Refusal Records
Verify a Refusal Record's signature
Checks a Refusal Record’s signature.
POST
/
refusal
/
verify
cURL
# The Refusal Record, as returned by GET /refusal/<businessTransactionId>:
curl -X POST https://parmana-api-real.vercel.app/refusal/verify \
-H "Content-Type: application/json" \
--data @refusal-record.jsonimport { ParmanaClient } from "@parmana/sdk";
const client = new ParmanaClient({
endpoint: "https://parmana-api-real.vercel.app",
apiKey: process.env.PARMANA_API_KEY!,
});
const record = await client.refusalRecord(
"5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90",
);
const valid = await client.verifyRefusalRecord(record);
console.log(valid);import os
from parmana import ParmanaClient
client = ParmanaClient(
endpoint="https://parmana-api-real.vercel.app",
api_key=os.environ["PARMANA_API_KEY"],
)
record = client.refusal_record("5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90")
valid = client.verify_refusal_record(record)
print(valid)const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({
refusalRecordId: 'eddc5dd1-a791-4470-9534-11b3fc573ab8',
businessTransactionId: '353c73fb-5e87-4dbe-8bfc-c15c8f18d871',
decision: {
decisionId: '3919f4b6-cbc8-44ec-a6a1-8887ee85f314',
intentId: '4ba6b14a-c593-4f5c-ab58-dcef38a29364',
policy: {name: 'vendor-payment', version: '2.0.0', schemaVersion: '1.0.0'},
signals: {
vendorVerified: false,
invoiceVerified: true,
paymentApproved: true,
sufficientFunds: true,
paymentAmount: 1000,
riskScore: 5,
vendorId: 'vendor://payments'
},
outcome: 'REJECTED',
reason: 'Vendor payment rejected because the vendor has not been verified.',
evaluatedAt: '2026-09-15T03:27:45.666Z'
},
evaluatedIntent: {target: 'vendor://payments', parameters: {amount: 1000, currency: 'USD'}},
createdAt: '2026-09-15T03:27:45.666Z',
refusalRecordHash: '47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca',
signature: {
algorithm: 'ed25519',
keyId: 'default',
value: 'tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==',
signedAt: '2026-09-15T03:27:45.668Z'
}
})
};
fetch('https://parmana-api-real.vercel.app/refusal/verify', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://parmana-api-real.vercel.app/refusal/verify",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'refusalRecordId' => 'eddc5dd1-a791-4470-9534-11b3fc573ab8',
'businessTransactionId' => '353c73fb-5e87-4dbe-8bfc-c15c8f18d871',
'decision' => [
'decisionId' => '3919f4b6-cbc8-44ec-a6a1-8887ee85f314',
'intentId' => '4ba6b14a-c593-4f5c-ab58-dcef38a29364',
'policy' => [
'name' => 'vendor-payment',
'version' => '2.0.0',
'schemaVersion' => '1.0.0'
],
'signals' => [
'vendorVerified' => false,
'invoiceVerified' => true,
'paymentApproved' => true,
'sufficientFunds' => true,
'paymentAmount' => 1000,
'riskScore' => 5,
'vendorId' => 'vendor://payments'
],
'outcome' => 'REJECTED',
'reason' => 'Vendor payment rejected because the vendor has not been verified.',
'evaluatedAt' => '2026-09-15T03:27:45.666Z'
],
'evaluatedIntent' => [
'target' => 'vendor://payments',
'parameters' => [
'amount' => 1000,
'currency' => 'USD'
]
],
'createdAt' => '2026-09-15T03:27:45.666Z',
'refusalRecordHash' => '47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca',
'signature' => [
'algorithm' => 'ed25519',
'keyId' => 'default',
'value' => 'tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==',
'signedAt' => '2026-09-15T03:27:45.668Z'
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://parmana-api-real.vercel.app/refusal/verify"
payload := strings.NewReader("{\n \"refusalRecordId\": \"eddc5dd1-a791-4470-9534-11b3fc573ab8\",\n \"businessTransactionId\": \"353c73fb-5e87-4dbe-8bfc-c15c8f18d871\",\n \"decision\": {\n \"decisionId\": \"3919f4b6-cbc8-44ec-a6a1-8887ee85f314\",\n \"intentId\": \"4ba6b14a-c593-4f5c-ab58-dcef38a29364\",\n \"policy\": {\n \"name\": \"vendor-payment\",\n \"version\": \"2.0.0\",\n \"schemaVersion\": \"1.0.0\"\n },\n \"signals\": {\n \"vendorVerified\": false,\n \"invoiceVerified\": true,\n \"paymentApproved\": true,\n \"sufficientFunds\": true,\n \"paymentAmount\": 1000,\n \"riskScore\": 5,\n \"vendorId\": \"vendor://payments\"\n },\n \"outcome\": \"REJECTED\",\n \"reason\": \"Vendor payment rejected because the vendor has not been verified.\",\n \"evaluatedAt\": \"2026-09-15T03:27:45.666Z\"\n },\n \"evaluatedIntent\": {\n \"target\": \"vendor://payments\",\n \"parameters\": {\n \"amount\": 1000,\n \"currency\": \"USD\"\n }\n },\n \"createdAt\": \"2026-09-15T03:27:45.666Z\",\n \"refusalRecordHash\": \"47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca\",\n \"signature\": {\n \"algorithm\": \"ed25519\",\n \"keyId\": \"default\",\n \"value\": \"tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==\",\n \"signedAt\": \"2026-09-15T03:27:45.668Z\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://parmana-api-real.vercel.app/refusal/verify")
.header("Content-Type", "application/json")
.body("{\n \"refusalRecordId\": \"eddc5dd1-a791-4470-9534-11b3fc573ab8\",\n \"businessTransactionId\": \"353c73fb-5e87-4dbe-8bfc-c15c8f18d871\",\n \"decision\": {\n \"decisionId\": \"3919f4b6-cbc8-44ec-a6a1-8887ee85f314\",\n \"intentId\": \"4ba6b14a-c593-4f5c-ab58-dcef38a29364\",\n \"policy\": {\n \"name\": \"vendor-payment\",\n \"version\": \"2.0.0\",\n \"schemaVersion\": \"1.0.0\"\n },\n \"signals\": {\n \"vendorVerified\": false,\n \"invoiceVerified\": true,\n \"paymentApproved\": true,\n \"sufficientFunds\": true,\n \"paymentAmount\": 1000,\n \"riskScore\": 5,\n \"vendorId\": \"vendor://payments\"\n },\n \"outcome\": \"REJECTED\",\n \"reason\": \"Vendor payment rejected because the vendor has not been verified.\",\n \"evaluatedAt\": \"2026-09-15T03:27:45.666Z\"\n },\n \"evaluatedIntent\": {\n \"target\": \"vendor://payments\",\n \"parameters\": {\n \"amount\": 1000,\n \"currency\": \"USD\"\n }\n },\n \"createdAt\": \"2026-09-15T03:27:45.666Z\",\n \"refusalRecordHash\": \"47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca\",\n \"signature\": {\n \"algorithm\": \"ed25519\",\n \"keyId\": \"default\",\n \"value\": \"tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==\",\n \"signedAt\": \"2026-09-15T03:27:45.668Z\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://parmana-api-real.vercel.app/refusal/verify")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n \"refusalRecordId\": \"eddc5dd1-a791-4470-9534-11b3fc573ab8\",\n \"businessTransactionId\": \"353c73fb-5e87-4dbe-8bfc-c15c8f18d871\",\n \"decision\": {\n \"decisionId\": \"3919f4b6-cbc8-44ec-a6a1-8887ee85f314\",\n \"intentId\": \"4ba6b14a-c593-4f5c-ab58-dcef38a29364\",\n \"policy\": {\n \"name\": \"vendor-payment\",\n \"version\": \"2.0.0\",\n \"schemaVersion\": \"1.0.0\"\n },\n \"signals\": {\n \"vendorVerified\": false,\n \"invoiceVerified\": true,\n \"paymentApproved\": true,\n \"sufficientFunds\": true,\n \"paymentAmount\": 1000,\n \"riskScore\": 5,\n \"vendorId\": \"vendor://payments\"\n },\n \"outcome\": \"REJECTED\",\n \"reason\": \"Vendor payment rejected because the vendor has not been verified.\",\n \"evaluatedAt\": \"2026-09-15T03:27:45.666Z\"\n },\n \"evaluatedIntent\": {\n \"target\": \"vendor://payments\",\n \"parameters\": {\n \"amount\": 1000,\n \"currency\": \"USD\"\n }\n },\n \"createdAt\": \"2026-09-15T03:27:45.666Z\",\n \"refusalRecordHash\": \"47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca\",\n \"signature\": {\n \"algorithm\": \"ed25519\",\n \"keyId\": \"default\",\n \"value\": \"tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==\",\n \"signedAt\": \"2026-09-15T03:27:45.668Z\"\n }\n}"
response = http.request(request)
puts response.read_body{
"valid": true
}{
"error": "Request body must be a Refusal Record (refusalRecordId, businessTransactionId, decision, refusalRecordHash, signature required)."
}{
"error": "Rate limit exceeded. Try again later.",
"code": "RATE_LIMITED"
}Body
application/json
Request body for POST /refusal/verify: the Refusal Record itself, not a lookup by ID. Checked structurally on the server (refusalRecordId, businessTransactionId, decision, refusalRecordHash, signature required) before signature verification runs.
Unique Refusal Record identifier.
Business Transaction this refusal is about.
Immutable result of evaluating an Intent against a Policy. Decision does not create authority, grant authorization, or modify Intent; it only records the outcome of deterministic Policy evaluation.
Show child attributes
Show child attributes
Example:
{
"decisionId": "9d69dc0b-333a-4be3-b09f-358fece806f3",
"intentId": "ae5865f6-181b-409a-90ec-1b4b8b8414ba",
"policy": {
"name": "vendor-payment",
"version": "2.0.0",
"schemaVersion": "1.0.0"
},
"signals": {
"vendorVerified": true,
"invoiceVerified": true,
"paymentApproved": true,
"sufficientFunds": true,
"paymentAmount": 4500,
"riskScore": 10
},
"outcome": "APPROVED",
"reason": "Vendor payment authorized. Vendor verification, invoice verification, payment approval, funding, and risk assessment requirements were satisfied.",
"matchedRuleId": "approve-payment",
"evaluatedRules": 1,
"matchedPath": ["approve-payment"],
"evaluatedAt": "2026-07-07T16:38:59.326Z"
}
The Intent snapshot the signals were evaluated against: target and parameters only, present for every refusal, not only binding violations.
Show child attributes
Show child attributes
Canonical hash of this Refusal Record, same convention as ExecutionTrustRecord.trustRecordHash.
Cryptographic signature over the canonical Refusal Record, signed with the same key as ExecutionTrustRecord, one root of trust for both approvals and refusals.
Show child attributes
Show child attributes
UTC timestamp when this Refusal Record was created.
Present only when the rejection came from SignalIntentBinder. Absent (not an empty array) for an ordinary PolicyEngine.evaluate REJECT that never reached binding-violation logic at all.
Show child attributes
Show child attributes
Authenticated caller who submitted the rejected request. Absent when caller authentication is disabled.
SHA-256 hash of the policy content that decided the refusal, the same value an Execution Trust Record carries in transaction.policy.contentHash. Inside the signed record. Absent on Refusal Records written before 2026-10-06.
Pattern:
^[0-9a-f]{64}$Response
The check ran. Read valid. A 200 alone does not mean the signature verified.
Response shared by POST /refusal/verify and POST /audit/verify: a bare signature-validity result, no wrapper, no partial-failure detail. Both routes verify a signature over bytes with no database lookup, so there is nothing more specific to report than valid or not.
Whether the signature verifies against Parmana's public key for the stated algorithm and key ID.
⌘I
cURL
# The Refusal Record, as returned by GET /refusal/<businessTransactionId>:
curl -X POST https://parmana-api-real.vercel.app/refusal/verify \
-H "Content-Type: application/json" \
--data @refusal-record.jsonimport { ParmanaClient } from "@parmana/sdk";
const client = new ParmanaClient({
endpoint: "https://parmana-api-real.vercel.app",
apiKey: process.env.PARMANA_API_KEY!,
});
const record = await client.refusalRecord(
"5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90",
);
const valid = await client.verifyRefusalRecord(record);
console.log(valid);import os
from parmana import ParmanaClient
client = ParmanaClient(
endpoint="https://parmana-api-real.vercel.app",
api_key=os.environ["PARMANA_API_KEY"],
)
record = client.refusal_record("5f0c2a7e-3d7b-4d0e-9a55-2f6d8b1c4e90")
valid = client.verify_refusal_record(record)
print(valid)const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({
refusalRecordId: 'eddc5dd1-a791-4470-9534-11b3fc573ab8',
businessTransactionId: '353c73fb-5e87-4dbe-8bfc-c15c8f18d871',
decision: {
decisionId: '3919f4b6-cbc8-44ec-a6a1-8887ee85f314',
intentId: '4ba6b14a-c593-4f5c-ab58-dcef38a29364',
policy: {name: 'vendor-payment', version: '2.0.0', schemaVersion: '1.0.0'},
signals: {
vendorVerified: false,
invoiceVerified: true,
paymentApproved: true,
sufficientFunds: true,
paymentAmount: 1000,
riskScore: 5,
vendorId: 'vendor://payments'
},
outcome: 'REJECTED',
reason: 'Vendor payment rejected because the vendor has not been verified.',
evaluatedAt: '2026-09-15T03:27:45.666Z'
},
evaluatedIntent: {target: 'vendor://payments', parameters: {amount: 1000, currency: 'USD'}},
createdAt: '2026-09-15T03:27:45.666Z',
refusalRecordHash: '47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca',
signature: {
algorithm: 'ed25519',
keyId: 'default',
value: 'tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==',
signedAt: '2026-09-15T03:27:45.668Z'
}
})
};
fetch('https://parmana-api-real.vercel.app/refusal/verify', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://parmana-api-real.vercel.app/refusal/verify",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'refusalRecordId' => 'eddc5dd1-a791-4470-9534-11b3fc573ab8',
'businessTransactionId' => '353c73fb-5e87-4dbe-8bfc-c15c8f18d871',
'decision' => [
'decisionId' => '3919f4b6-cbc8-44ec-a6a1-8887ee85f314',
'intentId' => '4ba6b14a-c593-4f5c-ab58-dcef38a29364',
'policy' => [
'name' => 'vendor-payment',
'version' => '2.0.0',
'schemaVersion' => '1.0.0'
],
'signals' => [
'vendorVerified' => false,
'invoiceVerified' => true,
'paymentApproved' => true,
'sufficientFunds' => true,
'paymentAmount' => 1000,
'riskScore' => 5,
'vendorId' => 'vendor://payments'
],
'outcome' => 'REJECTED',
'reason' => 'Vendor payment rejected because the vendor has not been verified.',
'evaluatedAt' => '2026-09-15T03:27:45.666Z'
],
'evaluatedIntent' => [
'target' => 'vendor://payments',
'parameters' => [
'amount' => 1000,
'currency' => 'USD'
]
],
'createdAt' => '2026-09-15T03:27:45.666Z',
'refusalRecordHash' => '47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca',
'signature' => [
'algorithm' => 'ed25519',
'keyId' => 'default',
'value' => 'tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==',
'signedAt' => '2026-09-15T03:27:45.668Z'
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://parmana-api-real.vercel.app/refusal/verify"
payload := strings.NewReader("{\n \"refusalRecordId\": \"eddc5dd1-a791-4470-9534-11b3fc573ab8\",\n \"businessTransactionId\": \"353c73fb-5e87-4dbe-8bfc-c15c8f18d871\",\n \"decision\": {\n \"decisionId\": \"3919f4b6-cbc8-44ec-a6a1-8887ee85f314\",\n \"intentId\": \"4ba6b14a-c593-4f5c-ab58-dcef38a29364\",\n \"policy\": {\n \"name\": \"vendor-payment\",\n \"version\": \"2.0.0\",\n \"schemaVersion\": \"1.0.0\"\n },\n \"signals\": {\n \"vendorVerified\": false,\n \"invoiceVerified\": true,\n \"paymentApproved\": true,\n \"sufficientFunds\": true,\n \"paymentAmount\": 1000,\n \"riskScore\": 5,\n \"vendorId\": \"vendor://payments\"\n },\n \"outcome\": \"REJECTED\",\n \"reason\": \"Vendor payment rejected because the vendor has not been verified.\",\n \"evaluatedAt\": \"2026-09-15T03:27:45.666Z\"\n },\n \"evaluatedIntent\": {\n \"target\": \"vendor://payments\",\n \"parameters\": {\n \"amount\": 1000,\n \"currency\": \"USD\"\n }\n },\n \"createdAt\": \"2026-09-15T03:27:45.666Z\",\n \"refusalRecordHash\": \"47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca\",\n \"signature\": {\n \"algorithm\": \"ed25519\",\n \"keyId\": \"default\",\n \"value\": \"tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==\",\n \"signedAt\": \"2026-09-15T03:27:45.668Z\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://parmana-api-real.vercel.app/refusal/verify")
.header("Content-Type", "application/json")
.body("{\n \"refusalRecordId\": \"eddc5dd1-a791-4470-9534-11b3fc573ab8\",\n \"businessTransactionId\": \"353c73fb-5e87-4dbe-8bfc-c15c8f18d871\",\n \"decision\": {\n \"decisionId\": \"3919f4b6-cbc8-44ec-a6a1-8887ee85f314\",\n \"intentId\": \"4ba6b14a-c593-4f5c-ab58-dcef38a29364\",\n \"policy\": {\n \"name\": \"vendor-payment\",\n \"version\": \"2.0.0\",\n \"schemaVersion\": \"1.0.0\"\n },\n \"signals\": {\n \"vendorVerified\": false,\n \"invoiceVerified\": true,\n \"paymentApproved\": true,\n \"sufficientFunds\": true,\n \"paymentAmount\": 1000,\n \"riskScore\": 5,\n \"vendorId\": \"vendor://payments\"\n },\n \"outcome\": \"REJECTED\",\n \"reason\": \"Vendor payment rejected because the vendor has not been verified.\",\n \"evaluatedAt\": \"2026-09-15T03:27:45.666Z\"\n },\n \"evaluatedIntent\": {\n \"target\": \"vendor://payments\",\n \"parameters\": {\n \"amount\": 1000,\n \"currency\": \"USD\"\n }\n },\n \"createdAt\": \"2026-09-15T03:27:45.666Z\",\n \"refusalRecordHash\": \"47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca\",\n \"signature\": {\n \"algorithm\": \"ed25519\",\n \"keyId\": \"default\",\n \"value\": \"tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==\",\n \"signedAt\": \"2026-09-15T03:27:45.668Z\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://parmana-api-real.vercel.app/refusal/verify")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n \"refusalRecordId\": \"eddc5dd1-a791-4470-9534-11b3fc573ab8\",\n \"businessTransactionId\": \"353c73fb-5e87-4dbe-8bfc-c15c8f18d871\",\n \"decision\": {\n \"decisionId\": \"3919f4b6-cbc8-44ec-a6a1-8887ee85f314\",\n \"intentId\": \"4ba6b14a-c593-4f5c-ab58-dcef38a29364\",\n \"policy\": {\n \"name\": \"vendor-payment\",\n \"version\": \"2.0.0\",\n \"schemaVersion\": \"1.0.0\"\n },\n \"signals\": {\n \"vendorVerified\": false,\n \"invoiceVerified\": true,\n \"paymentApproved\": true,\n \"sufficientFunds\": true,\n \"paymentAmount\": 1000,\n \"riskScore\": 5,\n \"vendorId\": \"vendor://payments\"\n },\n \"outcome\": \"REJECTED\",\n \"reason\": \"Vendor payment rejected because the vendor has not been verified.\",\n \"evaluatedAt\": \"2026-09-15T03:27:45.666Z\"\n },\n \"evaluatedIntent\": {\n \"target\": \"vendor://payments\",\n \"parameters\": {\n \"amount\": 1000,\n \"currency\": \"USD\"\n }\n },\n \"createdAt\": \"2026-09-15T03:27:45.666Z\",\n \"refusalRecordHash\": \"47d8200e839f9b4a1a53dba941e318553c9b024bc64d26c5b613e5ae2aeb65ca\",\n \"signature\": {\n \"algorithm\": \"ed25519\",\n \"keyId\": \"default\",\n \"value\": \"tT32/iJ0bEDxjc+/KPeAegTBSrzpRFW14f9Vyv3Ykx+H/rLHcgd7SlFH/BAXut8sEH2mpo0smg82tSoXmZkpDQ==\",\n \"signedAt\": \"2026-09-15T03:27:45.668Z\"\n }\n}"
response = http.request(request)
puts response.read_body{
"valid": true
}{
"error": "Request body must be a Refusal Record (refusalRecordId, businessTransactionId, decision, refusalRecordHash, signature required)."
}{
"error": "Rate limit exceeded. Try again later.",
"code": "RATE_LIMITED"
}