DEVELOPER GUIDEREFERENCE CONTRACT

Evidence API

Record evidence references, provenance, trusted time, integrity and retention metadata.

CONTRACT PRINCIPLES

The protocol carries business semantics.

Each integration must preserve authority, policy, evidence and recovery context.

Pin API/schema/profile versions in test evidence.

Carry a correlation ID across request, event, connector and evidence records.

Protect material write operations from accidental replay.

Never infer legal authority solely from transport success.

REFERENCE ENDPOINTS

The downloadable contract contains request/response models, OAuth scopes, idempotency and representative errors.

Reference API surface
Area	Reference route	Semantics
Resolver	GET /v1/resolve/{identifier}	Official ID → TTID resolution with authority context
DPP	GET /v1/dpp/{identifier}	Policy-qualified DPP read
Claims	POST /v1/claims	Evidence-backed claim submission
Evidence	POST /v1/evidence	Evidence/provenance reference
Mandate	POST /v1/mandates	Delegation lifecycle
Lifecycle	POST /v1/things/{thingId}/transitions	Material transition
Search	GET /v1/search	Derived read model
Connector	POST /v1/connectors/{id}/reconcile	Business reconciliation

POST/v1/evidence

Register an evidence reference and provenance metadata without moving private keys or authoritative source data into the DPP repository.

OAuth: evidence.write
State: Source evidence exists and has a defined retention/integrity context. → Evidence reference enters governed evidence processing.
Evidence: Source, type, digest, timestamp and provenance metadata.
Errors: 400 schema · 409 idempotency · 422 integrity/provenance policy failure
Retry: Use Idempotency-Key.

{"source":"repair-order:7781","type":"repair-record","digest":"sha256:...","timestamp":"2026-09-02T00:00:00Z"}

{"evidenceId":"evidence:01...","status":"accepted-for-processing"}

ARCHITECTURE WORKSHOP

Align product-group applicability, authority boundaries, portal journeys, integration contracts and evidence before committing to production claims.