Verify and retain signed actual placement settlement before transferring DDA liability off bank
/deposit-placements/{id}/receiptsOnly the retained program's authorized bridge submits actual signed settlement/cancellation. Ed25519 signature binds the original instruction, allocation, owner/bank/capacity, amount, evidence bytes/hash and actual date. One provider settlement/allocation claim cannot back two commands. Receipt is durable before ledger mutation; exact accounting plans/journal keys recover uncertainty without duplicate money. Valid late external settlement remains actual evidence; open-period correction retains its original date and exception. Customer DDA liability leaves on placement and returns with actual paid interest on redemption; no agency asset is booked as bank-owned.
Path parameters
idstringRequiredHeaders
Idempotency-KeystringOptionalSend on every write that creates or changes money or state; a replay with the same key returns the original result with 200.
Body parameters
capacitystringRequiredcurrency_codestringRequiredevidencestring · byteRequiredevidence_formatstringRequiredevidence_sha256stringRequiredexternal_account_referencestringRequiredfdic_certificatestringRequiredinstruction_sha256stringRequiredinterest_amountintegerRequiredkey_idstringRequiredobserved_atstring · date-timeRequiredoperationstringRequiredowner_idstringRequiredprincipal_amountintegerRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
settlement_referencestringRequiredsignaturestringRequiredstatusstringRequiredversionstringRequiredReturns
200 OK
accounting_plan_sha256stringOptionalaccounting_plansarray of objectsOptional7 child attributes
correction_reasonstringOptionalcreated_atstring · date-timeRequiredjournalobjectRequiredJournal excludes ledger-assigned identity/time and separately authenticated actors. Entry order is part of the instruction, matching the ledger replay fingerprint.
11 child attributes
adjusts_periodstringOptionaleffective_datestring · dateRequiredA business date, YYYY-MM-DD
entriesarray of objectsRequired4 child attributes
amountintegerRequiredcurrency_codestringRequireddirectionstringRequiredledger_account_idstringRequiredExample lacc_2tVh8nqLxq4GbDe0K1F6S9zRcWm
kindstringRequiredprotected_command_idstringRequiredreasonstringOptionalrelease_hold_idstringOptionalExample hold_2tVh8nqLxq4GbDe0K1F6S9zRcWm
require_availablebooleanOptionalreversal_ofstringOptionalsource_refstringRequiredsource_servicestringRequiredjournal_keystringRequiredjournal_sha256stringRequiredreceipt_sha256stringRequiredsupersedes_sha256stringOptionalactorstringRequiredcapacityobjectRequired8 child attributes
actorstringRequiredcapacityobject or nullOptional7 child attributes
capacitystringRequiredSingle only in this implementation
evidenceobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredexternal_amountinteger or nullOptionalIncludes principal + accrued interest, excludes this module's positions
fdic_certificatestringRequiredobserved_atstring · date-timeRequiredowner_idstringRequiredvalid_untilstring · date-timeRequiredcontent_sha256stringRequiredcreated_atstring · date-timeRequireddecisionobject or nullOptional5 child attributes
actorstringRequiredatstring · date-timeRequiredcontent_sha256stringRequireddecisionstringRequirednotestringRequiredidstringRequiredkindstringRequiredprogramobject or nullOptional24 child attributes
agency_agreementobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredagency_titlestringRequiredannual_rate_bpsintegerRequiredSame actual and customer-facing terms
bank_eligibilityobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredbridge_subjectstringRequiredcapacity_rulesobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredcustomer_disclosureobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredenabledbooleanRequiredfdic_certificatestringRequiredinterest_basisstringRequiredinterest_reserve_amountintegerRequiredlegal_entitystringRequiredmaturity_datestring · date or nullOptionalA business date, YYYY-MM-DD
max_principal_amountintegerRequiredproductstringRequiredDemand or certificate
providerstringRequiredreceipt_keysobjectRequiredreceiver_referencestringRequiredreceiving_bank_namestringRequiredrouting_numberstringRequiredtax_reporterstringRequiredtax_reporting_agreementobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredvalid_fromstring · dateRequiredA business date, YYYY-MM-DD
valid_throughstring · dateRequiredA business date, YYYY-MM-DD
cash_hold_idstringOptionalExample hold_2tVh8nqLxq4GbDe0K1F6S9zRcWm
created_atstring · date-timeRequiredcustomer_hold_idstringOptionalExample hold_2tVh8nqLxq4GbDe0K1F6S9zRcWm
decisionobject or nullOptional5 child attributes
actorstringRequiredatstring · date-timeRequiredcontent_sha256stringRequireddecisionstringRequirednotestringRequiredexceptionsarray of stringsRequiredidstringRequiredinstructionobject or nullOptionalInstruction is an immutable, authorized bridge command. Reading a draft is not dispatch.
22 child attributes
agency_titlestringRequiredannual_rate_bpsintegerRequiredcapacitystringRequiredcurrency_codestringRequiredexternal_account_referencestringOptionalfdic_certificatestringRequiredidstringRequiredinterest_basisstringRequiredissued_atstring · date-timeRequiredmaturity_datestring · date or nullOptionalA business date, YYYY-MM-DD
operationstringRequiredowner_idstringRequiredplacement_idstringRequiredprincipal_amountintegerRequiredproductstringRequiredprogram_idstringRequiredprogram_sha256stringRequiredreceiver_referencestringRequiredrouting_numberstringRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
sha256stringRequiredstanding_authorization_sha256stringOptionaljournal_idstringOptionalExample jrnl_2tVh8nqLxq4GbDe0K1F6S9zRcWm
latest_statementobject or nullOptionalStatement is the receiving bank's signed principal and accrued-interest observation for an existing allocation. It is not a funds-transfer receipt.
16 child attributes
accrued_interest_amountintegerRequiredas_ofstring · dateRequiredA business date, YYYY-MM-DD
capacitystringRequiredevidencestring · byteRequiredevidence_formatstringRequiredevidence_sha256stringRequiredexternal_account_referencestringRequiredfdic_certificatestringRequiredkey_idstringRequiredobserved_atstring · date-timeRequiredoriginal_instruction_sha256stringRequiredowner_idstringRequiredplacement_idstringRequiredprincipal_amountintegerRequiredsignaturestringRequiredversionstringRequiredposting_datestring · date or nullOptionalA business date, YYYY-MM-DD
prior_redemptionsarray of objectsOptional13 child attributes
accounting_plan_sha256stringOptionalaccounting_plansarray of objectsOptional7 child attributes
correction_reasonstringOptionalcreated_atstring · date-timeRequiredjournalobjectRequiredJournal excludes ledger-assigned identity/time and separately authenticated actors. Entry order is part of the instruction, matching the ledger replay fingerprint.
11 child attributes
adjusts_periodstringOptionaleffective_datestring · dateRequiredA business date, YYYY-MM-DD
entriesarray of objectsRequiredkindstringRequiredprotected_command_idstringRequiredreasonstringOptionalrelease_hold_idstringOptionalExample hold_2tVh8nqLxq4GbDe0K1F6S9zRcWm
require_availablebooleanOptionalreversal_ofstringOptionalsource_refstringRequiredsource_servicestringRequiredjournal_keystringRequiredjournal_sha256stringRequiredreceipt_sha256stringRequiredsupersedes_sha256stringOptionalactorstringRequiredcreated_atstring · date-timeRequiredidstringRequiredidempotency_keystringRequiredinstructionobjectRequiredInstruction is an immutable, authorized bridge command. Reading a draft is not dispatch.
22 child attributes
agency_titlestringRequiredannual_rate_bpsintegerRequiredcapacitystringRequiredcurrency_codestringRequiredexternal_account_referencestringOptionalfdic_certificatestringRequiredidstringRequiredinterest_basisstringRequiredissued_atstring · date-timeRequiredmaturity_datestring · date or nullOptionalA business date, YYYY-MM-DD
operationstringRequiredowner_idstringRequiredplacement_idstringRequiredprincipal_amountintegerRequiredproductstringRequiredprogram_idstringRequiredprogram_sha256stringRequiredreceiver_referencestringRequiredrouting_numberstringRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
sha256stringRequiredstanding_authorization_sha256stringOptionaljournal_idstringOptionalExample jrnl_2tVh8nqLxq4GbDe0K1F6S9zRcWm
posting_datestring · date or nullOptionalA business date, YYYY-MM-DD
receiptobject or nullOptionalReceipt is signed by a key in the independently approved retained program. Evidence retains the receiving-bank allocation and actual settlement confirmation, not an ACK.
19 child attributes
capacitystringRequiredcurrency_codestringRequiredevidencestring · byteRequiredevidence_formatstringRequiredevidence_sha256stringRequiredexternal_account_referencestringRequiredfdic_certificatestringRequiredinstruction_sha256stringRequiredinterest_amountintegerRequiredkey_idstringRequiredobserved_atstring · date-timeRequiredoperationstringRequiredowner_idstringRequiredprincipal_amountintegerRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
settlement_referencestringRequiredsignaturestringRequiredstatusstringRequiredversionstringRequiredrequest_sha256stringRequiredstatusstringRequiredsweep_authorizationobject or nullOptionalGenerated Placement.Actor and Redemption.Actor retain Mandate.Consent.Actor, the real authorizing customer. Run.Actor and persistence events identify the actual executing bridge; callers must never synthesize customer claims or a fresh human approval to execute this retained standing authority.
5 child attributes
bridge_subjectstringRequiredmandateobjectRequired10 child attributes
actorstringRequiredconsentobject or nullOptionalcontent_sha256stringRequiredcreated_atstring · date-timeRequireddecisionobject or nullOptionaldisclosureobjectRequiredidstringRequiredprogramobjectRequiredsourceobjectRequiredtermsobjectRequiredSweepTerms authorize one demand program and full-position redemption only. The source service must prove this is an open USD DDA with exactly one owner.
runobjectRequiredThe full run is independently durable. Its exact source and deterministic selection must be reverified by the application before issuing or claiming.
8 child attributes
actorstringRequiredbusiness_datestring · dateRequiredA business date, YYYY-MM-DD
content_sha256stringRequiredcreated_atstring · date-timeRequiredidstringRequiredobservation_sha256stringRequiredselectionobjectRequiredsourceobjectRequiredsha256stringRequiredversionstringRequiredprogramobjectRequired8 child attributes
actorstringRequiredcapacityobject or nullOptional7 child attributes
capacitystringRequiredSingle only in this implementation
evidenceobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredexternal_amountinteger or nullOptionalIncludes principal + accrued interest, excludes this module's positions
fdic_certificatestringRequiredobserved_atstring · date-timeRequiredowner_idstringRequiredvalid_untilstring · date-timeRequiredcontent_sha256stringRequiredcreated_atstring · date-timeRequireddecisionobject or nullOptional5 child attributes
actorstringRequiredatstring · date-timeRequiredcontent_sha256stringRequireddecisionstringRequirednotestringRequiredidstringRequiredkindstringRequiredprogramobject or nullOptional24 child attributes
agency_agreementobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredagency_titlestringRequiredannual_rate_bpsintegerRequiredSame actual and customer-facing terms
bank_eligibilityobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredbridge_subjectstringRequiredcapacity_rulesobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredcustomer_disclosureobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredenabledbooleanRequiredfdic_certificatestringRequiredinterest_basisstringRequiredinterest_reserve_amountintegerRequiredlegal_entitystringRequiredmaturity_datestring · date or nullOptionalA business date, YYYY-MM-DD
max_principal_amountintegerRequiredproductstringRequiredDemand or certificate
providerstringRequiredreceipt_keysobjectRequiredreceiver_referencestringRequiredreceiving_bank_namestringRequiredrouting_numberstringRequiredtax_reporterstringRequiredtax_reporting_agreementobjectRequired2 child attributes
referencestringRequiredsha256stringRequiredvalid_fromstring · dateRequiredA business date, YYYY-MM-DD
valid_throughstring · dateRequiredA business date, YYYY-MM-DD
receiptobject or nullOptionalReceipt is signed by a key in the independently approved retained program. Evidence retains the receiving-bank allocation and actual settlement confirmation, not an ACK.
19 child attributes
capacitystringRequiredcurrency_codestringRequiredevidencestring · byteRequiredevidence_formatstringRequiredevidence_sha256stringRequiredexternal_account_referencestringRequiredfdic_certificatestringRequiredinstruction_sha256stringRequiredinterest_amountintegerRequiredkey_idstringRequiredobserved_atstring · date-timeRequiredoperationstringRequiredowner_idstringRequiredprincipal_amountintegerRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
settlement_referencestringRequiredsignaturestringRequiredstatusstringRequiredversionstringRequiredredemptionobject or nullOptional13 child attributes
accounting_plan_sha256stringOptionalaccounting_plansarray of objectsOptional7 child attributes
correction_reasonstringOptionalcreated_atstring · date-timeRequiredjournalobjectRequiredJournal excludes ledger-assigned identity/time and separately authenticated actors. Entry order is part of the instruction, matching the ledger replay fingerprint.
11 child attributes
adjusts_periodstringOptionaleffective_datestring · dateRequiredA business date, YYYY-MM-DD
entriesarray of objectsRequiredkindstringRequiredprotected_command_idstringRequiredreasonstringOptionalrelease_hold_idstringOptionalExample hold_2tVh8nqLxq4GbDe0K1F6S9zRcWm
require_availablebooleanOptionalreversal_ofstringOptionalsource_refstringRequiredsource_servicestringRequiredjournal_keystringRequiredjournal_sha256stringRequiredreceipt_sha256stringRequiredsupersedes_sha256stringOptionalactorstringRequiredcreated_atstring · date-timeRequiredidstringRequiredidempotency_keystringRequiredinstructionobjectRequiredInstruction is an immutable, authorized bridge command. Reading a draft is not dispatch.
22 child attributes
agency_titlestringRequiredannual_rate_bpsintegerRequiredcapacitystringRequiredcurrency_codestringRequiredexternal_account_referencestringOptionalfdic_certificatestringRequiredidstringRequiredinterest_basisstringRequiredissued_atstring · date-timeRequiredmaturity_datestring · date or nullOptionalA business date, YYYY-MM-DD
operationstringRequiredowner_idstringRequiredplacement_idstringRequiredprincipal_amountintegerRequiredproductstringRequiredprogram_idstringRequiredprogram_sha256stringRequiredreceiver_referencestringRequiredrouting_numberstringRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
sha256stringRequiredstanding_authorization_sha256stringOptionaljournal_idstringOptionalExample jrnl_2tVh8nqLxq4GbDe0K1F6S9zRcWm
posting_datestring · date or nullOptionalA business date, YYYY-MM-DD
receiptobject or nullOptionalReceipt is signed by a key in the independently approved retained program. Evidence retains the receiving-bank allocation and actual settlement confirmation, not an ACK.
19 child attributes
capacitystringRequiredcurrency_codestringRequiredevidencestring · byteRequiredevidence_formatstringRequiredevidence_sha256stringRequiredexternal_account_referencestringRequiredfdic_certificatestringRequiredinstruction_sha256stringRequiredinterest_amountintegerRequiredkey_idstringRequiredobserved_atstring · date-timeRequiredoperationstringRequiredowner_idstringRequiredprincipal_amountintegerRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
settlement_referencestringRequiredsignaturestringRequiredstatusstringRequiredversionstringRequiredrequest_sha256stringRequiredstatusstringRequiredsweep_authorizationobject or nullOptionalGenerated Placement.Actor and Redemption.Actor retain Mandate.Consent.Actor, the real authorizing customer. Run.Actor and persistence events identify the actual executing bridge; callers must never synthesize customer claims or a fresh human approval to execute this retained standing authority.
5 child attributes
bridge_subjectstringRequiredmandateobjectRequired10 child attributes
actorstringRequiredconsentobject or nullOptionalcontent_sha256stringRequiredcreated_atstring · date-timeRequireddecisionobject or nullOptionaldisclosureobjectRequiredidstringRequiredprogramobjectRequiredsourceobjectRequiredtermsobjectRequiredSweepTerms authorize one demand program and full-position redemption only. The source service must prove this is an open USD DDA with exactly one owner.
runobjectRequiredThe full run is independently durable. Its exact source and deterministic selection must be reverified by the application before issuing or claiming.
8 child attributes
actorstringRequiredbusiness_datestring · dateRequiredA business date, YYYY-MM-DD
content_sha256stringRequiredcreated_atstring · date-timeRequiredidstringRequiredobservation_sha256stringRequiredselectionobjectRequiredsourceobjectRequiredsha256stringRequiredversionstringRequiredrequestobjectRequired9 child attributes
account_idstringRequiredExample acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm
agency_consentbooleanRequiredamountintegerRequiredcapacity_idstringRequiredcurrency_codestringRequireddisclosure_sha256stringRequiredprogram_idstringRequiredsettlement_datestring · dateRequiredA business date, YYYY-MM-DD
standing_authorization_sha256stringOptionalrequest_sha256stringRequiredscreening_atstring · date-time or nullOptionalscreening_idsarray of stringsOptionalsourceobjectRequired6 child attributes
account_idstringRequiredExample acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm
captured_atstring · date-timeRequiredledger_account_idstringRequiredExample lacc_2tVh8nqLxq4GbDe0K1F6S9zRcWm
owner_idstringRequiredownership_revisionintegerRequiredownership_sha256stringRequiredstatusstringRequiredsweep_authorizationobject or nullOptionalGenerated Placement.Actor and Redemption.Actor retain Mandate.Consent.Actor, the real authorizing customer. Run.Actor and persistence events identify the actual executing bridge; callers must never synthesize customer claims or a fresh human approval to execute this retained standing authority.
5 child attributes
bridge_subjectstringRequiredmandateobjectRequired10 child attributes
actorstringRequiredconsentobject or nullOptional7 child attributes
accepted_atstring · date-timeRequiredactorstringRequiredcontent_sha256stringRequiredidstringRequiredmandate_idstringRequiredrequestobjectRequiredsourceobjectRequiredcontent_sha256stringRequiredcreated_atstring · date-timeRequireddecisionobject or nullOptional5 child attributes
actorstringRequiredatstring · date-timeRequiredcontent_sha256stringRequireddecisionstringRequirednotestringRequireddisclosureobjectRequired14 child attributes
agency_titlestringRequiredannual_rate_bpsintegerRequiredcustomer_disclosureobjectRequiredfdic_certificatestringRequiredinsurance_noticestringRequiredinterest_basisstringRequiredmaturity_datestring · date or nullOptionalA business date, YYYY-MM-DD
productstringRequiredprogram_idstringRequiredprogram_sha256stringRequiredreceiving_bank_namestringRequiredsha256stringRequiredtax_reporterstringRequiredtax_reporting_agreementobjectRequiredidstringRequiredprogramobjectRequired8 child attributes
actorstringRequiredcapacityobject or nullOptionalcontent_sha256stringRequiredcreated_atstring · date-timeRequireddecisionobject or nullOptionalidstringRequiredkindstringRequiredprogramobject or nullOptionalsourceobjectRequired6 child attributes
account_idstringRequiredExample acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm
captured_atstring · date-timeRequiredledger_account_idstringRequiredExample lacc_2tVh8nqLxq4GbDe0K1F6S9zRcWm
owner_idstringRequiredownership_revisionintegerRequiredownership_sha256stringRequiredtermsobjectRequiredSweepTerms authorize one demand program and full-position redemption only. The source service must prove this is an open USD DDA with exactly one owner.
10 child attributes
account_idstringRequiredExample acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm
full_position_redemptionbooleanRequiredhigh_watermarkintegerRequiredlow_watermarkintegerRequiredmax_daily_outward_amountintegerRequiredprogram_idstringRequiredtarget_balanceintegerRequiredtarget_overshootbooleanRequiredvalid_fromstring · dateRequiredA business date, YYYY-MM-DD
valid_throughstring · dateRequiredA business date, YYYY-MM-DD
runobjectRequiredThe full run is independently durable. Its exact source and deterministic selection must be reverified by the application before issuing or claiming.
8 child attributes
actorstringRequiredbusiness_datestring · dateRequiredA business date, YYYY-MM-DD
content_sha256stringRequiredcreated_atstring · date-timeRequiredidstringRequiredobservation_sha256stringRequiredselectionobjectRequired6 child attributes
amountintegerRequiredPrincipal; redemption interest remains actual receipt evidence
blockersarray of stringsRequiredoperationstringRequiredPlace, redeem, noop, refused
placement_idstringOptionalreasonstringRequiredredemption_idstringOptionalsourceobjectRequired6 child attributes
account_idstringRequiredExample acct_2tVh8nqLxq4GbDe0K1F6S9zRcWm
captured_atstring · date-timeRequiredledger_account_idstringRequiredExample lacc_2tVh8nqLxq4GbDe0K1F6S9zRcWm
owner_idstringRequiredownership_revisionintegerRequiredownership_sha256stringRequiredsha256stringRequiredversionstringRequiredErrors
Every error is a problem document with a stable code. See Errors.
400401403404409412413422424429500503