Decision API errors and event names
Handle HTTP status before interpreting a decision. The account-change URL uses a hyphen, while the JSON event is account_change. A 401, 409, 422, 429 or 503 indicates request, authorization or service handling; it is not an allow/review/decline result.
Authentication and routes
401 means a configured key is missing/incorrect or the pilot account cannot authenticate. 409 in pilot mode means the event has no approved route. Unknown or unapproved client-selected provider IDs return 422. Requesting an approved route does not bypass account authentication.
Validation and event mapping
Use onboarding/onboarding, payout/payout and account-change/account_change for URL/body pairs. Path/body mismatch and invalid schemas return 422. Optional subject fields do not mean every provider can operate without its required identifiers. Unknown event paths must fail validation rather than execute a different event.
Rate limits and unavailability
429 signals the controlled-pilot rate limit. 503 can mean the production key is absent, the controlled pilot is misconfigured or the upstream provider is unavailable. Use the response detail to diagnose the condition internally, then follow the caller’s bounded retry or review procedure. Production trace retrieval remains unavailable by default.
Sources and scope
Based on the alpha contract and source implementation. Live route availability requires separate confirmation.