures state who issued, authorized or observed a fact. Separate acceptance signatures establish that seller, buyer and Core agree on the same recorded transition. Payroc provides authoritative evidence; it is not an assumed fourth signer.

Append-only event chain with actor signatures and three-party acceptanceEach committed record contains a transition body referencing the prior committed record, the responsible actor signature, and separate seller, buyer and Core acceptance signatures over the identical candidate digest. Original evidence is retained. Projections and dossier versions are reconstructed. Observations awaiting acceptance are segregated from committed history.APPEND-ONLY RECORD / THREE ACCEPTANCES / INDEPENDENT REPLAYPRIOR AGREED HEADDigest of prior committed recordIncludes its acceptance bundleCANDIDATE EVENTBody + envelope + evidenceResponsible actor signatureACCEPTANCE BUNDLESeller + buyer + Core signaturesBind candidate + envelope digestNEXT AGREED HEADAppend the committed recordReplicate to all three holdersREPLAY: retained records + invoice / intent / receipts + verification materialVerify links, actor signatures and all three acceptances; derive state and each named dossier version.Observed facts awaiting agreement remain explicit—not silently labeled committed.No updates or deletes in the canonical chain. Corrections and revocations append new signed events.Hash links reveal tampering; independent copies, storage policy and checkpoints protect retention and detect rollback.A coordinated three-party protocol—not a claim of public blockchain consensus, distributed finality or completed implementation.

Every holder can verify and replay the retained chain. Pending observations are distinct from the committed chain; a new agreed dossier never overwrites an older signed version.

Download chain ↗
Protocol contract: signatures, acceptance, retention and replay

Three replicas: seller, buyer and Core retain complete authorized committed records, original invoice/intent/receipt payloads and verification material. They agree on an identified chain head. Core may coordinate ordering; independent parties still validate instead of trusting its current database response.

Actor signature: seller signs invoice issuance; buyer signs exact payment permission; Core signs authenticity checks, admission and evidence observations. These are role-specific assertions. Acceptance signature: each of the three signs “accept” for the same transaction, sequence, prior committed head and candidate digest. This acknowledges the recorded transition; it does not create spending authority or independently certify the provider.

Candidate and committed record: a canonical transition body contains schema version, transaction/obligation ID, sequence/event ID, prior committed record digest, event type, proposed resulting state, evidence references, actor/key identity and recorded time. The responsible actor signs the canonical body. A candidate digest binds that body and actor signature. Each party’s separately domain-separated acceptance signs the candidate digest and context. The committed record includes the candidate and all three acceptances; the next record references its digest. The schema, canonical encoding, algorithms and key lifecycle remain to be specified.

One next transition: parties persist their acceptance decisions and never sign conflicting candidates for the same transaction, sequence and prior head. Core serializes competing proposals against the expected agreed head. Repeated submissions resolve to existing records. An observed conflict blocks commitment and is visible; this is not a proven Byzantine-consensus protocol or a claim of fork-free operation under compromised participants.

Observed versus committed: retain signed incoming facts in an append-only observation journal while awaiting agreement; keep them visibly separate from the shared committed chain. No unchanged poll is a new financial milestone. Three-of-three agreement can wait indefinitely for an unavailable party; monitoring and retention continue, with no silent quorum downgrade or replayed payment effect.

Immutable requirement: canonical records permit append and read—not update or delete. Corrections, revocation and supersession are new events. Enforce append-only storage and retention controls, protect signing keys, keep independent replicas/checkpoints and detect rollback or missing history. Hashes and signatures make tampering evident; they do not by themselves prevent deletion, participant collusion or data loss.

Independent reconstruction: retain original bytes, evidence and historical key/authority verification context—not merely hashes or expiring links. Verify the complete ordered chain, actor signatures and all three acceptance signatures, then replay a versioned transition reducer. Current status, balances and dossier versions are derived views; caches can be rebuilt without editing canonical history. Recorded times are not assumed trusted external timestamps.

Sealed Transaction Dossier: preserve seller issuance, Core registration/authenticity, buyer intent, admitted instruction, provider attempts/receipts, committed lifecycle/settlement evidence and accounting readback. Core signs a seal candidate referencing the prior agreed head and manifest of prior records; all three accept it. The delivered dossier includes the seal and its acceptance bundle without recursively signing itself. Recipients get the same sealed version under an agreed shared-data policy; no credentials belong in it.

Scope: this is a proposed three-party stateful transaction protocol using ordinary signatures, not a deployed multisig wallet, public blockchain, custody product or completed cryptographic/storage implementation. Privacy, retention, legal erasure and long-term verification require explicit policy. Settlement closes this happy-path workflow, not the possibility of a later return, dispute or new corrective event.

How the five components show up in this one payment

Concrete responsibilities for illustrative invoice INV-1042
Core componentIn this example
01 · Identity & accessVerify seller/buyer representation, issuing rights, actor signatures and all three acceptance signer identities; retain historical verification context.
02 · Authority & policyValidate the buyer-signed exact pay intent. Keep buyer authority separate from all three parties acknowledging the recorded intent and admission.
03 · Spend & method controlsEnforce amount, payee and approved method constraints. Three acceptance signatures do not guarantee funds or provider approval.
04 · Execution & recoveryPersist the agreed admission before effect; use the protected Payroc adapter, prevent duplicate obligations and continue monitoring through settlement independently of pending acknowledgments.
05 · Evidence & reconciliationKeep observed facts distinct from committed events. Collect three acceptances, replicate signed history, confirm settlement/accounting, seal and distribute the identical final dossier.
Integration context and exceptions (outside this happy path)

Reuse the existing business systems

BlueSnap AR Automation is a candidate seller-side surface: its public product describes invoicing, customer portals, ERP synchronization and reconciliation. We would first qualify the current connector and operating model—not rebuild those functions.

Buyer-side access can be a bolt-on interface or agent connector. Core middleware and its adapters form the proposed provider-facing integration. Hosting, operators and access boundaries remain to be agreed; these are not three mandatory installations.

Stop safely when the story breaks

  • Invoice validation fails: return issues to the seller; correct and seller-sign a new version before registration.
  • No valid buyer approval: request legitimate approval, then reverify before any payment effect.
  • Provider outcome unknown: preserve and resolve the original attempt; no blind new charge.
  • Payment succeeds, posting fails: repair the accounting application only.
  • Repeated or competing requests: resolve against the same obligation and durable attempt history.

Before implementation: select the exact AR system, Payroc or BlueSnap product/API, method and status contract; qualify one accounting writer/readback; agree buyer approval ownership, credential enforcement and operations. Payroc and BlueSnap interfaces are not assumed interchangeable. No timeline, cost saving or production capability is implied.

01 / Component contracts

What each component is responsible for

Open a component for its inputs, outputs and smallest useful implementation. These are proposed contracts, not published endpoint names or a catalog of finished products.

01Identity & accessWho is acting, and what may they access?
Consumes
Caller proof, trusted issuer, tenant and buyer-account context.
Produces
An authenticated, scoped caller context—or a denial. Not permission to spend.

First implementation: One supported identity source and caller profile; explicit organization/account mapping, expiry and revocation checks. Reuse an existing identity provider.

Boundary: No new identity provider or rich KYA/attestation network is required. Identity alone never authorizes a payment.

Reuse bounded authentication patterns; qualify the cross-organization mapping.

In the shared-state example, verify actor and acceptance signer identities separately; retain verification context for all three parties.

Envelope binding: resolve the existing identity/key context and bind every in-envelope action to the agreed descriptor. New transaction-specific certificates are optional, not assumed.

02Authority & policyIs this exact financial action permitted?
Consumes
Authoritative invoice context, verified buyer approval/delegation and current policy.
Produces
A decision bound to the invoice/version, payee, amount/currency, method, expiry and policy version.

First implementation: Explicit invoice-specific approval from an entitled buyer. Recheck current authority at effect admission; changed material terms require fresh verification and any required approval.

Boundary: The buyer supplies authority. The agent may propose an action but cannot grant itself permission or certify invoice commercial truth. Standing delegation is separately scoped.

Extract exact-action approval patterns; define the portable invoice decision contract.

Buyer payment permission remains distinct from seller/buyer/Core acceptance of a recorded transition.

Envelope acceptance does not authorize spending. The buyer mandate and intent must remain valid at actual submission; the earliest applicable expiry governs.

03Spend & method controlsDoes it fit the approved amount and payment method?
Consumes
Approved amount and constraints, plus a provider-approved payment-method reference.
Produces
A method/constraint check for this operation—or a safe stop. Funding availability and provider authorization remain separate.

First implementation: One approved method and currency. Validate association, permitted use and amount; route missing setup to the approved buyer flow.

Boundary: No credit issuance, funds custody, per-agent wallet or enterprise-wide shared-budget system is implied. A usable reference does not guarantee funds or payment approval.

Reuse credential-isolation patterns; qualify the actual method/setup contract.

The three-party protocol never substitutes signatures for amount, method or funding/provider checks.

Envelope scope binds the exact invoice/version, payee, amount/currency, method and one permitted attempt; persist consumed authority so a new transport ID cannot create another payment.

04Execution & recoveryHow does an allowed instruction become one controlled attempt?
Consumes
A currently permitted instruction and stable business-obligation identity.
Produces
A durable provider attempt with submitted, pending/unknown or provider-resolved status.

First implementation: One selected provider contract. Prevent direct credentialed bypass, correlate retries, recover after restart and retain unknown outcomes until authoritative resolution. Pause new effects without stopping recovery.

Boundary: The provider executes payments. Local decisions, provider submission and accounting writes are separate recoverable phases—not one distributed atomic transaction.

Assemble protected admission and phase recovery; build or qualify the selected provider adapter.

Admission commits with three-party acceptance before the provider effect; durable monitoring continues while later evidence awaits acceptance.

Enforce the exclusive submission deadline at the isolated effect gate after fully committed admission. Continue monitoring and uncertain-outcome recovery after expiry; no implicit renewal or fresh-attempt retry.

05Evidence & reconciliationWhat was approved, what happened, and what needs repair?
Consumes
Original request/approval, decision, attempt, authenticated provider evidence and accounting result.
Produces
A correlated operation history, verified application/readback or a durable exception for an operator.

First implementation: One designated seller accounting writer and readback. Deduplicate events and applications. If payment succeeds but posting fails, repair the books without paying again.

Boundary: The business system owns the receivable; the provider owns payment status. A Core decision or receipt is not proof of settlement. Buyer AP ownership remains explicit.

Build the invoice evidence/application contract and operator-safe reconciliation path.

Retain and replicate the signed chain and evidence to seller, buyer and Core; independently replay accepted history and derive dossier/status views.

Retain the agreed envelope and every bound record. Submission deadline and monitoring escalation have different meanings; post-deadline settlement/accounting/seal records remain valid historical evidence.

02 / Shared operation state

One Transaction Dossier. Three retained copies.

The agreed history is held by seller, buyer and Core—not just Core. Source observations and pending proposals remain explicit until all three accept the same transition. Each holder can verify the accepted head and reconstruct the committed state.

The buyer alone grants buyer payment permission. Seller/Core acknowledgments accept that this permission was recorded; they are not substitutes for it. Payroc remains authoritative for payment evidence and the seller’s business system remains authoritative for accounting facts.

Three-of-three acceptance trades availability for shared agreement. Incoming payment evidence is still retained while a party is offline. No repeated request, acknowledgment or delayed commitment creates a fresh payment instruction.

The Transaction Dossier retains
  1. Invoice, version, original seller signature and Core attestations.
  2. Buyer-signed payment intent and its authority context.
  3. Core admission, provider attempt and original receipts.
  4. Every committed milestone and three acceptance signatures.
  5. Settlement/accounting evidence and the final agreed seal.
Observed ≠ agreed. Agreed admission ≠ submission. Submission ≠ settlement.

Envelope versus Dossier: the Envelope bounds permission to submit; the Dossier retains the full history. Closing the execution window never deletes evidence or stops recovery of an already-submitted payment.

Proposed specification / Transaction Envelope / schema 0.2 fixture

Bound execution. Preserve the history.

The Transaction Envelope is a bounded execution context: agreed participants, transaction scope, authority references and a submission window. The Transaction Dossier is the permanent, portable signed history of that transaction. Closing the submission window does not erase the history, cancel an already-submitted payment or prevent observation, settlement, accounting, sealing and delivery.

Specification, not a deployed control. This is a proposed logical design and a schema 0.2 final happy-path specimen. Working-state expiration and extension schemas are not yet implemented; extension handling below is policy specification only. No actual Payroc calls, provider protocol enforcement, distributed consensus, production readiness or real payment is claimed. Real buyer mandate and provider authorization remain required.

Opening is not activation

Proposed opening is the first Core registration, at 2026-10-21T20:01:00Z. The seller's signed invoice source at 20:00 UTC predates that opening and remains prehistory; do not retroactively label it an in-envelope message. Seller, buyer and Core activate the agreed descriptor at genesis, 20:04 UTC. Before activation, registration is not permission to submit.

Use existing identities

The three parties use their existing identity keys to commit to an agreed envelope descriptor through the existing signed history—not three new certificates, credentials or extra signatures. Optional transaction-specific keys may be introduced later only with explicit delegation, scope and trust policy; they are not part of this specimen.

Scope and message binding

One invoice: INV-1042; USD 1250000 minor units; one execution attempt; one agreed payee and payment-method reference. The descriptor binds the envelope and transaction identifiers, invoice/version digest, participants and identity-key references, payee, currency/amount, method, attempt and idempotency scope, opening/activation conditions, exclusive submission deadline, authority references and monitoring policy.

envelopeDigest is the digest of the canonically encoded agreed descriptor. Every in-envelope message must bind this digest in its signed or authenticated context, including events, acknowledgments, execution intent, provider-evidence wrapper, accounting, seal and delivery. External provider payloads need not implement this field: the Core's evidence wrapper binds the original payload digest and envelope context. Retain the original source signatures over prehistory; bind their artifact digests when admitting them into the envelope.

Runtime executor gate—not a document-only expiry

The executor must re-evaluate permission immediately before actual provider dispatch, not merely when the invoice is admitted or a job enters a queue. It checks active three-party context, current mandate and intent, revocation status, payee/method/amount/attempt scope, provider authorization and durable execution/idempotency state. Admission at 20:05 does not reserve permission to submit later.

The actual submission instant must be strictly before the earliest applicable deadline: envelope submission limit, mandate expiry, intent expiry and any tighter applicable authorization constraint. The boundary is exclusive: at 2026-10-21T20:07:00Z, a fresh submission is forbidden even if it was queued earlier. Scope and revocation checks may deny earlier. A runtime implementation must address the check-to-dispatch race and persist the attempt/dispatch decision; this documentation and static fixture do not enforce that gate.

Expiry is permission-to-submit only. Revoked or expired authority does not imply “not submitted.” An operation may already have crossed the provider boundary. Unknown or ambiguous outcomes must be reconciled against durable attempt records and authentic provider evidence before any retry is considered. This one-attempt scope grants no second attempt; any later permitted retry requires explicit authority and safe idempotency handling, never an inferred failure.

Transaction Envelope — bounded submission, durable history Proposed schema 0.2 final happy-path fixture, 21 October 2026 UTC. Read each row left to right, then the next row. Registration opens at 20:01, three-party genesis activates at 20:04, admission at 20:05 and submission at 20:06 precede the exclusive 20:07 deadline. Observation continues after expiry; settlement at 20:09, accounting at 20:10, seal at 20:11 and delivery at 20:12 remain allowed. Monitoring escalation at 21:00 is not authority to pay or proof of failure. DECENTRA CORE / PROPOSED EXECUTION CONTEXT Transaction Envelope → permanent Transaction Dossier 2026-10-21 · UTC · not to scale · read rows left to right, then down 01 / Open · 20:0102 / Genesis · 20:0403 / Authorise + admit · 20:05 04 / Submit · 20:0605 / Exclusive boundary · 20:0706 / Monitor + reconcile 07 / Settlement · 20:0908 / Accounting · 20:1009 / Seal → deliver First Core registration; scope fixed.Seller invoice source: 20:00.Opening alone gives no payment authority. Seller + buyer + Core activate descriptor.Existing identity keys; envelopeDigest.No three new certificates or credentials. Real mandate + provider auth required.One invoice, payee, method, attempt.Admission does not reserve submission. Executor rechecks at actual dispatch.Before every applicable deadline;active authority + durable attempt state. At 20:07, no new submission.Earliest envelope / mandate / intent limit.Expiry ≠ cancellation or “not submitted”. Observation survives submission expiry.Unknown outcome → reconcile first.No blind retry, no inferred failure. Record observed provider evidence.Post-expiry settlement remains allowed.Synthetic evidence; no Payroc calls. Apply and record accounting evidence.Preserve independent clocks + trust.All in-envelope messages bind digest. Seal 20:11; delivery 20:12.Dossier remains independently verifiable.Historical signatures ≠ new authority. 21:00 monitoring escalation: investigate unresolved outcomes; never permission to pay or proof of failure. Scope: INV-1042 · USD 1250000 minor units · one attempt · agreed payee + method · no protocol-enforcement claim. Final specimen: 41 signatures · 9 events · 3 prehistory records · 2 delivery receipts. Extensions: policy only.
Transaction Envelope timeline · all times UTC on 2026-10-21 · rows read left to right, then down · not to scale. Keyboard-focus the diagram to scroll; the complete ordered text equivalent follows.
Download Transaction Envelope timeline (SVG)

Proposed Payroc flow / accessible text equivalent

Provider-facing steps below are conceptual integration boundaries, not claims about Payroc endpoints, capabilities, webhook timing or authorization semantics. All times are illustrative UTC on 2026-10-21.

  1. 20:00 — Seller source, before opening. The seller issues the invoice source. Keep its original signature and provenance in prehistory; invoice issuance does not open a Core execution window.
  2. 20:01 — First Core registration opens the proposed envelope. Fix the single-invoice scope and descriptor, identify existing parties/keys and reference the source invoice. Opening alone cannot authorize a payment.
  3. 20:04 — Three-party genesis activates the context. Seller, buyer and Core commit to the same descriptor through existing signed genesis/history commitments. All subsequent in-envelope messages bind envelopeDigest.
  4. 20:05 — Authorise and admit. Validate the invoice and real buyer mandate, agreed payee/method, provider authorization and execution intent. Admit the bounded attempt; do not mistake admission or an invoice signature for payment authority.
  5. 20:06 — Runtime-gated submission. Immediately before a proposed provider dispatch, recheck live permissions and the earliest exclusive deadline, then persist and bind the single attempt and idempotency context. The specimen contains synthetic submission evidence, not an actual Payroc call.
  6. 20:07 — Exclusive submission deadline. No new submission at or after this instant. Do not infer that an expired/revoked operation was never submitted; reconcile uncertain outcomes before considering any separately authorized retry.
  7. After 20:07 — Continue monitoring and reconciliation. Accept authentic observations of the existing attempt under the appropriate observation permissions. The expired submission window does not block evidence collection or mean the payment failed.
  8. 20:09 — Settlement observation. Record settlement evidence for the already-submitted attempt, preserving provider-origin provenance separately from the Core's receipt time and assertion. The local example evidence is invented, not provider confirmation.
  9. 20:10 — Accounting. Record the accounting result and its evidence, linked to the same envelope, attempt and agreed history. Submission expiry does not prevent this step.
  10. 20:11 — Seal; 20:12 — Deliver. Seal the settled/accounted Dossier and record the two delivery receipts. The permanent evidence remains verifiable after the Envelope submission window has ended.
  11. 21:00 — Monitoring escalation deadline. Escalate any unresolved monitoring case for investigation. In this settled final specimen, this is a configured policy deadline, not an extra event or proof of failure. It never authorizes a payment, retry, refund or reversal.

Expiry, extension and historical trust

Explicit unanimous amendment; no sliding renewal
Any extension must be an explicit seller + buyer + Core amendment, bound to the prior envelope digest and agreed history head, with its own effective time, replacement descriptor digest and new bounds. No message receipt, polling, heartbeat, settlement delay or monitoring deadline silently renews the submission window. An extension cannot retroactively legalize a past late submission, override a revoked mandate, extend provider authority or create a fresh attempt. Revalidate all independent authorities before any later submission. This is specification only: no extension record or additional signature is added to the happy-path fixture.
Signatures preserve history, not future authority
Historical signatures are evaluated under the identity, delegation and validity policy applicable at signing time, with trustworthy time/provenance evidence and relevant revocation or compromise facts. Later expiry does not automatically invalidate the historical record; a mathematically valid historical signature does not grant new execution authority now. This does not promise unconditional validity after compromise or prove trusted time by itself.
Independent clocks and independent trust
Core decision time, participant signing time, provider event time, receipt time, settlement time and monitoring clocks are distinct claims. Do not use a sender timestamp as proof of executor eligibility or conflate provider settlement evidence with three-party agreement. Runtime clock quality, skew policy, authorization trust anchors and authenticated evidence need explicit governance; on uncertain gate eligibility, withhold a new submission and reconcile.

Fixture invariants and implementation boundary

The schema 0.2 final happy-path fixture preserves 41 signatures, 9 events, 3 prehistory records and 2 delivery receipts. Opening, the deadline boundary and monitoring escalation explain the policy; they are not extra history events. Reuse existing identity material and signature slots; add no credentials or signatures. The diagram and this section document the final-state specimen, not a running state machine, live expiry watcher, extension implementation, payment protocol or consensus system.

Data contract / proposed envelope-aware JSON profile v0.2.0

The sealed Transaction Dossier, as JSON.

One invoice, one admitted payment attempt, retained capture and settlement evidence, confirmed seller accounting and a final seal accepted by all three parties. This is a complete final-state snapshot—not just the last receipt or a list of hashes.

Synthetic specimen, real local signatures. All companies, identity/authority evidence, invoice facts, provider statuses, receipts, accounting and settlement here are invented fixture data. Ed25519 signatures and digests were genuinely generated and verified locally. No Payroc, KYA, approval or ERP API was called; no funds moved. The included demo public keys are not production trust anchors.
Download complete dossier JSON ↗Download JSON Schema ↗Download offline fixture verifier ↗
Complete dossier: retained evidence, canonical history and explicitly derived views
JSON fieldMeaning and authority
contextBound identity & protocol context
Dossier/transaction IDs, schema/profile, three participants, assumed KYA references, public verification keys and canonicalization/signature rules. Its digest is bound into every event and the final manifest.

Envelope: immutable context.envelope binds invoice/version digest, parties, payee, amount, currency, method, opening, exclusive submission deadline and monitoring escalation. Genesis activates it through three-party acceptance; later state is derived from history, not a mutable descriptor flag.

artifactsRetained originals
Typed invoice, authority fixture, authenticity attestation, pay intent, admission, submission, receipt, capture, settlement, accounting and final manifest. Every artifact has a payload content digest and a whole-envelope artifact digest. Signatures bind the envelope—including type, media type and provenance—not just a mutable URL.
sourceRecordsSigned prehistory
Seller invoice issuance, Core registration and Core authenticity. Each signs its exact artifact-envelope digests. Genesis binds both source IDs and signed-record digests before all three accept the shared initial head.
committedEventsCanonical append-only history
Each ordered record has a candidate body, actor signature, candidate digest, three separate acceptances and committed-record digest. This profile retains all nine lifecycle transitions.
observedUncommittedEventsPending observations
Empty in this final happy-path profile. It is not a claim that incoming facts were always instantly agreed; pending observation content needs its own later working-state schema.
derivedStateRebuildable projection
SEALED_SETTLED / SETTLED / APPLIED / sealed=true. Recompute from committed history; do not treat this convenient summary as independent authority.
agreedHeadRebuildable head pointer
Sequence, event ID and digest of the latest fully accepted committed record. Verify against the actual last record.
finalSealFinal seal locator
Identifies the manifest artifact, accepted seal event and sealed-record digest. The seal binds prior history; it cannot recursively hash itself.
distributionSigned delivery sidecars
Buyer and seller each acknowledge receiving the same sealed-record digest. These post-seal receipts are signed attachments, not hidden edits to sealed history or additional three-party business-state transitions.

The complete final-state payload

This is the actual complete downloadable dossier, not a state projection. Scroll inside the JSON to inspect its context and Envelope, original evidence, signed prehistory, every committed step, final manifest/seal and delivery acknowledgments. The compact derived summary is available separately below.

Complete final payload: all nine top-level fields, 11 retained artifacts, three signed source records, nine committed events with actor signatures and three-party acceptance bundles, plus both signed delivery receipts. No fields or signature values are abbreviated.

All records, original payloads, public keys, signatures, acknowledgments and the final manifest are included. There are no signature placeholders. No private keys or payment credentials are included.

{
  "context": {
    "schemaVersion": "0.2.0",
    "documentType": "decentra.transaction-dossier",
    "dossierId": "urn:example:dossier:INV-1042",
    "transactionId": "urn:example:transaction:INV-1042",
    "profile": "single-invoice-single-attempt-three-of-three-envelope-settled-v0.2",
    "exampleOnly": true,
    "exampleNotice": "SYNTHETIC LOCAL FIXTURE. Real local signatures over invented business/provider evidence. No actual payment, KYA or settlement.",
    "cryptographicProfile": {
      "canonicalization": "RFC8785-RESTRICTED-SAFE-INTEGER-v0.1",
      "digestAlgorithm": "SHA-256",
      "signatureAlgorithm": "Ed25519",
      "signatureEncoding": "base64url-unpadded",
      "digestEncoding": "lowercase-hex",
      "signatureDomains": {
        "source": "DECENTRA/SOURCE/v0.2\n",
        "event": "DECENTRA/EVENT/v0.2\n",
        "accept": "DECENTRA/ACCEPT/v0.2\n",
        "delivery": "DECENTRA/DELIVERY/v0.2\n"
      }
    },
    "participants": {
      "seller": {
        "principalId": "urn:example:principal:seller",
        "organizationId": "urn:example:organization:seller",
        "agentId": "urn:example:agent:seller",
        "role": "seller",
        "registrationReference": "urn:example:assumed-kya:seller"
      },
      "buyer": {
        "principalId": "urn:example:principal:buyer",
        "organizationId": "urn:example:organization:buyer",
        "agentId": "urn:example:agent:buyer",
        "role": "buyer",
        "registrationReference": "urn:example:assumed-kya:buyer"
      },
      "core": {
        "principalId": "urn:example:principal:core",
        "organizationId": "urn:example:organization:core",
        "agentId": "urn:example:agent:core",
        "role": "core",
        "registrationReference": "urn:example:assumed-kya:core"
      }
    },
    "verificationMaterial": {
      "trustMode": "LOCAL_DEMO_KEYS_NOT_PRODUCTION_TRUST_ANCHORS",
      "keys": [
        {
          "keyId": "urn:example:key:seller",
          "principalId": "urn:example:principal:seller",
          "algorithm": "Ed25519",
          "publicKeyFormat": "DER-SPKI-base64url",
          "publicKey": "MCowBQYDK2VwAyEAm5_XUXRYCoO6nkU6017VD_tKGFt72DcF4xMItKEOAs0"
        },
        {
          "keyId": "urn:example:key:buyer",
          "principalId": "urn:example:principal:buyer",
          "algorithm": "Ed25519",
          "publicKeyFormat": "DER-SPKI-base64url",
          "publicKey": "MCowBQYDK2VwAyEAKK_ceKZR83LZ7P8MBiJpSkK4volRs29KtE1RIr1tMwA"
        },
        {
          "keyId": "urn:example:key:core",
          "principalId": "urn:example:principal:core",
          "algorithm": "Ed25519",
          "publicKeyFormat": "DER-SPKI-base64url",
          "publicKey": "MCowBQYDK2VwAyEAxvSCPdLpOnpj2armuRuVS59eSLXAVeqikCIFqp-ilXI"
        }
      ]
    },
    "assumptions": {
      "agentsAlreadyRegistered": true,
      "buyerPaymentAuthorityFixture": true,
      "schemaAndKeyGovernancePending": true,
      "consensusImplementationNotClaimed": true
    },
    "envelope": {
      "envelopeVersion": "0.2.0",
      "envelopeId": "urn:example:envelope:INV-1042:1",
      "transactionId": "urn:example:transaction:INV-1042",
      "openedAt": "2026-10-21T20:01:00Z",
      "submissionDeadlineExclusive": "2026-10-21T20:07:00Z",
      "monitoringEscalationAt": "2026-10-21T21:00:00Z",
      "activationRule": "THREE_PARTY_GENESIS_ACCEPTANCE",
      "identityBinding": "EXISTING_KEYS_PLUS_THREE_PARTY_AGREED_DESCRIPTOR",
      "participantKeyIds": {
        "seller": "urn:example:key:seller",
        "buyer": "urn:example:key:buyer",
        "core": "urn:example:key:core"
      },
      "expiryMeaning": "NO_NEW_SUBMISSION_CONTINUE_OBSERVATION_AND_COMPLETION",
      "renewalRule": "EXPLICIT_THREE_PARTY_AMENDMENT_NO_SLIDING_RENEWAL",
      "scope": {
        "invoiceArtifactId": "invoice",
        "invoiceContentDigest": "52a50838e4e76050973926a7082ae6dc5b6399d688fa8bd7984d5377e0d3de70",
        "buyerPrincipalId": "urn:example:principal:buyer",
        "sellerPrincipalId": "urn:example:principal:seller",
        "payeeReference": "urn:example:payee:seller",
        "maximumAmountMinor": "1250000",
        "currency": "USD",
        "methodReference": "urn:example:provider-method:buyer-approved",
        "maximumAttempts": 1,
        "authorityArtifactId": "buyer-authority",
        "attemptId": "urn:example:attempt:1",
        "providerIdempotencyReference": "urn:example:idempotency:attempt-1",
        "permittedOperation": "SUBMIT_APPROVED_PAYMENT"
      }
    }
  },
  "artifacts": [
    {
      "artifactId": "invoice",
      "artifactType": "invoice",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "seller",
        "externalApiCalled": false
      },
      "content": {
        "invoiceId": "INV-1042",
        "version": "1",
        "sellerPrincipalId": "urn:example:principal:seller",
        "buyerPrincipalId": "urn:example:principal:buyer",
        "issuedAt": "2026-10-21T20:00:00Z",
        "dueAt": "2026-11-20T20:00:00Z",
        "currency": "USD",
        "amountMinor": "1250000",
        "lineItems": [
          {
            "lineId": "1",
            "description": "Illustrative service delivery",
            "quantity": "1",
            "unitAmountMinor": "1250000",
            "lineAmountMinor": "1250000"
          }
        ],
        "payeeReference": "urn:example:payee:seller"
      },
      "contentDigest": "52a50838e4e76050973926a7082ae6dc5b6399d688fa8bd7984d5377e0d3de70",
      "artifactDigest": "c35596f646fa191d66d375f030af12d3de1afeba854559cb917c36a883a0563f"
    },
    {
      "artifactId": "buyer-authority",
      "artifactType": "buyer_authority",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "buyer-authority-fixture",
        "externalApiCalled": false
      },
      "content": {
        "authorityReference": "urn:example:authority:invoice-specific",
        "buyerPrincipalId": "urn:example:principal:buyer",
        "invoiceArtifactId": "invoice",
        "allowedPayeeReference": "urn:example:payee:seller",
        "maximumAmountMinor": "1250000",
        "currency": "USD",
        "methodReference": "urn:example:provider-method:buyer-approved",
        "validFrom": "2026-10-21T20:00:00Z",
        "expiresAt": "2026-10-21T22:00:00Z",
        "authoritySource": "FIXTURE_ASSUMPTION_NOT_REAL_APPROVAL"
      },
      "contentDigest": "e31368f7437f458859aac659a7d4e41a24c5fa6a911adc0d786adb593cd56251",
      "artifactDigest": "da9067a9daa092528a3154d852f227923b0da2a13c660a0ad7034314b0e7e462"
    },
    {
      "artifactId": "authenticity-attestation",
      "artifactType": "invoice_authenticity",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "core",
        "externalApiCalled": false
      },
      "content": {
        "invoiceArtifactId": "invoice",
        "invoiceContentDigest": "52a50838e4e76050973926a7082ae6dc5b6399d688fa8bd7984d5377e0d3de70",
        "invoiceVersion": "1",
        "registrationReference": "urn:example:invoice-registration:INV-1042:1",
        "checks": {
          "issuerRecognized": true,
          "sellerSignatureValid": true,
          "matchesRegisteredVersion": true,
          "notSupersededAtCheck": true
        },
        "checkedAt": "2026-10-21T20:03:00Z",
        "meaning": "Matches the registered seller-issued version; not commercial debt acceptance or permission to pay."
      },
      "contentDigest": "1717fd6205f251b667fd3fbda32d987af877e7087354815a5e67d33cdf7e22c0",
      "artifactDigest": "dca2a9bb655e782274f2225b8753ee70a6f16b906d876e77ab46e27652072f61"
    },
    {
      "artifactId": "pay-intent",
      "artifactType": "payment_intent",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "buyer",
        "externalApiCalled": false
      },
      "content": {
        "instruction": "PAY_INVOICE",
        "invoiceArtifactId": "invoice",
        "invoiceContentDigest": "52a50838e4e76050973926a7082ae6dc5b6399d688fa8bd7984d5377e0d3de70",
        "authenticityArtifactId": "authenticity-attestation",
        "payeeReference": "urn:example:payee:seller",
        "amountMinor": "1250000",
        "currency": "USD",
        "methodReference": "urn:example:provider-method:buyer-approved",
        "authorityArtifactId": "buyer-authority",
        "expiresAt": "2026-10-21T22:00:00Z",
        "nonce": "urn:example:nonce:one-payment-intent",
        "allowPartial": false,
        "allowAdditionalCollection": false
      },
      "contentDigest": "5997894de8169da5130ea3b9d0a484f42e762fe44873fc010ac8269d527fdce6",
      "artifactDigest": "0fa2fd17cf96752530953cc01b637fd370d0001c10df826c946a22c0133f172f"
    },
    {
      "artifactId": "payment-admission",
      "artifactType": "payment_admission",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "core",
        "externalApiCalled": false
      },
      "content": {
        "payIntentArtifactId": "pay-intent",
        "decision": "PERMIT",
        "policyVersion": "example-policy-v1",
        "checkedAt": "2026-10-21T20:05:00Z",
        "checks": {
          "buyerSignature": true,
          "currentAuthority": true,
          "amountAndMethod": true,
          "obligationNotAlreadyPaid": true
        },
        "attemptId": "urn:example:attempt:1",
        "providerIdempotencyReference": "urn:example:idempotency:attempt-1",
        "meaning": "Local fixture effect-admission decision; not proof of movement of funds."
      },
      "contentDigest": "3065566552bd4734ff20a1f6a8f0bae5bcd781eb29edfa8b4f44f5251c4128e4",
      "artifactDigest": "f8e8f6b3054c5386268fba29886e7cf791e86789858958e15342f127ff78bac5"
    },
    {
      "artifactId": "provider-receipt",
      "artifactType": "provider_receipt",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "provider-fixture",
        "externalApiCalled": false
      },
      "content": {
        "provider": "Payroc",
        "providerPaymentReference": "FIXTURE-PAYMENT-1042",
        "attemptId": "urn:example:attempt:1",
        "normalizedStatus": "SUBMITTED",
        "providerNativeStatus": "FIXTURE_ACCEPTED_NOT_A_REAL_PAYROC_ENUM",
        "amountMinor": "1250000",
        "currency": "USD",
        "observedAt": "2026-10-21T20:07:00Z",
        "rawEvidence": {
          "fixture": true,
          "message": "Invented illustrative acceptance receipt; not a Payroc API response."
        }
      },
      "contentDigest": "3fe764a31b7ef25207488db1c57d80a59bfbdf6bf0f51c805326b403ff0ce228",
      "artifactDigest": "b41e8b0f2a612299bfdf4d9f86b011b17d3c85cb3cef8716c3beca0a0c8a6d5c"
    },
    {
      "artifactId": "capture-evidence",
      "artifactType": "provider_capture",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "provider-fixture",
        "externalApiCalled": false
      },
      "content": {
        "providerPaymentReference": "FIXTURE-PAYMENT-1042",
        "normalizedStatus": "CAPTURED",
        "providerNativeStatus": "FIXTURE_CAPTURE_CONFIRMED",
        "amountMinor": "1250000",
        "currency": "USD",
        "observedAt": "2026-10-21T20:08:00Z",
        "rawEvidence": {
          "fixture": true,
          "message": "Invented capture milestone; not settlement."
        }
      },
      "contentDigest": "90abf8d6f217d0af41ee01ebb05acff37a235413d7e0db8c5781c4415c7bba17",
      "artifactDigest": "2cb4fba3e4d300521a783fd2431eb0c30adbbcc99cb1d3991332621325c0689d"
    },
    {
      "artifactId": "settlement-evidence",
      "artifactType": "provider_settlement",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "provider-fixture",
        "externalApiCalled": false
      },
      "content": {
        "providerPaymentReference": "FIXTURE-PAYMENT-1042",
        "normalizedStatus": "SETTLED",
        "providerNativeStatus": "FIXTURE_SETTLEMENT_CONFIRMED",
        "amountMinor": "1250000",
        "currency": "USD",
        "settledAt": "2026-10-21T20:09:00Z",
        "settlementReference": "FIXTURE-SETTLEMENT-1042",
        "settlementDefinition": "Illustrative provider-confirmed settlement for this selected contract; actual contractual definition must be qualified.",
        "rawEvidence": {
          "fixture": true,
          "message": "Invented settlement fact. No funds moved."
        }
      },
      "contentDigest": "a15c1d07a8ff046266421261a84e5351060a8cdcab5678a153d829eba2afa0d9",
      "artifactDigest": "dde18bac377f7669de80434483bc1a2e14c10020823ddf1365c6e2ca7dda6231"
    },
    {
      "artifactId": "accounting-readback",
      "artifactType": "accounting_application",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "accounting-fixture",
        "externalApiCalled": false
      },
      "content": {
        "invoiceArtifactId": "invoice",
        "providerPaymentReference": "FIXTURE-PAYMENT-1042",
        "writerId": "urn:example:accounting-writer:seller",
        "applicationReference": "FIXTURE-AR-APPLICATION-1042",
        "appliedAmountMinor": "1250000",
        "remainingBalanceMinor": "0",
        "currency": "USD",
        "readBackAt": "2026-10-21T20:10:00Z",
        "readBackConfirmed": true,
        "source": "LOCAL_FIXTURE_NOT_AN_ERP_RESPONSE"
      },
      "contentDigest": "cf2930471c92fea4a217f267a079497025a8666c743149c938309770481c2181",
      "artifactDigest": "e03275dc3099160e05c8d1f895fd24211e7eb9fd7f59b13a21800aee57ae2e8a"
    },
    {
      "artifactId": "submission-evidence",
      "artifactType": "payment_submission",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "core-adapter-fixture",
        "externalApiCalled": false
      },
      "content": {
        "attemptId": "urn:example:attempt:1",
        "admissionArtifactId": "payment-admission",
        "admissionCommittedRecordDigest": "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "provider": "Payroc",
        "providerContract": "UNQUALIFIED_ILLUSTRATIVE_CONTRACT",
        "providerPaymentReference": "FIXTURE-PAYMENT-1042",
        "submittedAt": "2026-10-21T20:06:00Z",
        "transportEvidence": "LOCAL_FIXTURE_NO_HTTP_REQUEST",
        "executionGateEvidence": "SYNTHETIC_ASSERTION_NOT_RUNTIME_ENFORCEMENT_PROOF"
      },
      "contentDigest": "84159147a41bb85a9067766550b575a11618b25a0bb3fcd78d7d85ae40e1bba3",
      "artifactDigest": "cdc9ea1833a8c6b60a4b5f06946e6958927d3959941d0e1671a617aca2069892"
    },
    {
      "artifactId": "final-manifest",
      "artifactType": "final_manifest",
      "mediaType": "application/json",
      "provenance": {
        "classification": "SYNTHETIC_LOCAL_FIXTURE",
        "assertedSource": "core",
        "externalApiCalled": false
      },
      "content": {
        "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
        "transactionId": "urn:example:transaction:INV-1042",
        "priorAgreedHeadDigest": "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287",
        "priorCommittedRecordDigests": [
          "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
          "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04",
          "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd",
          "b8b9744abfc32fb127a8767cc5cbdf621ee6586c5b04a7a610b4266beaace8e6",
          "40f16829e43fdda73d9170238a690ca413f157ee9ebd6e335dbb50826e84b1ed",
          "3fdd1704ff1e3ab6557a24021923333b0be3b045076f03d6e536a979526974de",
          "c68a1dff3076a5715e8e39f9a15a6962e035917786a66c8bb2e66790021a61c5",
          "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287"
        ],
        "sourceRecordDigests": [
          "3b1158b1236c721c5fdfe61bd9b73ad14acc4a7871ec1c73086152ccd471ab6b",
          "b6d16c5e16f1c09a599a66b42c1818b1129ea8a1739e352865b3d8d9df652a06",
          "115758deee6a74872f37721d18bffee993cfd13b16b87ef349f28f5edb748e7b"
        ],
        "artifactDigests": {
          "invoice": "c35596f646fa191d66d375f030af12d3de1afeba854559cb917c36a883a0563f",
          "buyer-authority": "da9067a9daa092528a3154d852f227923b0da2a13c660a0ad7034314b0e7e462",
          "authenticity-attestation": "dca2a9bb655e782274f2225b8753ee70a6f16b906d876e77ab46e27652072f61",
          "pay-intent": "0fa2fd17cf96752530953cc01b637fd370d0001c10df826c946a22c0133f172f",
          "payment-admission": "f8e8f6b3054c5386268fba29886e7cf791e86789858958e15342f127ff78bac5",
          "provider-receipt": "b41e8b0f2a612299bfdf4d9f86b011b17d3c85cb3cef8716c3beca0a0c8a6d5c",
          "capture-evidence": "2cb4fba3e4d300521a783fd2431eb0c30adbbcc99cb1d3991332621325c0689d",
          "settlement-evidence": "dde18bac377f7669de80434483bc1a2e14c10020823ddf1365c6e2ca7dda6231",
          "accounting-readback": "e03275dc3099160e05c8d1f895fd24211e7eb9fd7f59b13a21800aee57ae2e8a",
          "submission-evidence": "cdc9ea1833a8c6b60a4b5f06946e6958927d3959941d0e1671a617aca2069892"
        },
        "settlementArtifactId": "settlement-evidence",
        "accountingArtifactId": "accounting-readback",
        "sealScope": "All prior agreed history and retained evidence; this manifest excludes itself and the future seal."
      },
      "contentDigest": "5e0fbd9847514ef108db67bd28e3a76f8fd4c25163a4e304a19cc155d04da70e",
      "artifactDigest": "6a6d2af7b873e1a9a6830dc32c1b4367b0fcb89dfcd6c1428882896f4d9d6fdc"
    }
  ],
  "sourceRecords": [
    {
      "body": {
        "sourceRecordId": "source-seller-invoice",
        "transactionId": "urn:example:transaction:INV-1042",
        "recordType": "INVOICE_ISSUED",
        "recordedAt": "2026-10-21T20:00:00Z",
        "envelopeDigest": null,
        "artifactRefs": [
          "invoice"
        ],
        "artifactDigests": {
          "invoice": "c35596f646fa191d66d375f030af12d3de1afeba854559cb917c36a883a0563f"
        }
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:seller",
        "signerPrincipalId": "urn:example:principal:seller",
        "domain": "DECENTRA/SOURCE/v0.2\n",
        "value": "1AfMlOurQvCGhYP-XlKyPGO0ou9VMYtLQdS-Y1aFvl2VKsCnNVsyTy0o1uDLInxdJ9iOKfUr-5YA3B9r1RcCDw"
      },
      "recordDigest": "3b1158b1236c721c5fdfe61bd9b73ad14acc4a7871ec1c73086152ccd471ab6b"
    },
    {
      "body": {
        "sourceRecordId": "source-core-registration",
        "transactionId": "urn:example:transaction:INV-1042",
        "recordType": "INVOICE_REGISTERED",
        "recordedAt": "2026-10-21T20:01:00Z",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "artifactRefs": [
          "invoice"
        ],
        "artifactDigests": {
          "invoice": "c35596f646fa191d66d375f030af12d3de1afeba854559cb917c36a883a0563f"
        }
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:core",
        "signerPrincipalId": "urn:example:principal:core",
        "domain": "DECENTRA/SOURCE/v0.2\n",
        "value": "zSgj7mzMgeXWKXH7fDeQaaLJr6CGkV_KlTMiq6v9qKkeaeoGiS2VZ5BWTIXL7JMuin4Qh3lAW_HglCpVmCxCAw"
      },
      "recordDigest": "b6d16c5e16f1c09a599a66b42c1818b1129ea8a1739e352865b3d8d9df652a06"
    },
    {
      "body": {
        "sourceRecordId": "source-core-authenticity",
        "transactionId": "urn:example:transaction:INV-1042",
        "recordType": "INVOICE_AUTHENTICITY_ATTESTED",
        "recordedAt": "2026-10-21T20:03:00Z",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "artifactRefs": [
          "invoice",
          "authenticity-attestation"
        ],
        "artifactDigests": {
          "invoice": "c35596f646fa191d66d375f030af12d3de1afeba854559cb917c36a883a0563f",
          "authenticity-attestation": "dca2a9bb655e782274f2225b8753ee70a6f16b906d876e77ab46e27652072f61"
        }
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:core",
        "signerPrincipalId": "urn:example:principal:core",
        "domain": "DECENTRA/SOURCE/v0.2\n",
        "value": "PW1qw5JEXwO6gol0f8X21Wu3cdEHSyPOEHSqhxW4k8jVRnXh4ZKR9WA7bOHjXYZEj9fdu_Yqg2MChMeKtE8SAw"
      },
      "recordDigest": "115758deee6a74872f37721d18bffee993cfd13b16b87ef349f28f5edb748e7b"
    }
  ],
  "committedEvents": [
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:1",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 1,
          "eventType": "GENESIS_ACCEPTED",
          "recordedAt": "2026-10-21T20:04:00Z",
          "previousCommittedRecordDigest": null,
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "invoice",
            "buyer-authority",
            "authenticity-attestation"
          ],
          "artifactDigests": {
            "invoice": "c35596f646fa191d66d375f030af12d3de1afeba854559cb917c36a883a0563f",
            "buyer-authority": "da9067a9daa092528a3154d852f227923b0da2a13c660a0ad7034314b0e7e462",
            "authenticity-attestation": "dca2a9bb655e782274f2225b8753ee70a6f16b906d876e77ab46e27652072f61"
          },
          "sourceRecordRefs": [
            "source-seller-invoice",
            "source-core-registration",
            "source-core-authenticity"
          ],
          "sourceRecordDigests": {
            "source-seller-invoice": "3b1158b1236c721c5fdfe61bd9b73ad14acc4a7871ec1c73086152ccd471ab6b",
            "source-core-registration": "b6d16c5e16f1c09a599a66b42c1818b1129ea8a1739e352865b3d8d9df652a06",
            "source-core-authenticity": "115758deee6a74872f37721d18bffee993cfd13b16b87ef349f28f5edb748e7b"
          },
          "proposedState": {
            "phase": "INVOICE_AUTHENTICATED",
            "paymentStatus": "NOT_SUBMITTED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "IQQGDuI7k-H5DP-n58P7uxpTB475-Pez_pfPNRYj4t6FqaWL0_gwlFc3teJt4fj-bNFdLdWFGALP-RivHOBdAQ"
        }
      },
      "candidateDigest": "960eab2229058962fb444f0c10b20d6feffbc446042067d5bdf0865ea12508fe",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:04:00Z",
            "sequence": 1,
            "previousCommittedRecordDigest": null,
            "candidateDigest": "960eab2229058962fb444f0c10b20d6feffbc446042067d5bdf0865ea12508fe",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "zRuAzZbpOhD5r9gYDwepOBah6ktSe_8N2RqRZ0ugTPr8r7xZTV3roMt4mI6JAiixEuEc2yl2b4CRwQ_R7i3LDQ"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:04:00Z",
            "sequence": 1,
            "previousCommittedRecordDigest": null,
            "candidateDigest": "960eab2229058962fb444f0c10b20d6feffbc446042067d5bdf0865ea12508fe",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "1kwSlwzmQhpfJMASjbbirBkXw7nZf5idD3Llbv5bQdbv1zNNS9Ih4gGWu3GRVEN4A2Ix5pvxFXW8D2magQ7MAQ"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:04:00Z",
            "sequence": 1,
            "previousCommittedRecordDigest": null,
            "candidateDigest": "960eab2229058962fb444f0c10b20d6feffbc446042067d5bdf0865ea12508fe",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "7sZnkzzgdY5pLB246qWryNsUExzoLK02GrICMAgfkCxwjjiqtfCnZJb_xMX4ctA06_ivsmpkNINl1Sd_fKbIDA"
          }
        }
      },
      "recordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:2",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 2,
          "eventType": "PAYMENT_INTENT_ACCEPTED",
          "recordedAt": "2026-10-21T20:05:00Z",
          "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "pay-intent",
            "buyer-authority"
          ],
          "artifactDigests": {
            "pay-intent": "0fa2fd17cf96752530953cc01b637fd370d0001c10df826c946a22c0133f172f",
            "buyer-authority": "da9067a9daa092528a3154d852f227923b0da2a13c660a0ad7034314b0e7e462"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "PAYMENT_AUTHORIZED",
            "paymentStatus": "NOT_SUBMITTED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:buyer",
          "signerPrincipalId": "urn:example:principal:buyer",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "hsWtf4KxgHPQOpvZ_Fm1McNFuk9yebNrz0Ls776o1HUp0WVohVG0IVxdf9rS1ArA3onj9N-2CkGmp7RVtaTZCQ"
        }
      },
      "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:05:00Z",
            "sequence": 2,
            "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
            "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "JmP7qruJkBehYC3C42l9FFtdUtadRNHKGQOYJ1R4wFeIVc8orfHMR15nst5rjz8CvEi14Iq77CvSzpGR6kPqCA"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:05:00Z",
            "sequence": 2,
            "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
            "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "pFyozCLN7QGXbe_AaXQvYsYAhPXSqBnEBKwTxUChA0nmiwuDBfFPnnPIrqF5JQoOBakqkrWLNAYDLxLGaircBg"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:05:00Z",
            "sequence": 2,
            "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
            "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "B9ANMA-igRX1_K5hzc9mclYHEdPXfTic4K0tUUPuISv7s3lrQFt-n9V8fl576-Fiu4mRYDUY0Etki0u-a49gDg"
          }
        }
      },
      "recordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:3",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 3,
          "eventType": "PAYMENT_ADMISSION_ACCEPTED",
          "recordedAt": "2026-10-21T20:05:00Z",
          "previousCommittedRecordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "payment-admission"
          ],
          "artifactDigests": {
            "payment-admission": "f8e8f6b3054c5386268fba29886e7cf791e86789858958e15342f127ff78bac5"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "PAYMENT_ADMITTED",
            "paymentStatus": "NOT_SUBMITTED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "lgvDWmFKiQtl4EK3sgQoZ4zEODIqIj0N3-6IipmoOwbAXJF21kgqbg-GDC4IFhSALxiPO7XoCh9axZMnhFC8DA"
        }
      },
      "candidateDigest": "6e6544576649fd17a09e4d2dd051c281b77b49adbb15699bd2d9f5e04fcd6bdc",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:05:00Z",
            "sequence": 3,
            "previousCommittedRecordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04",
            "candidateDigest": "6e6544576649fd17a09e4d2dd051c281b77b49adbb15699bd2d9f5e04fcd6bdc",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "l_Wv4lH-V0_PwgeLuLZ3CSVpva77ZXStk99eColJWGXaOwFzOrq9iHOV5twXV3OEnsIrz2eRT4Pt196LFfZICw"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:05:00Z",
            "sequence": 3,
            "previousCommittedRecordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04",
            "candidateDigest": "6e6544576649fd17a09e4d2dd051c281b77b49adbb15699bd2d9f5e04fcd6bdc",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "j_0jApwRytZTgA9CNorupAZjzg5EJdO2Yv2YAkefmNAK0WTiYsKWUC_utPfPW1cxa97U7OlUM8P2IeOLme7ICg"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:05:00Z",
            "sequence": 3,
            "previousCommittedRecordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04",
            "candidateDigest": "6e6544576649fd17a09e4d2dd051c281b77b49adbb15699bd2d9f5e04fcd6bdc",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "h4mo7Ci3oG3oae6jeu_GecxQ0AY7y0kSGgFGC0C-5ZsbXq36x20DOj5AUd3s5VSe0uLB8gBPLDlbrpvtNbwtCw"
          }
        }
      },
      "recordDigest": "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:4",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 4,
          "eventType": "PAYMENT_SUBMISSION_RECORDED",
          "recordedAt": "2026-10-21T20:06:00Z",
          "previousCommittedRecordDigest": "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "submission-evidence"
          ],
          "artifactDigests": {
            "submission-evidence": "cdc9ea1833a8c6b60a4b5f06946e6958927d3959941d0e1671a617aca2069892"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "PAYMENT_SUBMITTED",
            "paymentStatus": "SUBMITTED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "URhGnfvOQU3ggXYT7bZ47r5dAkWRq4AfVXWUzuKnplmLdlNFSJhj_lQb7JeDkJwBR3BmAkZ_S2xUY4QHbD-2AA"
        }
      },
      "candidateDigest": "b1f1d78b8a67ed4111161feae3b69f5c4d5c3537893dafdc91190d531f5013ec",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:06:00Z",
            "sequence": 4,
            "previousCommittedRecordDigest": "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd",
            "candidateDigest": "b1f1d78b8a67ed4111161feae3b69f5c4d5c3537893dafdc91190d531f5013ec",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "BvLEcPZv4MUiw1WR7xCkkQ6GL3psW_rtopWEPkMbit7MH6mKp7c6HgCaDWP6aqLhYOZiuYHya_R4ohewxCnDCA"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:06:00Z",
            "sequence": 4,
            "previousCommittedRecordDigest": "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd",
            "candidateDigest": "b1f1d78b8a67ed4111161feae3b69f5c4d5c3537893dafdc91190d531f5013ec",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "8d9hV2StSjZ5TCPrgRp7Hk6am7SjeeDE33F3cUaAvrTO_0wpFa5zToKFAxKg8CF5ay6Mlmz66dK2vX_GAY92DA"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:06:00Z",
            "sequence": 4,
            "previousCommittedRecordDigest": "d78b558c4498d6accdf39e145197b3eb79d4fb9cb9a850cdc0d18bde371749fd",
            "candidateDigest": "b1f1d78b8a67ed4111161feae3b69f5c4d5c3537893dafdc91190d531f5013ec",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "a9GlnU4X9cIUb4GwaO1a9sgmI_-s8rsbxUlzmwAw00Q3Kbrdi7nYEvKWq44y7ZAGo0CeNeg10MDCOq3VYBxuBg"
          }
        }
      },
      "recordDigest": "b8b9744abfc32fb127a8767cc5cbdf621ee6586c5b04a7a610b4266beaace8e6"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:5",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 5,
          "eventType": "PROVIDER_RECEIPT_ACCEPTED",
          "recordedAt": "2026-10-21T20:07:00Z",
          "previousCommittedRecordDigest": "b8b9744abfc32fb127a8767cc5cbdf621ee6586c5b04a7a610b4266beaace8e6",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "provider-receipt"
          ],
          "artifactDigests": {
            "provider-receipt": "b41e8b0f2a612299bfdf4d9f86b011b17d3c85cb3cef8716c3beca0a0c8a6d5c"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "PAYMENT_PROCESSING",
            "paymentStatus": "SUBMITTED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "sHIOF_j2EESbRmc5cTxTB8h603q3N8YCx4Haq_RGRjvTYTcG8zzS_VPsWBm3WguzlUALkGks8DbYouAxjaQCBA"
        }
      },
      "candidateDigest": "b0c8c21eff9216376615bbfbcb4b9a721e1a17f22780a83c9461ebc214a8c8b3",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:07:00Z",
            "sequence": 5,
            "previousCommittedRecordDigest": "b8b9744abfc32fb127a8767cc5cbdf621ee6586c5b04a7a610b4266beaace8e6",
            "candidateDigest": "b0c8c21eff9216376615bbfbcb4b9a721e1a17f22780a83c9461ebc214a8c8b3",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "tfFKFmbMb-VoTr5JcL2Ybl8cNbNzVyYQ2lbLsv9IrIwPhUxVaHvGsidDUgbFHSDRO-wZ-Z8ovexGnOu_vGNBCg"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:07:00Z",
            "sequence": 5,
            "previousCommittedRecordDigest": "b8b9744abfc32fb127a8767cc5cbdf621ee6586c5b04a7a610b4266beaace8e6",
            "candidateDigest": "b0c8c21eff9216376615bbfbcb4b9a721e1a17f22780a83c9461ebc214a8c8b3",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "BHspA1udfDtjkQtRjLtVyVTSxVbljC8uNgfdwJqMUAONZZo9NppFbIdS9WvGJHEdCeQPWzIq9_eKB_tOR99cDw"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:07:00Z",
            "sequence": 5,
            "previousCommittedRecordDigest": "b8b9744abfc32fb127a8767cc5cbdf621ee6586c5b04a7a610b4266beaace8e6",
            "candidateDigest": "b0c8c21eff9216376615bbfbcb4b9a721e1a17f22780a83c9461ebc214a8c8b3",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "HcSrOwaA6mvlPUoRUkbUi1XnlgMyKrIbS5-cYYGr5qYVy7d1b4Tl9jbexsFvQYuhO6c0o_BlYsSHS6xaO95gBw"
          }
        }
      },
      "recordDigest": "40f16829e43fdda73d9170238a690ca413f157ee9ebd6e335dbb50826e84b1ed"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:6",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 6,
          "eventType": "CAPTURE_EVIDENCE_ACCEPTED",
          "recordedAt": "2026-10-21T20:08:00Z",
          "previousCommittedRecordDigest": "40f16829e43fdda73d9170238a690ca413f157ee9ebd6e335dbb50826e84b1ed",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "capture-evidence"
          ],
          "artifactDigests": {
            "capture-evidence": "2cb4fba3e4d300521a783fd2431eb0c30adbbcc99cb1d3991332621325c0689d"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "PAYMENT_CAPTURED",
            "paymentStatus": "CAPTURED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "oE9DDff-ZDLHvXlQ_x0h8CfjRryCIBrXjeUfnqBjuSVkkJ4YEKnDyeAVSk5LHnsXwvmFROxcOrqNa1g3d_UJCQ"
        }
      },
      "candidateDigest": "f894a28821c9412519b9724f63d415627bf344566efb9956ba6dbc3f29b74397",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:08:00Z",
            "sequence": 6,
            "previousCommittedRecordDigest": "40f16829e43fdda73d9170238a690ca413f157ee9ebd6e335dbb50826e84b1ed",
            "candidateDigest": "f894a28821c9412519b9724f63d415627bf344566efb9956ba6dbc3f29b74397",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "8576cGiw6noSDIJjlgafHdYCmWGDWyihQzVJQwMnVU2P_5ML7yKxQaiJ9_Zl1X2GGr-6rwguseXjDXK54KutDQ"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:08:00Z",
            "sequence": 6,
            "previousCommittedRecordDigest": "40f16829e43fdda73d9170238a690ca413f157ee9ebd6e335dbb50826e84b1ed",
            "candidateDigest": "f894a28821c9412519b9724f63d415627bf344566efb9956ba6dbc3f29b74397",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "TwCWbmUDqOr0NhfjGtRP18mxpZ9_337dBPddafqnucgT-G6ZWc5Pn5gXihPKOF5FAh6ReI8pP9s9QvMoqccTAw"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:08:00Z",
            "sequence": 6,
            "previousCommittedRecordDigest": "40f16829e43fdda73d9170238a690ca413f157ee9ebd6e335dbb50826e84b1ed",
            "candidateDigest": "f894a28821c9412519b9724f63d415627bf344566efb9956ba6dbc3f29b74397",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "dIT19n_9NbqE0g7nZeocuHSpuID0vdSHqJOHXlUUCNE1rYcx35IcpyjnsrgX4TkoBL8JruuyjyT3klPnOY9XBw"
          }
        }
      },
      "recordDigest": "3fdd1704ff1e3ab6557a24021923333b0be3b045076f03d6e536a979526974de"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:7",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 7,
          "eventType": "SETTLEMENT_EVIDENCE_ACCEPTED",
          "recordedAt": "2026-10-21T20:09:00Z",
          "previousCommittedRecordDigest": "3fdd1704ff1e3ab6557a24021923333b0be3b045076f03d6e536a979526974de",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "settlement-evidence"
          ],
          "artifactDigests": {
            "settlement-evidence": "dde18bac377f7669de80434483bc1a2e14c10020823ddf1365c6e2ca7dda6231"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "PAYMENT_SETTLED",
            "paymentStatus": "SETTLED",
            "accountingStatus": "NOT_APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "tjtmFRqnCiI1VVFz6POBMl8sOXY5qZLd1xMIwQ7890Atnuj-IEaqdKOIUrrmOiqrUZ09ucBYbwgOMRklm5PZBg"
        }
      },
      "candidateDigest": "881b9bdd8c64dc7003ab5ffbeba92cd600859abdc7d3c40ee74b004b0c5f1571",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:09:00Z",
            "sequence": 7,
            "previousCommittedRecordDigest": "3fdd1704ff1e3ab6557a24021923333b0be3b045076f03d6e536a979526974de",
            "candidateDigest": "881b9bdd8c64dc7003ab5ffbeba92cd600859abdc7d3c40ee74b004b0c5f1571",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "CHDAXXhoSeS83kmGkT3E5wvgygiApuRYQIqvH6dKat7pQwJxLeAQHbvQiuavJInLzpCL33zT9XfGMZ7JemJiCw"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:09:00Z",
            "sequence": 7,
            "previousCommittedRecordDigest": "3fdd1704ff1e3ab6557a24021923333b0be3b045076f03d6e536a979526974de",
            "candidateDigest": "881b9bdd8c64dc7003ab5ffbeba92cd600859abdc7d3c40ee74b004b0c5f1571",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "WTTTXHeEDc1fhSr1AhQ2S6FOKxUgNFQ7ezdJ538pUpNLyWup6vnj-sdz-SiRQQXKmPNDX9feKcy_D8bbrT2zCA"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:09:00Z",
            "sequence": 7,
            "previousCommittedRecordDigest": "3fdd1704ff1e3ab6557a24021923333b0be3b045076f03d6e536a979526974de",
            "candidateDigest": "881b9bdd8c64dc7003ab5ffbeba92cd600859abdc7d3c40ee74b004b0c5f1571",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "WpYTg8Dosnu5_pZQV20jqaRzwKhBlaAmR2Hyk404EuIuWKab6f5ILmXhxElOJxfPOSy4CnzzDhYUy0fsHt-KBg"
          }
        }
      },
      "recordDigest": "c68a1dff3076a5715e8e39f9a15a6962e035917786a66c8bb2e66790021a61c5"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:8",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 8,
          "eventType": "ACCOUNTING_APPLICATION_ACCEPTED",
          "recordedAt": "2026-10-21T20:10:00Z",
          "previousCommittedRecordDigest": "c68a1dff3076a5715e8e39f9a15a6962e035917786a66c8bb2e66790021a61c5",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "accounting-readback"
          ],
          "artifactDigests": {
            "accounting-readback": "e03275dc3099160e05c8d1f895fd24211e7eb9fd7f59b13a21800aee57ae2e8a"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "ACCOUNTING_CONFIRMED",
            "paymentStatus": "SETTLED",
            "accountingStatus": "APPLIED",
            "sealed": false
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "2o4QUUrvJcQvYHzeMGKIHE3TvfHeIhwBIBBG6cjFdv0UVEzXt1wArH49f_bi2n_Re8pJeA5hB21p-FYoQtLEAg"
        }
      },
      "candidateDigest": "39103b67b2b6482c0b429523d06033d8eb3a3952c0a97e8d64e7764b24fc37b6",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:10:00Z",
            "sequence": 8,
            "previousCommittedRecordDigest": "c68a1dff3076a5715e8e39f9a15a6962e035917786a66c8bb2e66790021a61c5",
            "candidateDigest": "39103b67b2b6482c0b429523d06033d8eb3a3952c0a97e8d64e7764b24fc37b6",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "GY5wsoz0ypusvM33m1ZYd-mH4zl_qPydAdcpLgGjhvfWU_2xYXnHKWWKx1Jle-5Zhgsu5y5eSSocc-AtZdklAg"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:10:00Z",
            "sequence": 8,
            "previousCommittedRecordDigest": "c68a1dff3076a5715e8e39f9a15a6962e035917786a66c8bb2e66790021a61c5",
            "candidateDigest": "39103b67b2b6482c0b429523d06033d8eb3a3952c0a97e8d64e7764b24fc37b6",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "bMJT2xeyF0qLn1ZffqqfQEmx5k7rLaUvYZf0tJpw-24U9UL0uwYRW_QhkYGEXWiz2hAikhMy-QbQHoXrphB3Ag"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:10:00Z",
            "sequence": 8,
            "previousCommittedRecordDigest": "c68a1dff3076a5715e8e39f9a15a6962e035917786a66c8bb2e66790021a61c5",
            "candidateDigest": "39103b67b2b6482c0b429523d06033d8eb3a3952c0a97e8d64e7764b24fc37b6",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "bhQbQWfF7iiT78KJTAg0UNCaHHKwTDFUVdicl_sIt0YPugTAa-1cbUGflBxeks-YecOII6cwpD06zRL_mZ2SAw"
          }
        }
      },
      "recordDigest": "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287"
    },
    {
      "candidate": {
        "body": {
          "eventId": "urn:example:event:9",
          "transactionId": "urn:example:transaction:INV-1042",
          "sequence": 9,
          "eventType": "DOSSIER_SEAL_ACCEPTED",
          "recordedAt": "2026-10-21T20:11:00Z",
          "previousCommittedRecordDigest": "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287",
          "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "artifactRefs": [
            "final-manifest"
          ],
          "artifactDigests": {
            "final-manifest": "6a6d2af7b873e1a9a6830dc32c1b4367b0fcb89dfcd6c1428882896f4d9d6fdc"
          },
          "sourceRecordRefs": [],
          "sourceRecordDigests": {},
          "proposedState": {
            "phase": "SEALED_SETTLED",
            "paymentStatus": "SETTLED",
            "accountingStatus": "APPLIED",
            "sealed": true
          }
        },
        "actorSignature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:core",
          "signerPrincipalId": "urn:example:principal:core",
          "domain": "DECENTRA/EVENT/v0.2\n",
          "value": "E1oIR1D_VTxYMVjDbJhx_qL1S4lwkaforIkUgxAVEVms0QphexkW0uaqOQOmxXriXdoAdMqDyN6NH0hdHwcwAA"
        }
      },
      "candidateDigest": "0767a72ab112e8d6f90573010599d32e831c64f13dc2e8bc8c8a22f57d025ae6",
      "acceptances": {
        "seller": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:11:00Z",
            "sequence": 9,
            "previousCommittedRecordDigest": "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287",
            "candidateDigest": "0767a72ab112e8d6f90573010599d32e831c64f13dc2e8bc8c8a22f57d025ae6",
            "acceptorPrincipalId": "urn:example:principal:seller",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:seller",
            "signerPrincipalId": "urn:example:principal:seller",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "Txgry52R0mgE17Viok0UqbNGeZDpUpC3lAu9RR1bTWJcB3HpdVW0lpR8kQ-_yek2YD5f-2MSjMYgfhgBVcq3CA"
          }
        },
        "buyer": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:11:00Z",
            "sequence": 9,
            "previousCommittedRecordDigest": "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287",
            "candidateDigest": "0767a72ab112e8d6f90573010599d32e831c64f13dc2e8bc8c8a22f57d025ae6",
            "acceptorPrincipalId": "urn:example:principal:buyer",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:buyer",
            "signerPrincipalId": "urn:example:principal:buyer",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "o4S_nAItgm5h8x31WVwbkDnGZQPKLdwtRh8COlLskW_VCsr0omihelT1_kp71us2xKUNeXjhAedvYU_loM7yAQ"
          }
        },
        "core": {
          "body": {
            "purpose": "ACCEPT_TRANSITION",
            "transactionId": "urn:example:transaction:INV-1042",
            "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
            "acceptedAt": "2026-10-21T20:11:00Z",
            "sequence": 9,
            "previousCommittedRecordDigest": "44fef9ee78d8a5228a3a3495ab8c94ff7096fec38c691145f70c49374994f287",
            "candidateDigest": "0767a72ab112e8d6f90573010599d32e831c64f13dc2e8bc8c8a22f57d025ae6",
            "acceptorPrincipalId": "urn:example:principal:core",
            "decision": "ACCEPT"
          },
          "signature": {
            "algorithm": "Ed25519",
            "keyId": "urn:example:key:core",
            "signerPrincipalId": "urn:example:principal:core",
            "domain": "DECENTRA/ACCEPT/v0.2\n",
            "value": "LQxLUymrZc2wRYc-y2lCnKSDx7vTKy-3VbMbRSdBXEpMOTY3bIuFMvj8k0csQ4g8Ae_68oGgMdNFZgd3EIV_Bg"
          }
        }
      },
      "recordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4"
    }
  ],
  "observedUncommittedEvents": [],
  "derivedState": {
    "phase": "SEALED_SETTLED",
    "paymentStatus": "SETTLED",
    "accountingStatus": "APPLIED",
    "sealed": true
  },
  "agreedHead": {
    "sequence": 9,
    "eventId": "urn:example:event:9",
    "recordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4"
  },
  "finalSeal": {
    "manifestArtifactId": "final-manifest",
    "sealEventId": "urn:example:event:9",
    "sealedRecordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4"
  },
  "distribution": {
    "scope": "POST_SEAL_SIGNED_SIDECARS_NOT_IN_COMMITTED_HISTORY",
    "status": "DELIVERED_TO_BUYER_AND_SELLER",
    "deliveryReceipts": [
      {
        "body": {
          "receiptType": "DOSSIER_DELIVERY_ACK",
          "recipientPrincipalId": "urn:example:principal:seller",
          "dossierId": "urn:example:dossier:INV-1042",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "sealedRecordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4",
          "receivedAt": "2026-10-21T20:12:00Z"
        },
        "signature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:seller",
          "signerPrincipalId": "urn:example:principal:seller",
          "domain": "DECENTRA/DELIVERY/v0.2\n",
          "value": "qlg1yGL6dycL1GWLdP0Qs3Xuw5ohJUn4ylVe-RA3ZYPdg6yjIuAtDt4f2UHe9ZTg3SvSUJ8LF_5bFvfQ0rIADw"
        }
      },
      {
        "body": {
          "receiptType": "DOSSIER_DELIVERY_ACK",
          "recipientPrincipalId": "urn:example:principal:buyer",
          "dossierId": "urn:example:dossier:INV-1042",
          "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
          "sealedRecordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4",
          "receivedAt": "2026-10-21T20:12:00Z"
        },
        "signature": {
          "algorithm": "Ed25519",
          "keyId": "urn:example:key:buyer",
          "signerPrincipalId": "urn:example:principal:buyer",
          "domain": "DECENTRA/DELIVERY/v0.2\n",
          "value": "byKDNE_5hvMxlE1jAX1Q-JOXCZwv0ILx9Hu1K0BaOmmqIJ0BOAp48UnhbA8lrH1QIk91hwJL4VMx9bJx-Kl_AA"
        }
      }
    ]
  }
}
Derived summary only — not the complete Transaction Dossier

These three fields are a rebuildable status/head/seal projection. They omit the retained invoice, authority, messages, signatures, agreement history and delivery receipts, and cannot verify the transaction by themselves.

{
  "derivedState": {
    "phase": "SEALED_SETTLED",
    "paymentStatus": "SETTLED",
    "accountingStatus": "APPLIED",
    "sealed": true
  },
  "agreedHead": {
    "sequence": 9,
    "eventId": "urn:example:event:9",
    "recordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4"
  },
  "finalSeal": {
    "manifestArtifactId": "final-manifest",
    "sealEventId": "urn:example:event:9",
    "sealedRecordDigest": "d3d5a1b40cf71c6722107bb1be5294d3ea7f959c2e0e13a553e70c3f77442bf4"
  }
}
Read one committed record: buyer pay intent + three acceptances

The buyer actor signature authorizes this exact intent. The seller, buyer and Core acceptance signatures separately acknowledge the recorded transition. Every acceptance binds the same candidate digest, sequence, transaction and previous head.

{
  "candidate": {
    "body": {
      "eventId": "urn:example:event:2",
      "transactionId": "urn:example:transaction:INV-1042",
      "sequence": 2,
      "eventType": "PAYMENT_INTENT_ACCEPTED",
      "recordedAt": "2026-10-21T20:05:00Z",
      "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
      "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
      "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
      "artifactRefs": [
        "pay-intent",
        "buyer-authority"
      ],
      "artifactDigests": {
        "pay-intent": "0fa2fd17cf96752530953cc01b637fd370d0001c10df826c946a22c0133f172f",
        "buyer-authority": "da9067a9daa092528a3154d852f227923b0da2a13c660a0ad7034314b0e7e462"
      },
      "sourceRecordRefs": [],
      "sourceRecordDigests": {},
      "proposedState": {
        "phase": "PAYMENT_AUTHORIZED",
        "paymentStatus": "NOT_SUBMITTED",
        "accountingStatus": "NOT_APPLIED",
        "sealed": false
      }
    },
    "actorSignature": {
      "algorithm": "Ed25519",
      "keyId": "urn:example:key:buyer",
      "signerPrincipalId": "urn:example:principal:buyer",
      "domain": "DECENTRA/EVENT/v0.2\n",
      "value": "hsWtf4KxgHPQOpvZ_Fm1McNFuk9yebNrz0Ls776o1HUp0WVohVG0IVxdf9rS1ArA3onj9N-2CkGmp7RVtaTZCQ"
    }
  },
  "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
  "acceptances": {
    "seller": {
      "body": {
        "purpose": "ACCEPT_TRANSITION",
        "transactionId": "urn:example:transaction:INV-1042",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "acceptedAt": "2026-10-21T20:05:00Z",
        "sequence": 2,
        "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
        "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
        "acceptorPrincipalId": "urn:example:principal:seller",
        "decision": "ACCEPT"
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:seller",
        "signerPrincipalId": "urn:example:principal:seller",
        "domain": "DECENTRA/ACCEPT/v0.2\n",
        "value": "JmP7qruJkBehYC3C42l9FFtdUtadRNHKGQOYJ1R4wFeIVc8orfHMR15nst5rjz8CvEi14Iq77CvSzpGR6kPqCA"
      }
    },
    "buyer": {
      "body": {
        "purpose": "ACCEPT_TRANSITION",
        "transactionId": "urn:example:transaction:INV-1042",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "acceptedAt": "2026-10-21T20:05:00Z",
        "sequence": 2,
        "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
        "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
        "acceptorPrincipalId": "urn:example:principal:buyer",
        "decision": "ACCEPT"
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:buyer",
        "signerPrincipalId": "urn:example:principal:buyer",
        "domain": "DECENTRA/ACCEPT/v0.2\n",
        "value": "pFyozCLN7QGXbe_AaXQvYsYAhPXSqBnEBKwTxUChA0nmiwuDBfFPnnPIrqF5JQoOBakqkrWLNAYDLxLGaircBg"
      }
    },
    "core": {
      "body": {
        "purpose": "ACCEPT_TRANSITION",
        "transactionId": "urn:example:transaction:INV-1042",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "acceptedAt": "2026-10-21T20:05:00Z",
        "sequence": 2,
        "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
        "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
        "acceptorPrincipalId": "urn:example:principal:core",
        "decision": "ACCEPT"
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:core",
        "signerPrincipalId": "urn:example:principal:core",
        "domain": "DECENTRA/ACCEPT/v0.2\n",
        "value": "B9ANMA-igRX1_K5hzc9mclYHEdPXfTic4K0tUUPuISv7s3lrQFt-n9V8fl576-Fiu4mRYDUY0Etki0u-a49gDg"
      }
    }
  },
  "recordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04"
}

Nine accepted events, from genesis to seal

#EventActor signerAcceptance signersDerived phase
1GENESIS_ACCEPTEDcoreSeller + buyer + CoreINVOICE_AUTHENTICATED
2PAYMENT_INTENT_ACCEPTEDbuyerSeller + buyer + CorePAYMENT_AUTHORIZED
3PAYMENT_ADMISSION_ACCEPTEDcoreSeller + buyer + CorePAYMENT_ADMITTED
4PAYMENT_SUBMISSION_RECORDEDcoreSeller + buyer + CorePAYMENT_SUBMITTED
5PROVIDER_RECEIPT_ACCEPTEDcoreSeller + buyer + CorePAYMENT_PROCESSING
6CAPTURE_EVIDENCE_ACCEPTEDcoreSeller + buyer + CorePAYMENT_CAPTURED
7SETTLEMENT_EVIDENCE_ACCEPTEDcoreSeller + buyer + CorePAYMENT_SETTLED
8ACCOUNTING_APPLICATION_ACCEPTEDcoreSeller + buyer + CoreACCOUNTING_CONFIRMED
9DOSSIER_SEAL_ACCEPTEDcoreSeller + buyer + CoreSEALED_SETTLED
Wire rules, signature boundaries and schema limits
  • Money: currency plus a decimal string of minor units; "1250000" with "USD" means $12,500.00. No floating-point money. IDs and times are strings; timestamps use RFC 3339 UTC. Recorded times are signed assertions—not independent trusted timestamps.
  • Canonical bytes: this proposal uses an RFC 8785-compatible restricted profile: valid Unicode and JSON values with safe integers only, no floats or lone surrogates. Domain prefixes and UTF-8 canonical bytes are signed with Ed25519. Digests are SHA-256 lowercase hex; signatures/public keys use unpadded base64url. Algorithms and governance are proposed, not provider requirements.
  • Artifact digests: contentDigest hashes the canonical content only; artifactDigest hashes the entire artifact envelope excluding its own digest field. The envelope includes artifact ID/type, media type, provenance, content and content digest. Event/source references bind this envelope digest, so unsigned provenance cannot masquerade as verified provider evidence.
  • Actor signature: sign domain || canonical(body). Candidate digest hashes { body, actorSignature }. The body binds its context digest, artifact IDs/envelope digests, and genesis source-record IDs/digests.
  • Three acceptances: each role signs a separate acceptance body containing purpose, transaction ID, sequence, previous committed-record digest, candidate digest, acceptor identity and ACCEPT. This is not an aggregated wallet multisig.
  • Committed-record digest: hash { candidate, acceptances }; exclude the record’s own digest field. The next body references this digest. Source-record digests similarly exclude their own digest field. Repeated digest fields must be recomputed and checked.
  • Nonrecursive seal: the manifest binds context, all prior committed-record digests, signed source-record digests and all earlier artifact digests. It excludes itself and the future seal. The final event signs and accepts the manifest digest; the completed dossier then includes manifest, seal and all three seal acceptances.
  • Delivery sidecars: each recipient signs its receipt against the sealed-record digest and dossier ID under a distinct delivery domain. Delivery receipts do not rewrite that seal. If delivery itself must become a three-party committed transition, define a subsequent profile/event rather than silently changing this one.
  • Schema scope: Draft 2020-12 JSON Schema describes this narrow final happy-path profile: nine events, eleven artifact types and empty pending observations. It is not a general multi-attempt, partial-payment, refund, key-rotation or pending-state schema. Typed content definitions cover every artifact kind; unknown object fields are rejected.
  • Verification scope: JSON Schema alone cannot prove signatures, authority, sequence, digest links, provider truth or storage immutability. The downloadable verifier adds fixture-profile integrity, event-specific evidence bindings, source-role/chronology checks, authority validity and invoice/payee/method/attempt/accounting consistency checks, not production trust/consensus validation. Authority and key mappings require independently trusted onboarding/issuer context in production.
  • Envelope profile v0.2: in-envelope source/event/acceptance/delivery statements bind envelopeDigest. The seller’s earlier issuance has a null envelope binding because it predates opening; genesis subsequently binds that original. Acceptance bodies add signed acceptedAt. Signature domains advance to v0.2; canonicalization remains the same restricted v0.1 algorithm profile. Submission evidence binds the completed admission-record digest. The offline verifier checks declared chronology and scope, not actual runtime gate enforcement or trusted wall-clock time.
Read the full JSON Schema
{
  "type": "object",
  "additionalProperties": false,
  "required": [
    "context",
    "artifacts",
    "sourceRecords",
    "committedEvents",
    "observedUncommittedEvents",
    "derivedState",
    "agreedHead",
    "finalSeal",
    "distribution"
  ],
  "properties": {
    "context": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "schemaVersion",
        "documentType",
        "dossierId",
        "transactionId",
        "profile",
        "exampleOnly",
        "exampleNotice",
        "cryptographicProfile",
        "participants",
        "verificationMaterial",
        "assumptions",
        "envelope"
      ],
      "properties": {
        "schemaVersion": {
          "const": "0.2.0"
        },
        "documentType": {
          "const": "decentra.transaction-dossier"
        },
        "dossierId": {
          "type": "string",
          "minLength": 1
        },
        "transactionId": {
          "type": "string",
          "minLength": 1
        },
        "profile": {
          "const": "single-invoice-single-attempt-three-of-three-envelope-settled-v0.2"
        },
        "exampleOnly": {
          "type": "boolean"
        },
        "exampleNotice": {
          "type": "string",
          "minLength": 1
        },
        "cryptographicProfile": {
          "const": {
            "canonicalization": "RFC8785-RESTRICTED-SAFE-INTEGER-v0.1",
            "digestAlgorithm": "SHA-256",
            "signatureAlgorithm": "Ed25519",
            "signatureEncoding": "base64url-unpadded",
            "digestEncoding": "lowercase-hex",
            "signatureDomains": {
              "source": "DECENTRA/SOURCE/v0.2\n",
              "event": "DECENTRA/EVENT/v0.2\n",
              "accept": "DECENTRA/ACCEPT/v0.2\n",
              "delivery": "DECENTRA/DELIVERY/v0.2\n"
            }
          }
        },
        "participants": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "seller",
            "buyer",
            "core"
          ],
          "properties": {
            "seller": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "principalId",
                "organizationId",
                "agentId",
                "role",
                "registrationReference"
              ],
              "properties": {
                "principalId": {
                  "type": "string",
                  "minLength": 1
                },
                "organizationId": {
                  "type": "string",
                  "minLength": 1
                },
                "agentId": {
                  "type": "string",
                  "minLength": 1
                },
                "role": {
                  "type": "string",
                  "minLength": 1
                },
                "registrationReference": {
                  "type": "string",
                  "minLength": 1
                }
              }
            },
            "buyer": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "principalId",
                "organizationId",
                "agentId",
                "role",
                "registrationReference"
              ],
              "properties": {
                "principalId": {
                  "type": "string",
                  "minLength": 1
                },
                "organizationId": {
                  "type": "string",
                  "minLength": 1
                },
                "agentId": {
                  "type": "string",
                  "minLength": 1
                },
                "role": {
                  "type": "string",
                  "minLength": 1
                },
                "registrationReference": {
                  "type": "string",
                  "minLength": 1
                }
              }
            },
            "core": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "principalId",
                "organizationId",
                "agentId",
                "role",
                "registrationReference"
              ],
              "properties": {
                "principalId": {
                  "type": "string",
                  "minLength": 1
                },
                "organizationId": {
                  "type": "string",
                  "minLength": 1
                },
                "agentId": {
                  "type": "string",
                  "minLength": 1
                },
                "role": {
                  "type": "string",
                  "minLength": 1
                },
                "registrationReference": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          }
        },
        "verificationMaterial": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "trustMode",
            "keys"
          ],
          "properties": {
            "trustMode": {
              "type": "string",
              "minLength": 1
            },
            "keys": {
              "type": "array",
              "minItems": 1,
              "items": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "keyId",
                  "principalId",
                  "algorithm",
                  "publicKeyFormat",
                  "publicKey"
                ],
                "properties": {
                  "keyId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "principalId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "algorithm": {
                    "const": "Ed25519"
                  },
                  "publicKeyFormat": {
                    "type": "string",
                    "minLength": 1
                  },
                  "publicKey": {
                    "type": "string",
                    "minLength": 1
                  }
                }
              }
            }
          }
        },
        "assumptions": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "agentsAlreadyRegistered",
            "buyerPaymentAuthorityFixture",
            "schemaAndKeyGovernancePending",
            "consensusImplementationNotClaimed"
          ],
          "properties": {
            "agentsAlreadyRegistered": {
              "type": "boolean"
            },
            "buyerPaymentAuthorityFixture": {
              "type": "boolean"
            },
            "schemaAndKeyGovernancePending": {
              "type": "boolean"
            },
            "consensusImplementationNotClaimed": {
              "type": "boolean"
            }
          }
        },
        "envelope": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "envelopeVersion",
            "envelopeId",
            "transactionId",
            "openedAt",
            "submissionDeadlineExclusive",
            "monitoringEscalationAt",
            "activationRule",
            "identityBinding",
            "participantKeyIds",
            "expiryMeaning",
            "renewalRule",
            "scope"
          ],
          "properties": {
            "envelopeVersion": {
              "type": "string",
              "minLength": 1
            },
            "envelopeId": {
              "type": "string",
              "minLength": 1
            },
            "transactionId": {
              "type": "string",
              "minLength": 1
            },
            "openedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "submissionDeadlineExclusive": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "monitoringEscalationAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "activationRule": {
              "type": "string",
              "minLength": 1
            },
            "identityBinding": {
              "type": "string",
              "minLength": 1
            },
            "participantKeyIds": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "seller",
                "buyer",
                "core"
              ],
              "properties": {
                "seller": {
                  "type": "string",
                  "minLength": 1
                },
                "buyer": {
                  "type": "string",
                  "minLength": 1
                },
                "core": {
                  "type": "string",
                  "minLength": 1
                }
              }
            },
            "expiryMeaning": {
              "type": "string",
              "minLength": 1
            },
            "renewalRule": {
              "type": "string",
              "minLength": 1
            },
            "scope": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "invoiceArtifactId",
                "invoiceContentDigest",
                "buyerPrincipalId",
                "sellerPrincipalId",
                "payeeReference",
                "maximumAmountMinor",
                "currency",
                "methodReference",
                "maximumAttempts",
                "authorityArtifactId",
                "attemptId",
                "providerIdempotencyReference",
                "permittedOperation"
              ],
              "properties": {
                "invoiceArtifactId": {
                  "type": "string",
                  "minLength": 1
                },
                "invoiceContentDigest": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[0-9a-f]{64}$"
                },
                "buyerPrincipalId": {
                  "type": "string",
                  "minLength": 1
                },
                "sellerPrincipalId": {
                  "type": "string",
                  "minLength": 1
                },
                "payeeReference": {
                  "type": "string",
                  "minLength": 1
                },
                "maximumAmountMinor": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^(0|[1-9][0-9]*)$"
                },
                "currency": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[A-Z]{3}$"
                },
                "methodReference": {
                  "type": "string",
                  "minLength": 1
                },
                "maximumAttempts": {
                  "type": "integer",
                  "minimum": 0,
                  "maximum": 9007199254740991
                },
                "authorityArtifactId": {
                  "type": "string",
                  "minLength": 1
                },
                "attemptId": {
                  "type": "string",
                  "minLength": 1
                },
                "providerIdempotencyReference": {
                  "type": "string",
                  "minLength": 1
                },
                "permittedOperation": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          }
        }
      }
    },
    "artifacts": {
      "type": "array",
      "minItems": 11,
      "maxItems": 11,
      "items": {
        "oneOf": [
          {
            "$ref": "#/$defs/invoice"
          },
          {
            "$ref": "#/$defs/buyer_authority"
          },
          {
            "$ref": "#/$defs/invoice_authenticity"
          },
          {
            "$ref": "#/$defs/payment_intent"
          },
          {
            "$ref": "#/$defs/payment_admission"
          },
          {
            "$ref": "#/$defs/provider_receipt"
          },
          {
            "$ref": "#/$defs/provider_capture"
          },
          {
            "$ref": "#/$defs/provider_settlement"
          },
          {
            "$ref": "#/$defs/accounting_application"
          },
          {
            "$ref": "#/$defs/payment_submission"
          },
          {
            "$ref": "#/$defs/final_manifest"
          }
        ]
      }
    },
    "sourceRecords": {
      "type": "array",
      "minItems": 3,
      "maxItems": 3,
      "prefixItems": [
        {
          "allOf": [
            {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "body",
                "signature",
                "recordDigest"
              ],
              "properties": {
                "body": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "sourceRecordId",
                    "transactionId",
                    "recordType",
                    "recordedAt",
                    "envelopeDigest",
                    "artifactRefs",
                    "artifactDigests"
                  ],
                  "properties": {
                    "sourceRecordId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "transactionId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "recordType": {
                      "type": "string",
                      "minLength": 1
                    },
                    "recordedAt": {
                      "type": "string",
                      "minLength": 1,
                      "format": "date-time"
                    },
                    "envelopeDigest": {
                      "type": "null"
                    },
                    "artifactRefs": {
                      "type": "array",
                      "minItems": 1,
                      "items": {
                        "type": "string",
                        "minLength": 1
                      }
                    },
                    "artifactDigests": {
                      "type": "object",
                      "additionalProperties": false,
                      "required": [
                        "invoice"
                      ],
                      "properties": {
                        "invoice": {
                          "type": "string",
                          "minLength": 1
                        }
                      }
                    }
                  }
                },
                "signature": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "algorithm",
                    "keyId",
                    "signerPrincipalId",
                    "domain",
                    "value"
                  ],
                  "properties": {
                    "algorithm": {
                      "const": "Ed25519"
                    },
                    "keyId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "signerPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "domain": {
                      "enum": [
                        "DECENTRA/SOURCE/v0.2\n",
                        "DECENTRA/EVENT/v0.2\n",
                        "DECENTRA/ACCEPT/v0.2\n",
                        "DECENTRA/DELIVERY/v0.2\n"
                      ]
                    },
                    "value": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[A-Za-z0-9_-]{86}$"
                    }
                  }
                },
                "recordDigest": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[0-9a-f]{64}$"
                }
              }
            },
            {
              "properties": {
                "body": {
                  "properties": {
                    "recordType": {
                      "const": "INVOICE_ISSUED"
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "body",
                "signature",
                "recordDigest"
              ],
              "properties": {
                "body": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "sourceRecordId",
                    "transactionId",
                    "recordType",
                    "recordedAt",
                    "envelopeDigest",
                    "artifactRefs",
                    "artifactDigests"
                  ],
                  "properties": {
                    "sourceRecordId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "transactionId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "recordType": {
                      "type": "string",
                      "minLength": 1
                    },
                    "recordedAt": {
                      "type": "string",
                      "minLength": 1,
                      "format": "date-time"
                    },
                    "envelopeDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "artifactRefs": {
                      "type": "array",
                      "minItems": 1,
                      "items": {
                        "type": "string",
                        "minLength": 1
                      }
                    },
                    "artifactDigests": {
                      "type": "object",
                      "additionalProperties": false,
                      "required": [
                        "invoice"
                      ],
                      "properties": {
                        "invoice": {
                          "type": "string",
                          "minLength": 1
                        }
                      }
                    }
                  }
                },
                "signature": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "algorithm",
                    "keyId",
                    "signerPrincipalId",
                    "domain",
                    "value"
                  ],
                  "properties": {
                    "algorithm": {
                      "const": "Ed25519"
                    },
                    "keyId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "signerPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "domain": {
                      "enum": [
                        "DECENTRA/SOURCE/v0.2\n",
                        "DECENTRA/EVENT/v0.2\n",
                        "DECENTRA/ACCEPT/v0.2\n",
                        "DECENTRA/DELIVERY/v0.2\n"
                      ]
                    },
                    "value": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[A-Za-z0-9_-]{86}$"
                    }
                  }
                },
                "recordDigest": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[0-9a-f]{64}$"
                }
              }
            },
            {
              "properties": {
                "body": {
                  "properties": {
                    "recordType": {
                      "const": "INVOICE_REGISTERED"
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "body",
                "signature",
                "recordDigest"
              ],
              "properties": {
                "body": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "sourceRecordId",
                    "transactionId",
                    "recordType",
                    "recordedAt",
                    "envelopeDigest",
                    "artifactRefs",
                    "artifactDigests"
                  ],
                  "properties": {
                    "sourceRecordId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "transactionId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "recordType": {
                      "type": "string",
                      "minLength": 1
                    },
                    "recordedAt": {
                      "type": "string",
                      "minLength": 1,
                      "format": "date-time"
                    },
                    "envelopeDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "artifactRefs": {
                      "type": "array",
                      "minItems": 1,
                      "items": {
                        "type": "string",
                        "minLength": 1
                      }
                    },
                    "artifactDigests": {
                      "type": "object",
                      "additionalProperties": false,
                      "required": [
                        "invoice",
                        "authenticity-attestation"
                      ],
                      "properties": {
                        "invoice": {
                          "type": "string",
                          "minLength": 1
                        },
                        "authenticity-attestation": {
                          "type": "string",
                          "minLength": 1
                        }
                      }
                    }
                  }
                },
                "signature": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "algorithm",
                    "keyId",
                    "signerPrincipalId",
                    "domain",
                    "value"
                  ],
                  "properties": {
                    "algorithm": {
                      "const": "Ed25519"
                    },
                    "keyId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "signerPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "domain": {
                      "enum": [
                        "DECENTRA/SOURCE/v0.2\n",
                        "DECENTRA/EVENT/v0.2\n",
                        "DECENTRA/ACCEPT/v0.2\n",
                        "DECENTRA/DELIVERY/v0.2\n"
                      ]
                    },
                    "value": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[A-Za-z0-9_-]{86}$"
                    }
                  }
                },
                "recordDigest": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[0-9a-f]{64}$"
                }
              }
            },
            {
              "properties": {
                "body": {
                  "properties": {
                    "recordType": {
                      "const": "INVOICE_AUTHENTICITY_ATTESTED"
                    }
                  }
                }
              }
            }
          ]
        }
      ],
      "items": false
    },
    "committedEvents": {
      "type": "array",
      "minItems": 9,
      "maxItems": 9,
      "prefixItems": [
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "GENESIS_ACCEPTED"
                        },
                        "sequence": {
                          "const": 1
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "PAYMENT_INTENT_ACCEPTED"
                        },
                        "sequence": {
                          "const": 2
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "PAYMENT_ADMISSION_ACCEPTED"
                        },
                        "sequence": {
                          "const": 3
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "PAYMENT_SUBMISSION_RECORDED"
                        },
                        "sequence": {
                          "const": 4
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "PROVIDER_RECEIPT_ACCEPTED"
                        },
                        "sequence": {
                          "const": 5
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "CAPTURE_EVIDENCE_ACCEPTED"
                        },
                        "sequence": {
                          "const": 6
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "SETTLEMENT_EVIDENCE_ACCEPTED"
                        },
                        "sequence": {
                          "const": 7
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "ACCOUNTING_APPLICATION_ACCEPTED"
                        },
                        "sequence": {
                          "const": 8
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        },
        {
          "allOf": [
            {
              "$ref": "#/$defs/CommittedEvent"
            },
            {
              "properties": {
                "candidate": {
                  "properties": {
                    "body": {
                      "properties": {
                        "eventType": {
                          "const": "DOSSIER_SEAL_ACCEPTED"
                        },
                        "sequence": {
                          "const": 9
                        }
                      }
                    }
                  }
                }
              }
            }
          ]
        }
      ],
      "items": false
    },
    "observedUncommittedEvents": {
      "type": "array",
      "maxItems": 0,
      "items": false
    },
    "derivedState": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "phase",
        "paymentStatus",
        "accountingStatus",
        "sealed"
      ],
      "properties": {
        "phase": {
          "const": "SEALED_SETTLED"
        },
        "paymentStatus": {
          "const": "SETTLED"
        },
        "accountingStatus": {
          "const": "APPLIED"
        },
        "sealed": {
          "const": true
        }
      }
    },
    "agreedHead": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "sequence",
        "eventId",
        "recordDigest"
      ],
      "properties": {
        "sequence": {
          "type": "integer",
          "minimum": 0,
          "maximum": 9007199254740991
        },
        "eventId": {
          "type": "string",
          "minLength": 1
        },
        "recordDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "finalSeal": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "manifestArtifactId",
        "sealEventId",
        "sealedRecordDigest"
      ],
      "properties": {
        "manifestArtifactId": {
          "type": "string",
          "minLength": 1
        },
        "sealEventId": {
          "type": "string",
          "minLength": 1
        },
        "sealedRecordDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "distribution": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "scope",
        "status",
        "deliveryReceipts"
      ],
      "properties": {
        "scope": {
          "const": "POST_SEAL_SIGNED_SIDECARS_NOT_IN_COMMITTED_HISTORY"
        },
        "status": {
          "const": "DELIVERED_TO_BUYER_AND_SELLER"
        },
        "deliveryReceipts": {
          "type": "array",
          "minItems": 2,
          "items": {
            "type": "object",
            "additionalProperties": false,
            "required": [
              "body",
              "signature"
            ],
            "properties": {
              "body": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "receiptType",
                  "recipientPrincipalId",
                  "dossierId",
                  "envelopeDigest",
                  "sealedRecordDigest",
                  "receivedAt"
                ],
                "properties": {
                  "receiptType": {
                    "const": "DOSSIER_DELIVERY_ACK"
                  },
                  "recipientPrincipalId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "dossierId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "envelopeDigest": {
                    "type": "string",
                    "minLength": 1,
                    "pattern": "^[0-9a-f]{64}$"
                  },
                  "sealedRecordDigest": {
                    "type": "string",
                    "minLength": 1,
                    "pattern": "^[0-9a-f]{64}$"
                  },
                  "receivedAt": {
                    "type": "string",
                    "minLength": 1,
                    "format": "date-time"
                  }
                }
              },
              "signature": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "algorithm",
                  "keyId",
                  "signerPrincipalId",
                  "domain",
                  "value"
                ],
                "properties": {
                  "algorithm": {
                    "const": "Ed25519"
                  },
                  "keyId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "signerPrincipalId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "domain": {
                    "enum": [
                      "DECENTRA/SOURCE/v0.2\n",
                      "DECENTRA/EVENT/v0.2\n",
                      "DECENTRA/ACCEPT/v0.2\n",
                      "DECENTRA/DELIVERY/v0.2\n"
                    ]
                  },
                  "value": {
                    "type": "string",
                    "minLength": 1,
                    "pattern": "^[A-Za-z0-9_-]{86}$"
                  }
                }
              }
            }
          },
          "maxItems": 2
        }
      }
    }
  },
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Transaction Dossier \u2014 envelope-aware final happy-path profile v0.2",
  "description": "Proposed JSON contract for one invoice, one payment attempt, captured/settled evidence, three acceptances per committed event and a final seal. This executable specimen is explicitly synthetic. JSON Schema cannot prove signatures, authority, ordering, provider truth or storage immutability.",
  "$defs": {
    "CommittedEvent": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "candidate",
        "candidateDigest",
        "acceptances",
        "recordDigest"
      ],
      "properties": {
        "candidate": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "body",
            "actorSignature"
          ],
          "properties": {
            "body": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "eventId",
                "transactionId",
                "sequence",
                "eventType",
                "recordedAt",
                "previousCommittedRecordDigest",
                "contextDigest",
                "envelopeDigest",
                "artifactRefs",
                "artifactDigests",
                "sourceRecordRefs",
                "sourceRecordDigests",
                "proposedState"
              ],
              "properties": {
                "eventId": {
                  "type": "string",
                  "minLength": 1
                },
                "transactionId": {
                  "type": "string",
                  "minLength": 1
                },
                "sequence": {
                  "type": "integer",
                  "minimum": 1,
                  "maximum": 9007199254740991
                },
                "eventType": {
                  "type": "string",
                  "minLength": 1
                },
                "recordedAt": {
                  "type": "string",
                  "minLength": 1,
                  "format": "date-time"
                },
                "previousCommittedRecordDigest": {
                  "type": [
                    "string",
                    "null"
                  ],
                  "pattern": "^[0-9a-f]{64}$"
                },
                "contextDigest": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[0-9a-f]{64}$"
                },
                "envelopeDigest": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[0-9a-f]{64}$"
                },
                "artifactRefs": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  },
                  "minItems": 1,
                  "uniqueItems": true
                },
                "artifactDigests": {
                  "type": "object",
                  "minProperties": 1,
                  "additionalProperties": {
                    "type": "string",
                    "pattern": "^[0-9a-f]{64}$"
                  }
                },
                "sourceRecordRefs": {
                  "type": "array",
                  "items": {
                    "type": "string"
                  },
                  "uniqueItems": true
                },
                "sourceRecordDigests": {
                  "type": "object",
                  "additionalProperties": {
                    "type": "string",
                    "pattern": "^[0-9a-f]{64}$"
                  }
                },
                "proposedState": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "phase",
                    "paymentStatus",
                    "accountingStatus",
                    "sealed"
                  ],
                  "properties": {
                    "phase": {
                      "type": "string",
                      "minLength": 1
                    },
                    "paymentStatus": {
                      "type": "string",
                      "minLength": 1
                    },
                    "accountingStatus": {
                      "type": "string",
                      "minLength": 1
                    },
                    "sealed": {
                      "type": "boolean"
                    }
                  }
                }
              }
            },
            "actorSignature": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "algorithm",
                "keyId",
                "signerPrincipalId",
                "domain",
                "value"
              ],
              "properties": {
                "algorithm": {
                  "const": "Ed25519"
                },
                "keyId": {
                  "type": "string",
                  "minLength": 1
                },
                "signerPrincipalId": {
                  "type": "string",
                  "minLength": 1
                },
                "domain": {
                  "enum": [
                    "DECENTRA/SOURCE/v0.2\n",
                    "DECENTRA/EVENT/v0.2\n",
                    "DECENTRA/ACCEPT/v0.2\n",
                    "DECENTRA/DELIVERY/v0.2\n"
                  ]
                },
                "value": {
                  "type": "string",
                  "minLength": 1,
                  "pattern": "^[A-Za-z0-9_-]{86}$"
                }
              }
            }
          }
        },
        "candidateDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "acceptances": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "seller",
            "buyer",
            "core"
          ],
          "properties": {
            "seller": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "body",
                "signature"
              ],
              "properties": {
                "body": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "purpose",
                    "transactionId",
                    "envelopeDigest",
                    "acceptedAt",
                    "sequence",
                    "previousCommittedRecordDigest",
                    "candidateDigest",
                    "acceptorPrincipalId",
                    "decision"
                  ],
                  "properties": {
                    "purpose": {
                      "type": "string",
                      "minLength": 1
                    },
                    "transactionId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "envelopeDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "acceptedAt": {
                      "type": "string",
                      "minLength": 1,
                      "format": "date-time"
                    },
                    "sequence": {
                      "type": "integer",
                      "minimum": 0,
                      "maximum": 9007199254740991
                    },
                    "previousCommittedRecordDigest": {
                      "type": [
                        "string",
                        "null"
                      ],
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "candidateDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "acceptorPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "decision": {
                      "type": "string",
                      "minLength": 1
                    }
                  }
                },
                "signature": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "algorithm",
                    "keyId",
                    "signerPrincipalId",
                    "domain",
                    "value"
                  ],
                  "properties": {
                    "algorithm": {
                      "const": "Ed25519"
                    },
                    "keyId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "signerPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "domain": {
                      "enum": [
                        "DECENTRA/SOURCE/v0.2\n",
                        "DECENTRA/EVENT/v0.2\n",
                        "DECENTRA/ACCEPT/v0.2\n",
                        "DECENTRA/DELIVERY/v0.2\n"
                      ]
                    },
                    "value": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[A-Za-z0-9_-]{86}$"
                    }
                  }
                }
              }
            },
            "buyer": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "body",
                "signature"
              ],
              "properties": {
                "body": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "purpose",
                    "transactionId",
                    "envelopeDigest",
                    "acceptedAt",
                    "sequence",
                    "previousCommittedRecordDigest",
                    "candidateDigest",
                    "acceptorPrincipalId",
                    "decision"
                  ],
                  "properties": {
                    "purpose": {
                      "type": "string",
                      "minLength": 1
                    },
                    "transactionId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "envelopeDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "acceptedAt": {
                      "type": "string",
                      "minLength": 1,
                      "format": "date-time"
                    },
                    "sequence": {
                      "type": "integer",
                      "minimum": 0,
                      "maximum": 9007199254740991
                    },
                    "previousCommittedRecordDigest": {
                      "type": [
                        "string",
                        "null"
                      ],
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "candidateDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "acceptorPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "decision": {
                      "type": "string",
                      "minLength": 1
                    }
                  }
                },
                "signature": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "algorithm",
                    "keyId",
                    "signerPrincipalId",
                    "domain",
                    "value"
                  ],
                  "properties": {
                    "algorithm": {
                      "const": "Ed25519"
                    },
                    "keyId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "signerPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "domain": {
                      "enum": [
                        "DECENTRA/SOURCE/v0.2\n",
                        "DECENTRA/EVENT/v0.2\n",
                        "DECENTRA/ACCEPT/v0.2\n",
                        "DECENTRA/DELIVERY/v0.2\n"
                      ]
                    },
                    "value": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[A-Za-z0-9_-]{86}$"
                    }
                  }
                }
              }
            },
            "core": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "body",
                "signature"
              ],
              "properties": {
                "body": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "purpose",
                    "transactionId",
                    "envelopeDigest",
                    "acceptedAt",
                    "sequence",
                    "previousCommittedRecordDigest",
                    "candidateDigest",
                    "acceptorPrincipalId",
                    "decision"
                  ],
                  "properties": {
                    "purpose": {
                      "type": "string",
                      "minLength": 1
                    },
                    "transactionId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "envelopeDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "acceptedAt": {
                      "type": "string",
                      "minLength": 1,
                      "format": "date-time"
                    },
                    "sequence": {
                      "type": "integer",
                      "minimum": 0,
                      "maximum": 9007199254740991
                    },
                    "previousCommittedRecordDigest": {
                      "type": [
                        "string",
                        "null"
                      ],
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "candidateDigest": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[0-9a-f]{64}$"
                    },
                    "acceptorPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "decision": {
                      "type": "string",
                      "minLength": 1
                    }
                  }
                },
                "signature": {
                  "type": "object",
                  "additionalProperties": false,
                  "required": [
                    "algorithm",
                    "keyId",
                    "signerPrincipalId",
                    "domain",
                    "value"
                  ],
                  "properties": {
                    "algorithm": {
                      "const": "Ed25519"
                    },
                    "keyId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "signerPrincipalId": {
                      "type": "string",
                      "minLength": 1
                    },
                    "domain": {
                      "enum": [
                        "DECENTRA/SOURCE/v0.2\n",
                        "DECENTRA/EVENT/v0.2\n",
                        "DECENTRA/ACCEPT/v0.2\n",
                        "DECENTRA/DELIVERY/v0.2\n"
                      ]
                    },
                    "value": {
                      "type": "string",
                      "minLength": 1,
                      "pattern": "^[A-Za-z0-9_-]{86}$"
                    }
                  }
                }
              }
            }
          }
        },
        "recordDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "invoice": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "invoice"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "invoiceId",
            "version",
            "sellerPrincipalId",
            "buyerPrincipalId",
            "issuedAt",
            "dueAt",
            "currency",
            "amountMinor",
            "lineItems",
            "payeeReference"
          ],
          "properties": {
            "invoiceId": {
              "type": "string",
              "minLength": 1
            },
            "version": {
              "type": "string",
              "minLength": 1
            },
            "sellerPrincipalId": {
              "type": "string",
              "minLength": 1
            },
            "buyerPrincipalId": {
              "type": "string",
              "minLength": 1
            },
            "issuedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "dueAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "amountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "lineItems": {
              "type": "array",
              "minItems": 1,
              "items": {
                "type": "object",
                "additionalProperties": false,
                "required": [
                  "lineId",
                  "description",
                  "quantity",
                  "unitAmountMinor",
                  "lineAmountMinor"
                ],
                "properties": {
                  "lineId": {
                    "type": "string",
                    "minLength": 1
                  },
                  "description": {
                    "type": "string",
                    "minLength": 1
                  },
                  "quantity": {
                    "type": "string",
                    "minLength": 1
                  },
                  "unitAmountMinor": {
                    "type": "string",
                    "minLength": 1,
                    "pattern": "^(0|[1-9][0-9]*)$"
                  },
                  "lineAmountMinor": {
                    "type": "string",
                    "minLength": 1,
                    "pattern": "^(0|[1-9][0-9]*)$"
                  }
                }
              }
            },
            "payeeReference": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "buyer_authority": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "buyer_authority"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "authorityReference",
            "buyerPrincipalId",
            "invoiceArtifactId",
            "allowedPayeeReference",
            "maximumAmountMinor",
            "currency",
            "methodReference",
            "validFrom",
            "expiresAt",
            "authoritySource"
          ],
          "properties": {
            "authorityReference": {
              "type": "string",
              "minLength": 1
            },
            "buyerPrincipalId": {
              "type": "string",
              "minLength": 1
            },
            "invoiceArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "allowedPayeeReference": {
              "type": "string",
              "minLength": 1
            },
            "maximumAmountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "methodReference": {
              "type": "string",
              "minLength": 1
            },
            "validFrom": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "expiresAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "authoritySource": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "invoice_authenticity": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "invoice_authenticity"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "invoiceArtifactId",
            "invoiceContentDigest",
            "invoiceVersion",
            "registrationReference",
            "checks",
            "checkedAt",
            "meaning"
          ],
          "properties": {
            "invoiceArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "invoiceContentDigest": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[0-9a-f]{64}$"
            },
            "invoiceVersion": {
              "type": "string",
              "minLength": 1
            },
            "registrationReference": {
              "type": "string",
              "minLength": 1
            },
            "checks": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "issuerRecognized",
                "sellerSignatureValid",
                "matchesRegisteredVersion",
                "notSupersededAtCheck"
              ],
              "properties": {
                "issuerRecognized": {
                  "type": "boolean"
                },
                "sellerSignatureValid": {
                  "type": "boolean"
                },
                "matchesRegisteredVersion": {
                  "type": "boolean"
                },
                "notSupersededAtCheck": {
                  "type": "boolean"
                }
              }
            },
            "checkedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "meaning": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "payment_intent": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "payment_intent"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "instruction",
            "invoiceArtifactId",
            "invoiceContentDigest",
            "authenticityArtifactId",
            "payeeReference",
            "amountMinor",
            "currency",
            "methodReference",
            "authorityArtifactId",
            "expiresAt",
            "nonce",
            "allowPartial",
            "allowAdditionalCollection"
          ],
          "properties": {
            "instruction": {
              "type": "string",
              "minLength": 1
            },
            "invoiceArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "invoiceContentDigest": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[0-9a-f]{64}$"
            },
            "authenticityArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "payeeReference": {
              "type": "string",
              "minLength": 1
            },
            "amountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "methodReference": {
              "type": "string",
              "minLength": 1
            },
            "authorityArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "expiresAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "nonce": {
              "type": "string",
              "minLength": 1
            },
            "allowPartial": {
              "type": "boolean"
            },
            "allowAdditionalCollection": {
              "type": "boolean"
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "payment_admission": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "payment_admission"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "payIntentArtifactId",
            "decision",
            "policyVersion",
            "checkedAt",
            "checks",
            "attemptId",
            "providerIdempotencyReference",
            "meaning"
          ],
          "properties": {
            "payIntentArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "decision": {
              "const": "PERMIT"
            },
            "policyVersion": {
              "type": "string",
              "minLength": 1
            },
            "checkedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "checks": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "buyerSignature",
                "currentAuthority",
                "amountAndMethod",
                "obligationNotAlreadyPaid"
              ],
              "properties": {
                "buyerSignature": {
                  "type": "boolean"
                },
                "currentAuthority": {
                  "type": "boolean"
                },
                "amountAndMethod": {
                  "type": "boolean"
                },
                "obligationNotAlreadyPaid": {
                  "type": "boolean"
                }
              }
            },
            "attemptId": {
              "type": "string",
              "minLength": 1
            },
            "providerIdempotencyReference": {
              "type": "string",
              "minLength": 1
            },
            "meaning": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "provider_receipt": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "provider_receipt"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "provider",
            "providerPaymentReference",
            "attemptId",
            "normalizedStatus",
            "providerNativeStatus",
            "amountMinor",
            "currency",
            "observedAt",
            "rawEvidence"
          ],
          "properties": {
            "provider": {
              "type": "string",
              "minLength": 1
            },
            "providerPaymentReference": {
              "type": "string",
              "minLength": 1
            },
            "attemptId": {
              "type": "string",
              "minLength": 1
            },
            "normalizedStatus": {
              "const": "SUBMITTED"
            },
            "providerNativeStatus": {
              "type": "string",
              "minLength": 1
            },
            "amountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "observedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "rawEvidence": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "fixture",
                "message"
              ],
              "properties": {
                "fixture": {
                  "type": "boolean"
                },
                "message": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "provider_capture": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "provider_capture"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "providerPaymentReference",
            "normalizedStatus",
            "providerNativeStatus",
            "amountMinor",
            "currency",
            "observedAt",
            "rawEvidence"
          ],
          "properties": {
            "providerPaymentReference": {
              "type": "string",
              "minLength": 1
            },
            "normalizedStatus": {
              "const": "CAPTURED"
            },
            "providerNativeStatus": {
              "type": "string",
              "minLength": 1
            },
            "amountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "observedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "rawEvidence": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "fixture",
                "message"
              ],
              "properties": {
                "fixture": {
                  "type": "boolean"
                },
                "message": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "provider_settlement": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "provider_settlement"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "providerPaymentReference",
            "normalizedStatus",
            "providerNativeStatus",
            "amountMinor",
            "currency",
            "settledAt",
            "settlementReference",
            "settlementDefinition",
            "rawEvidence"
          ],
          "properties": {
            "providerPaymentReference": {
              "type": "string",
              "minLength": 1
            },
            "normalizedStatus": {
              "const": "SETTLED"
            },
            "providerNativeStatus": {
              "type": "string",
              "minLength": 1
            },
            "amountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "settledAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "settlementReference": {
              "type": "string",
              "minLength": 1
            },
            "settlementDefinition": {
              "type": "string",
              "minLength": 1
            },
            "rawEvidence": {
              "type": "object",
              "additionalProperties": false,
              "required": [
                "fixture",
                "message"
              ],
              "properties": {
                "fixture": {
                  "type": "boolean"
                },
                "message": {
                  "type": "string",
                  "minLength": 1
                }
              }
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "accounting_application": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "accounting_application"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "invoiceArtifactId",
            "providerPaymentReference",
            "writerId",
            "applicationReference",
            "appliedAmountMinor",
            "remainingBalanceMinor",
            "currency",
            "readBackAt",
            "readBackConfirmed",
            "source"
          ],
          "properties": {
            "invoiceArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "providerPaymentReference": {
              "type": "string",
              "minLength": 1
            },
            "writerId": {
              "type": "string",
              "minLength": 1
            },
            "applicationReference": {
              "type": "string",
              "minLength": 1
            },
            "appliedAmountMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "remainingBalanceMinor": {
              "type": "string",
              "minLength": 1,
              "pattern": "^(0|[1-9][0-9]*)$"
            },
            "currency": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[A-Z]{3}$"
            },
            "readBackAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "readBackConfirmed": {
              "type": "boolean"
            },
            "source": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "payment_submission": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "payment_submission"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "attemptId",
            "admissionArtifactId",
            "admissionCommittedRecordDigest",
            "envelopeDigest",
            "provider",
            "providerContract",
            "providerPaymentReference",
            "submittedAt",
            "transportEvidence",
            "executionGateEvidence"
          ],
          "properties": {
            "attemptId": {
              "type": "string",
              "minLength": 1
            },
            "admissionArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "admissionCommittedRecordDigest": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[0-9a-f]{64}$"
            },
            "envelopeDigest": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[0-9a-f]{64}$"
            },
            "provider": {
              "type": "string",
              "minLength": 1
            },
            "providerContract": {
              "type": "string",
              "minLength": 1
            },
            "providerPaymentReference": {
              "type": "string",
              "minLength": 1
            },
            "submittedAt": {
              "type": "string",
              "minLength": 1,
              "format": "date-time"
            },
            "transportEvidence": {
              "type": "string",
              "minLength": 1
            },
            "executionGateEvidence": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    },
    "final_manifest": {
      "type": "object",
      "additionalProperties": false,
      "required": [
        "artifactId",
        "artifactType",
        "mediaType",
        "provenance",
        "content",
        "contentDigest",
        "artifactDigest"
      ],
      "properties": {
        "artifactId": {
          "type": "string",
          "minLength": 1
        },
        "artifactType": {
          "const": "final_manifest"
        },
        "mediaType": {
          "type": "string",
          "minLength": 1
        },
        "provenance": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "classification",
            "assertedSource",
            "externalApiCalled"
          ],
          "properties": {
            "classification": {
              "const": "SYNTHETIC_LOCAL_FIXTURE"
            },
            "assertedSource": {
              "type": "string",
              "minLength": 1
            },
            "externalApiCalled": {
              "const": false
            }
          }
        },
        "content": {
          "type": "object",
          "additionalProperties": false,
          "required": [
            "contextDigest",
            "transactionId",
            "priorAgreedHeadDigest",
            "priorCommittedRecordDigests",
            "sourceRecordDigests",
            "artifactDigests",
            "settlementArtifactId",
            "accountingArtifactId",
            "sealScope"
          ],
          "properties": {
            "contextDigest": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[0-9a-f]{64}$"
            },
            "transactionId": {
              "type": "string",
              "minLength": 1
            },
            "priorAgreedHeadDigest": {
              "type": "string",
              "minLength": 1,
              "pattern": "^[0-9a-f]{64}$"
            },
            "priorCommittedRecordDigests": {
              "type": "array",
              "minItems": 1,
              "items": {
                "type": "string",
                "minLength": 1
              }
            },
            "sourceRecordDigests": {
              "type": "array",
              "minItems": 1,
              "items": {
                "type": "string",
                "minLength": 1
              }
            },
            "artifactDigests": {
              "type": "object",
              "minProperties": 1,
              "additionalProperties": {
                "type": "string",
                "pattern": "^[0-9a-f]{64}$"
              }
            },
            "settlementArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "accountingArtifactId": {
              "type": "string",
              "minLength": 1
            },
            "sealScope": {
              "type": "string",
              "minLength": 1
            }
          }
        },
        "contentDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        },
        "artifactDigest": {
          "type": "string",
          "minLength": 1,
          "pattern": "^[0-9a-f]{64}$"
        }
      }
    }
  }
}

Executed local checks: the specimen validates against Draft 2020-12; 41 signatures verify (3 source, 9 event actors, 27 acceptances, 2 delivery receipts). Tampered and correctly re-signed but contradictory specimens are rejected, including denied admissions, failed settlement, wrong payee/method, missing intent/manifest bindings and expired authority. This proves the example’s internal integrity—not that any business fact, authority, immutable store or settlement is real.

Run the offline fixture verification

Save the three downloads together. Requires Python 3 with cryptography and jsonschema. The verifier needs no network, signing keys or provider access.

python3 verify_dossier_json.py transaction-dossier.final.json transaction-dossier.schema.json
Signature design / current profile retained

Signed messages inside a three-party commitment.

Keep signatures where they express a distinct instruction, attestation, agreement or delivery acknowledgment. Preserve the current 41-signature specimen; do not optimize by deleting statements with different meanings.

What “multisignature” means here. Three ordinary, independently verified Ed25519 acceptance signatures over the same candidate digest—not an aggregate signature, threshold-key scheme, public blockchain or proof of production consensus. Each acceptance also binds the transaction, sequence and previous committed head.

Two layers, different meanings

COMMITTED RECORD / agreed by seller + buyer + Core
Actor-signed candidate

The actor signs the event body: instruction or attestation, transaction/context digest, sequence, previous committed-record digest, referenced evidence digests and proposed state.

Retained original messages and evidence

Seller-issued invoice; buyer instruction and authority evidence; Core decisions; original provider/accounting payloads with the authentication they actually provide. Evidence may be embedded or referenced by digest within this self-contained dossier.

candidateDigest = hash(body + actorSignature)

Three acceptance statements: seller, buyer and Core each sign acceptance of that exact candidate digest and prior head. Their signatures do not all mean “authorize payment.”

recordDigest = hash(candidate + all three acceptances)

NEXT COMMITTED RECORD BINDS THIS COMPLETED RECORD DIGEST

Envelope binding: actor bodies and acceptance statements bind the same envelope digest. Signed acceptance times establish claimed ordering; pre-submission agreement must finish inside the window. Post-deadline settlement, accounting and seal acceptances remain permitted. No new per-transaction identity certificates or extra signatures are introduced.

This diagram describes the existing JSON fields, not a new wire format. The originals live once in artifacts / sourceRecords; signed digest references bind them into the appropriate event. An artifact needs its own signature only when independent attribution or another distinct assertion is required.

Signature placement, step by step

Record / stageCurrent signaturesMeaning and protection boundary
INVOICE_ISSUEDseller · one source signatureSeller issues this exact invoice/version; not buyer approval.
INVOICE_REGISTEREDcore · one source signatureCore registers and retains the seller-issued invoice; not authority to charge.
INVOICE_AUTHENTICITY_ATTESTEDcore · one source signatureCore reports its authenticity/version checks at the stated check time; not debt acceptance.
GENESIS_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesEstablish the shared context, invoice and retained prehistory. Buyer joins the shared record; no payment instruction yet.
PAYMENT_INTENT_ACCEPTEDbuyer actor signature + seller / buyer / Core acceptance signaturesBuyer authorizes this invoice, payee, amount, currency and method within the stated authority and expiry. Other acceptances do not grant buyer authority.
PAYMENT_ADMISSION_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesCore attests PERMIT under its policy checks. The complete committed authorization/admission certificate must gate execution.
PAYMENT_SUBMISSION_RECORDEDcore actor signature + seller / buyer / Core acceptance signaturesCore records the correlated provider submission. This is an observation of an effect, not a new permission to charge.
PROVIDER_RECEIPT_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesCommit the correlated provider acknowledgment; submission is not capture or settlement.
CAPTURE_EVIDENCE_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesCommit capture evidence under the selected provider contract; capture is not settlement.
SETTLEMENT_EVIDENCE_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesCommit authenticated, correlated settlement evidence under a qualified settlement definition. Agreement alone cannot establish provider truth.
ACCOUNTING_APPLICATION_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesCommit the matched accounting application and confirmed readback; payment and accounting remain distinct facts.
DOSSIER_SEAL_ACCEPTEDcore actor signature + seller / buyer / Core acceptance signaturesCommit the final manifest covering retained evidence and prior agreed history; no extra detached Core seal is required.
DOSSIER_DELIVERY_ACK · sellerseller · one signed sidecarRecipient acknowledges later receipt of the exact completed sealed record; not another payment approval.
DOSSIER_DELIVERY_ACK · buyerbuyer · one signed sidecarRecipient acknowledges later receipt of the exact completed sealed record; not another payment approval.

Current total: 3 prehistory signatures + 9 actor signatures + 27 acceptance signatures + 2 delivery acknowledgments = 41. The final seal is already a three-party-accepted event. Delivery receipts are post-seal sidecars: they bind the completed seal and do not create another three-party consensus round.

Why retain both an actor signature and acceptance?

“I issue this invoice,” “I authorize this payment,” “I attest this observation” and “I accept this next shared record” are different statements, potentially made at different times. In the current protocol the actor signs the event body; acceptors sign a digest that also includes that actor signature. Different bodies and signature domains mean those signatures cannot simply be reused.

A possible future 32-signature redesign would retain 3 prehistory signatures, 27 role-aware event signatures and 2 delivery acknowledgments. Each actor would explicitly sign “I originate/attest this event and accept this transition,” while the other two accept it. That requires a versioned change to signed semantics, proposal/digest construction, schema and verifier. It is not implemented or recommended as a deletion from this specimen. Do not merge registration with a later authenticity check unless timing and audit requirements intentionally change. Removing delivery acknowledgments also removes signed proof of later receipt.

Agreeing only at selected milestones could reduce signing further, but would change the requirement that every currently committed step is accepted by all three parties. Routine polling, retries of message transport and progress notifications need no additional dossier signatures unless they make a new necessary assertion. Observed provider facts can arrive while a party is offline; commitment pauses, but an already-moving payment rail does not.

The full payload grows; the history is not copied recursively

The downloadable specimen contains full signature values and nested candidate/acceptance objects, not placeholders. Its business messages are deliberately small invented examples. A real dossier would retain richer original invoices, structured messages, applicable authority evidence, full provider receipts, accounting readbacks and historical verification material.

Inspect the actual signed buyer-authorization record from this specimen

Unmodified record from committedEvents[1]. Resolve its artifact references in the complete downloadable dossier; this excerpt is not a standalone dossier.

{
  "candidate": {
    "body": {
      "eventId": "urn:example:event:2",
      "transactionId": "urn:example:transaction:INV-1042",
      "sequence": 2,
      "eventType": "PAYMENT_INTENT_ACCEPTED",
      "recordedAt": "2026-10-21T20:05:00Z",
      "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
      "contextDigest": "d959bd0e2651e3c76e19dea96978df0071d3022db0b0f78734e4e1d1db718faa",
      "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
      "artifactRefs": [
        "pay-intent",
        "buyer-authority"
      ],
      "artifactDigests": {
        "pay-intent": "0fa2fd17cf96752530953cc01b637fd370d0001c10df826c946a22c0133f172f",
        "buyer-authority": "da9067a9daa092528a3154d852f227923b0da2a13c660a0ad7034314b0e7e462"
      },
      "sourceRecordRefs": [],
      "sourceRecordDigests": {},
      "proposedState": {
        "phase": "PAYMENT_AUTHORIZED",
        "paymentStatus": "NOT_SUBMITTED",
        "accountingStatus": "NOT_APPLIED",
        "sealed": false
      }
    },
    "actorSignature": {
      "algorithm": "Ed25519",
      "keyId": "urn:example:key:buyer",
      "signerPrincipalId": "urn:example:principal:buyer",
      "domain": "DECENTRA/EVENT/v0.2\n",
      "value": "hsWtf4KxgHPQOpvZ_Fm1McNFuk9yebNrz0Ls776o1HUp0WVohVG0IVxdf9rS1ArA3onj9N-2CkGmp7RVtaTZCQ"
    }
  },
  "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
  "acceptances": {
    "seller": {
      "body": {
        "purpose": "ACCEPT_TRANSITION",
        "transactionId": "urn:example:transaction:INV-1042",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "acceptedAt": "2026-10-21T20:05:00Z",
        "sequence": 2,
        "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
        "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
        "acceptorPrincipalId": "urn:example:principal:seller",
        "decision": "ACCEPT"
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:seller",
        "signerPrincipalId": "urn:example:principal:seller",
        "domain": "DECENTRA/ACCEPT/v0.2\n",
        "value": "JmP7qruJkBehYC3C42l9FFtdUtadRNHKGQOYJ1R4wFeIVc8orfHMR15nst5rjz8CvEi14Iq77CvSzpGR6kPqCA"
      }
    },
    "buyer": {
      "body": {
        "purpose": "ACCEPT_TRANSITION",
        "transactionId": "urn:example:transaction:INV-1042",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "acceptedAt": "2026-10-21T20:05:00Z",
        "sequence": 2,
        "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
        "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
        "acceptorPrincipalId": "urn:example:principal:buyer",
        "decision": "ACCEPT"
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:buyer",
        "signerPrincipalId": "urn:example:principal:buyer",
        "domain": "DECENTRA/ACCEPT/v0.2\n",
        "value": "pFyozCLN7QGXbe_AaXQvYsYAhPXSqBnEBKwTxUChA0nmiwuDBfFPnnPIrqF5JQoOBakqkrWLNAYDLxLGaircBg"
      }
    },
    "core": {
      "body": {
        "purpose": "ACCEPT_TRANSITION",
        "transactionId": "urn:example:transaction:INV-1042",
        "envelopeDigest": "edba3101cf735047f2372f46d228969b5695bb0f97848a82fa065c89254ac712",
        "acceptedAt": "2026-10-21T20:05:00Z",
        "sequence": 2,
        "previousCommittedRecordDigest": "66ca4a258336ca9c024bb226ca326b60db1d43beef913dfb7a21d7fc63565f16",
        "candidateDigest": "7267759b9c59a407b5f9d31f5fdc1629cf2d0298242aac1489738380ea64b59d",
        "acceptorPrincipalId": "urn:example:principal:core",
        "decision": "ACCEPT"
      },
      "signature": {
        "algorithm": "Ed25519",
        "keyId": "urn:example:key:core",
        "signerPrincipalId": "urn:example:principal:core",
        "domain": "DECENTRA/ACCEPT/v0.2\n",
        "value": "B9ANMA-igRX1_K5hzc9mclYHEdPXfTic4K0tUUPuISv7s3lrQFt-n9V8fl576-Fiu4mRYDUY0Etki0u-a49gDg"
      }
    }
  },
  "recordDigest": "93141a9e13a2c6d7b6036988b7cff8cda12c679c503852da2644777321bc5f04"
}

Threats: what is protected, and what still needs enforcement

Altered or substituted messages
Verify trusted signer roles, purpose/domain separation, canonical bytes, context/transaction binding, artifact-envelope digests, predecessor and all required signatures. Reject unknown schema versions, invalid evidence and inconsistent business facts—not just bad signatures.
Forged settlement or a malicious Core
Core’s signature attributes its claim; three acceptances establish agreement on those bytes, not independent provider truth. Preserve and authenticate provider/accounting originals and independently verify them where available. Use provider signatures where supported; otherwise disclose the trusted connector/observer boundary. This fixture has no provider-signed settlement evidence.
Unauthorized or out-of-band payment
A fail-closed executor must verify the fully committed authorization/admission certificate before the effect, recheck executable authority and expiry/revocation at execution, and enforce exact payee, amount, currency, method and attempt. Isolate least-privilege credentials and prevent alternate payment paths. Unrestricted credentials can bypass a dossier.
Replay, duplicate payment and crash recovery
Signed transaction IDs and nonces are not persistent uniqueness enforcement. Atomically consume intent/attempt authority, persist obligation-level deduplication and execution outcomes, and reconcile uncertain provider results before retrying. Ordinary transport retries do not authorize fresh payment attempts.
Forks, stale heads and withholding
Each independently controlled signer must durably track its accepted head, refuse conflicting successors and compare heads during synchronization. A valid chain is not proof that it is the latest or only chain. Three-of-three can block progress if a party refuses or is offline; define recovery and availability without silently relaxing authorization.
Compromised or self-asserted identities
Authenticate keys outside the dossier and enforce organization/role separation, delegated authority, rotation, revocation and historical validity. Embedded demo keys and distinct role labels do not establish independent key custody. More signatures under one compromised controller are not independent protection.

Production prerequisites—not claims of implemented protection

  1. Identity and key trust: independently authenticated participants, protected independent signing keys, delegation and historical key validity.
  2. Effect gate: enforce the completed authorization/admission certificate at the only permitted provider-execution boundary.
  3. Replay and fork controls: durable heads, non-equivocation, atomic uniqueness, recovery, synchronization and evidence of conflicting proposals.
  4. External evidence: qualify actual provider events and settlement definitions; authenticate and correlate provider/accounting records, with explicit residual trust.
  5. Real financial mandate: replace fixture authority assumptions with scoped, authenticated authority checked when the effect occurs. KYA registration is not permission to spend.
  6. Retention and protocol governance: independently retained recoverable copies, access controls, canonicalization/schema governance and explicit signature semantics. Claimed timestamps require a defined clock/freshness trust model; signing a timestamp does not independently prove its time.
Decision: retain the current signed-message + three-party-commitment structure and all 41 signatures. Add no blanket signatures for every artifact or network message. The offline verifier proves internal consistency of this synthetic profile—not external business truth, global replay prevention, production key trust, immutable storage or a Byzantine consensus implementation.
03 / Deliberate boundaries

A core—not an agent platform or a payment rail

Remain outside the core

  • Agent reasoning, planning, negotiation and general business workflows.
  • Buyer identity issuers, entitled approval sources and commercial decisions.
  • Authoritative invoices, receivable balances and accounting records.
  • Payment processing, issuer authorization and settlement through existing providers.

Not required for the first implementation

  • A new KYA network, mandatory agent wallet or shared corporate-budget service.
  • Credit issuance, funds custody or a new accounting ledger.
  • A unified atomic verification/reservation/signing “weld”. The worked example’s signed event chain is a separately proposed contract.
  • A common agent runtime, new general-purpose protocol or universal provider compatibility.

A seller may request payment; only a legitimate buyer authority can permit it. Reuse existing connectors and controls before building an adapter. No particular payment provider, agent framework or enterprise system is a mandatory dependency of this logical architecture.

04 / Evidence and scope

Design intent, not a maturity upgrade

Bounded authentication, approval, credential-isolation and recovery patterns inform this map. The portable obligation/approval contract, protected provider adapter, accounting recovery and combined core still need engineering qualification. The diagram is not evidence of an assembled or production-supported end-to-end system.

Internal source references and limits

This separate Foldy synthesizes the read-only cross-Foldy audit completed on October 21, 2026. The five families are a proposed product-facing grouping of the broader layers; integration is cross-cutting. No fresh source-code tests, payment calls, provider qualification, legal/IP opinion or production acceptance is claimed. No other Foldy, agent framework, repository, commercial model or partner brief is changed.

Payroc example source check: official AR Automation and Payroc idempotency pages reviewed on October 21, 2026. Payroc documents UUID v4 keys for POST/PATCH and seven-day request/response retention; that is not indefinite obligation-level duplicate prevention. No payment, subscription, approval or accounting API was called.

v0.7 design assumption: both agents are already registered through KYA; enrollment will be designed separately. The seller-side preparation, invoice schema, seller signature and Decentra countersigned registration are proposed requirements added to this example, not independently demonstrated capabilities.

v0.7 shared-state design: seller, buyer and Core independently retain and accept committed transitions. Observed provider facts remain explicit until agreement. These are architecture requirements, not implementation, cryptographic, consensus, immutable-storage or provider-settlement qualification.