Production authority

Verify signed purchase authority and issue a signed receipt

A qualifying live ALLOW requires an active VERIFY-scoped live key, registered mandate, account-pinned key, exact signed issuer/audience/protocol, fresh one-time challenge, signed freshness, exact purchase binding, durable replay state, signed receipt, public transparency record, private execution audit, a RUNNING account-wide execution interlock and an atomically RESERVED cumulative-budget authorization. The response is not permission to submit directly: a trusted gateway must use a separate PROCESSOR-scoped key to obtain the single winning CONSUME transition and a fresh exact-bound permit claim, then attempt an idempotent provider request. These MandateShield state transitions do not guarantee exactly-once provider delivery. Anonymous and test calls can inspect cryptographic behavior but are never executable.

post/api/v2/verify

Request

  • Base URL: https://mandateshield.com
  • URL: https://mandateshield.com/api/v2/verify
  • Auth: one of:
    • HTTP bearer
    • none

Request body

evidenceCryptographicEvidence required(unresolved $ref)

Response

Verification completed. Inspect every execution-invariant field; HTTP 200 is not authorization.

decision'ALLOW' | 'REVIEW' | 'BLOCK' required
policy_decision'ALLOW' | 'REVIEW' | 'BLOCK'
scoreinteger required

Deterministic control-coverage indicator, not a calibrated probability of fraud or loss.

receiptstring required
checked_atstring date-time required
protocolstring required
recommended_actionstring required
mode'sandbox' | 'test' | 'live' | 'strict' required
persistedboolean required
enforcement_authorizedboolean required

Always false for v1. In strict v2, true means a short-lived execution reservation committed atomically; an integrating processor must still obtain the single winning CONSUME transition and fresh exact-bound permit claim before an idempotent provider request. MandateShield does not guarantee exactly-once provider delivery.

Changes

No recorded changes to this operation across all 1 revision of this API.