addedInput schema / description
Added value: +"One contemplated or existing commitment to evaluate. merchant, commitment_type, and amount are required. Transaction-specific checkout_terms are the strongest input when available; maintained policy evidence can add context but never overrides conflicting transaction-specific terms."
addedInput schema / properties / amount / description
Added value: +"Commitment amount in major currency units, for example 125.50 for USD 125.50. Must be non-negative and uses currency below for all monetary interpretation."
addedInput schema / properties / checkout_terms / description
Added value: +"Transaction-specific cancellation, refund, renewal, charge, and loss terms observed for this exact commitment. Supply these whenever available; they control the transaction-specific assessment while maintained policy evidence remains contextual."
addedInput schema / properties / checkout_terms / properties / auto_renews / description
Added value: +"Whether the supplied transaction terms explicitly state that the commitment renews automatically."
addedInput schema / properties / checkout_terms / properties / cancellable / description
Added value: +"Whether the supplied transaction terms explicitly state that the commitment can be canceled."
changedInput schema / properties / checkout_terms / properties / cancellation_deadline / description
Previous value: -"RFC 3339 timestamp with explicit timezone."New value: +"RFC 3339 timestamp with explicit timezone for the stated cancellation deadline, even when cancellation may involve a loss."
addedInput schema / properties / checkout_terms / properties / cancellation_method / description
Added value: +"Recorded method or path for cancellation/refund, such as an account page, support channel, or merchant instruction. This can make a later exit pack actionable."
addedInput schema / properties / checkout_terms / properties / cancellation_penalty_amount / description
Added value: +"Stated cancellation penalty in major units of currency. Mutually exclusive with cancellation_penalty_percent."
addedInput schema / properties / checkout_terms / properties / cancellation_penalty_percent / description
Added value: +"Stated cancellation penalty as a percentage from 0 to 100. Mutually exclusive with cancellation_penalty_amount."
addedInput schema / properties / checkout_terms / properties / charge_timing / description
Added value: +"When the merchant states the charge will occur, such as immediately, at check-in, or 24 hours before renewal."
changedInput schema / properties / checkout_terms / properties / free_cancellation_until / description
Previous value: -"RFC 3339 timestamp with explicit timezone."New value: +"RFC 3339 deadline with explicit timezone through which the supplied terms state cancellation is free."
addedInput schema / properties / checkout_terms / properties / nonrefundable_amount / description
Added value: +"Amount explicitly stated as nonrefundable, in major units of currency."
changedInput schema / properties / checkout_terms / properties / observed_at / description
Previous value: -"RFC 3339 timestamp with explicit timezone."New value: +"RFC 3339 timestamp with explicit timezone for when the caller observed these checkout terms."
addedInput schema / properties / checkout_terms / properties / refundable / description
Added value: +"Whether the supplied transaction terms explicitly state that the committed amount is refundable."
addedInput schema / properties / checkout_terms / properties / renewal_interval / description
Added value: +"Human-readable renewal interval from the supplied terms, such as monthly or annually. Use only when auto-renewal terms are stated."
addedInput schema / properties / checkout_terms / properties / source_url / description
Added value: +"HTTP(S) source URL for the supplied transaction terms. ExitProof removes credentials, query parameters, and fragments before storing the URL."
changedInput schema / properties / client_reference / description
Previous value: -"Optional caller-owned reference. ExitProof stores only a SHA-256 hash."New value: +"Optional caller-owned correlation reference. ExitProof stores only a SHA-256 hash; do not place secrets or sensitive personal data here."
addedInput schema / properties / commitment_type / description
Added value: +"Closest category for the commitment being evaluated. This affects policy matching and should describe what the user is committing to, not the payment method."
addedInput schema / properties / country / description
Added value: +"Optional two-letter ISO 3166-1 alpha-2 country code, such as US. Used to scope maintained policy rules when geography matters."
addedInput schema / properties / country / pattern
Added value: +"^[A-Za-z]{2}$"
addedInput schema / properties / currency / description
Added value: +"Three-letter ISO 4217 currency code for amount and all monetary checkout terms. Defaults to USD."
addedInput schema / properties / event_type / description
Added value: +"Lifecycle event for this commitment. Use renewal for a recurring renewal, reservation for a booking event, deposit for a deposit event, or leave omitted for an initial commitment."
changedInput schema / properties / expected_commitment_at / description
Previous value: -"RFC 3339 timestamp with explicit timezone."New value: +"RFC 3339 timestamp with explicit timezone for when the commitment is expected to occur. ExitProof evaluates time windows at the later of now and this timestamp."
addedInput schema / properties / merchant / description
Added value: +"Merchant, platform, provider, or counterparty name exactly enough to identify the commitment. Used to match maintained policy overlays; do not include account numbers, credentials, or secrets."
addedInput schema / properties / purchase_channel / description
Added value: +"Where the commitment is being made or billed. Use apple or google_play when that billing platform controls cancellation/refund rules; use direct for the merchant itself."
addedInput schema / properties / region / description
Added value: +"Optional state, province, or region label when the commitment or merchant terms are region-specific."
changedOutput schema / (root)
Previous value: -nullNew value: +{
+ "additionalProperties": true,
+ "description": "Durable privacy-minimized Exit Manifest plus the bearer access token returned to the caller.",
+ "properties": {
+ "accessToken": {
+ "description": "Secret bearer token required with manifestId for later retrieval or exit-pack creation. ExitProof does not store this token in plaintext.",
+ "type": "string"
+ },
+ "accessTokenReissuedForSettlementRecovery": {
+ "description": "True only when deterministic settlement recovery re-derived the access token after a settled delivery failure.",
+ "type": "boolean"
+ },
+ "accessTokenReturnedOnce": {
+ "description": "Whether this response is the first normal return of the access token.",
+ "type": "boolean"
+ },
+ "assessment": {
+ "description": "Reversibility assessment preserved in the manifest.",
+ "type": "string"
+ },
+ "createdAt": {
+ "description": "Manifest creation timestamp.",
+ "type": "string"
+ },
+ "expiresAt": {
+ "description": "Manifest expiration timestamp.",
+ "type": "string"
+ },
+ "manifestId": {
+ "description": "Unguessable identifier for the stored Exit Manifest.",
+ "type": "string"
+ },
+ "paidExitPackAvailable": {
+ "description": "Whether the stored manifest is eligible for an exit-pack preflight at creation time.",
+ "type": "boolean"
+ },
+ "privacyNote": {
+ "description": "How ExitProof protects and may recover the access token.",
+ "type": "string"
+ }
+ },
+ "required": [
+ "manifestId",
+ "createdAt",
+ "expiresAt",
+ "assessment",
+ "accessToken",
+ "accessTokenReturnedOnce",
+ "privacyNote"
+ ],
+ "type": "object"
+}