Capture actual encrypted customer evidence with original source custody and reviewed retention policy

POST/customers/{id}/records

Fresh records writer staff or customers:records:ingest service required. An ingest service may assert only its own source_service and has no record read authority. Capture actual content, base64 in JSON and limited to 256 KiB, matching SHA-256, source custody, original creation time and reviewed category. Each record gets an AES-GCM envelope with a random data key bound to its record ID. Missing retention-event evidence preserves indefinitely until an independently approved retention_event control. Existing customer-wide holds cover new records automatically. Idempotency is exact-content and actor bound; source references are unique per customer/source.

Path parameters

idstringRequired

Headers

Idempotency-KeystringRequired

Send on every write that creates or changes money or state; a replay with the same key returns the original result with 200.

Body parameters

categorystringRequired

contentstring · byteRequired

Base64 in JSON; maximum 256 KiB per evidenced record

content_sha256stringRequired

content_typestringRequired

created_atstring · date-timeRequired

evidence_refstringRequired

evidence_sha256stringRequired

reasonstringRequired

retention_event_atstring · date-time or nullOptional

source_refstringRequired

source_servicestringRequired

Returns

200 OK

active_holdsarray of stringsRequired

categorystringRequired

content_bytesintegerRequired

content_sha256stringRequired

content_typestringRequired

created_atstring · date-timeRequired

customer_idstringRequired

Example cust_2tVh8nqLxq4GbDe0K1F6S9zRcWm

disposed_atstring · date-time or nullOptional

idstringRequired

permanentbooleanRequired

recorded_atstring · date-timeRequired

recorded_bystringRequired

retain_untilstring · date-time or nullOptional

retention_starts_atstring · date-time or nullOptional

schedule_idstringRequired

source_refstringRequired

source_servicestringRequired

Errors

Every error is a problem document with a stable code. See Errors.

400401403404409412413422424429500503