Ingest BR capitalization clause consent

Hashes clause text server-side and stores an append-only consent artifact for BR-profile disbursement guards.

POST /api/v1/br/loan-applications/{id}/capitalization-consents

Ingest BR capitalization clause consent

cURL

curl --request POST \
  --url https://lender.sandbox.lerian.net/api/v1/br/loan-applications/{id}/capitalization-consents \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "acceptedAt": "2023-11-07T05:31:56Z",
  "clauseText": "<string>",
  "clauseTextHash": "<string>",
  "consentEvidence": "<string>"
}
'

201

{
  "acceptedAt": "<string>",
  "acceptedByActor": "<string>",
  "clauseTextHash": "<string>",
  "consentEvidence": "<string>",
  "createdAt": "<string>",
  "id": "<string>",
  "jurisdictionCode": "<string>",
  "loanApplicationId": "<string>",
  "profileVersion": "<string>"
}

Authorizations

Authorization · string · header · required

JWT bearer token issued by the identity provider.

Path Parameters

id · string<uuid> · required

Loan application identifier.

Body

application/json

acceptedAt · string<date-time> · required

RFC3339 timestamp the borrower accepted the clause.

clauseText · string · required

Raw capitalization clause text presented to the borrower.

clauseTextHash · string · required

Client-computed SHA-256 hex digest of the canonicalized clause text.

Required string length: 64

Pattern: ^[a-f0-9]{64}$

Example:

"a3b1c2d4e5f60718293a4b5c6d7e8f90a1b2c3d4e5f60718293a4b5c6d7e8f90"

consentEvidence · string · required

Opaque evidence reference proving the borrower accepted the clause.

Response

201

application/json

Created

acceptedAt · string · required

RFC3339 UTC timestamp when the borrower accepted the clause.

Example:

"2026-06-14T12:00:00Z"

acceptedByActor · string · required

Authenticated actor identity (resolved from request context) that accepted the clause.

clauseTextHash · string · required

Server-recomputed SHA-256 hex digest of the canonicalized clause text (64 lowercase hex chars).

Example:

"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"

consentEvidence · string · required

Opaque evidence reference proving the borrower accepted the clause.

createdAt · string · required

RFC3339 UTC timestamp when the artifact was persisted.

Example:

"2026-06-14T12:00:00Z"

id · string · required

Server-generated UUID of the persisted consent artifact.

Example:

"550e8400-e29b-41d4-a716-446655440000"

jurisdictionCode · string · required

ISO 3166-1 alpha-2 jurisdiction code (e.g. "BR").

Example:

"BR"

loanApplicationId · string · required

UUID of the loan application this consent is attached to.

Example:

"550e8400-e29b-41d4-a716-446655440001"

profileVersion · string · required

Jurisdiction profile version in effect when the disclosure was presented (e.g. "1.0.0").

Example:

"1.0.0"