RejectCustodyTransferDto

signaturestringrequired

Base64 ECDSA-P256 signature (raw r||s or DER).

signaturePublicKeyIdstringrequired

Registry id of the hardware-backed signing key.

reasonstringrequired

Why the transfer is being refused. Recorded permanently.

deviceLabelstring

RejectCustodyTransferDto

{
  "signature": "string",
  "signaturePublicKeyId": "string",
  "reason": "string",
  "deviceLabel": "string"
}