Mobile-ID · Evidence-based trust
Records glossaryContact
Trusted Records · Integration & Developer

Controlled metadata updates

Create correction requests with expectedVersion/reason; do not silently edit declared records.

Request schema from OpenAPI

FieldTypeRequiredConstraintsTechnical definition
expectedVersionintegerYes{"minimum": 1}Proposed expectedVersion field. Synthetic identifiers must not contain personal data.
reasonstringYes{"minLength": 1}Proposed reason field. Synthetic identifiers must not contain personal data.
metadataobjectYes{"minProperties": 1}Proposed metadata field. Synthetic identifiers must not contain personal data.

Input, scopes and processing

PATCH /v1/records/{recordId}/metadata · scope records:metadata. Tenant/project and correlation contexts are required. POST/PATCH use Idempotency-Key; examples/schemas below are proposed contracts.

States and outputs

REQUESTED → REVIEW → APPROVED → VERSIONED. Retain previous versions and audit.

Exceptions and controls

Version conflicts return 409, field/schema defects 422, insufficient metadata permissions 403.

HTTP example — proposed contract

Request

PATCH https://records.example.invalid/v1/records/{recordId}/metadata HTTP/1.1
Authorization: Bearer <example-token>
X-Tenant-Id: synthetic-tenant-001
X-Project-Id: synthetic-project-001
X-Correlation-Id: synthetic-correlation-001
Idempotency-Key: synthetic-key-001
Content-Type: application/json

{
  "expectedVersion": 1,
  "reason": "synthetic correction",
  "metadata": {
    "title": "Synthetic record"
  }
}

Response · 202

{
  "jobId": "synthetic-job-003",
  "status": "REVIEW_PENDING",
  "correctionRef": "synthetic-correction-001"
}

Required fields and shared controls

ItemProposed rule
scoperecords:metadata
requiredexpectedVersion, reason, metadata
tenant / projectToken and context must match; headers alone are insufficient.
idempotencyPOST/PATCH: same key/body returns original result; changed body returns 409; confirm retention window.
errorcode, message, requestId, correlationId, retryable, details; no sensitive data.

Start with a verifiable scope.

Agree record classes, quality criteria, permissions and evidence before scaling.

Plan assessment

Search Trusted Records

Enlarged source image

Illustrative source image; displayed values are not service commitments.