Operations & Traceability / Custody Transfers

Custody Transfers endpoints under Operations & Traceability.

📄️ Record a custody transfer event

Record a custody transfer event

📄️ Custody transfers awaiting MY signature

Scoped to transfers whose policy names a role the caller holds and which they have not already decided. Returns an empty list (not 403) for a role the policy does not name.

📄️ Badge count for the approvals queue

Badge count for the approvals queue

📄️ Full review payload for one pending transfer

Includes `canonicalPayloadToSign` — the exact bytes the device must sign — plus the server-authoritative `canApprove`.

📄️ Co-sign a pending custody transfer

When the signature completes the quorum the event is linked into the hash chain and the MEU moves. Requires a hardware-backed signing key.

📄️ Refuse a pending custody transfer

Also signed: a rejection blocks the physical movement of mineral and earns the same non-repudiation. Terminal — a single refusal ends the request regardless of quorum.