POST /tradetrust/ebl/complete-mint — hand back the signed record and get the\n mint transaction. beneficiary and holder default to from server-side.","properties":{"preparationId":{"type":"string","minLength":1},"signedVerifiableCredential":{"type":"object","additionalProperties":{},"minProperties":1},"from":{"type":"string","description":"Must hold MINTER_ROLE on the registry.","minLength":1},"beneficiary":{"type":"string"},"holder":{"type":"string"}},"required":["from","preparationId","signedVerifiableCredential"]},"ResponseWrapperEblCompleteMintRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/EblCompleteMintRespDto"}}},"EblCompleteMintRespDto":{"type":"object","description":"Response of POST /tradetrust/ebl/complete-mint (and /mint, which ends at the same\n step) — the assembled record, its assigned token id, and the still-unsent mint transaction.","properties":{"verifiableCredential":{"type":"object","additionalProperties":{}},"tokenId":{"type":"string","description":"0x-prefixed 32-byte hex token id, assigned during signing rather than at prepare time."},"unsignedMintTx":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/complete-mint":{"post":{"tags":["TradeTrust eBL"],"summary":"Complete and mint an eBL","description":"Hand back the signed record and get the mint transaction — still unsent; see this class's javadoc.","operationId":"completeMint","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblCompleteMintReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperEblCompleteMintRespDto"}}}}}}}}}
```
## Mint an eBL in one call
> Mint a transferable record in one call: \prepare-mint\ -\> core-engine signs -\>\
> \complete-mint\. One step still to do: sign and broadcast the returned\
> \unsignedMintTx\. Sends the issuer's private key to core-engine — see\
> {@link com.myeg.z2.tradetrust.dto.req.MultikeyDto com.myeg.z2.tradetrust.dto.req.MultikeyDto}.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblMintReqDto":{"type":"object","description":"Request for POST /tradetrust/ebl/mint — the same build as {@link EblPrepareMintReqDto EblPrepareMintReqDto},\n plus the issuer's key pair for delegated signing and the minting address. One call, but\n from must still sign and broadcast the returned unsignedMintTx — the token does\n not exist until that is mined.\n\n
This sends the issuer's private key to core-engine. See {@link MultikeyDto MultikeyDto}.","properties":{"issuerDid":{"type":"string","minLength":1},"credentialSubject":{"type":"object","additionalProperties":{},"minProperties":1},"tokenRegistry":{"type":"string","minLength":1},"chainId":{"type":"integer","format":"int64"},"chain":{"type":"string"},"context":{"type":"array","items":{"type":"string"}},"expirationDate":{"type":"string"},"renderMethod":{"type":"object","additionalProperties":{}},"qrCode":{"type":"object","additionalProperties":{}},"from":{"type":"string","description":"Must hold MINTER_ROLE on the registry.","minLength":1},"beneficiary":{"type":"string","description":"Initial owner of title to the goods (Title Escrow beneficiary). Defaults to from."},"holder":{"type":"string","description":"Initial holder / possessor. Defaults to from."},"keyPair":{"$ref":"#/components/schemas/MultikeyDto"}},"required":["credentialSubject","from","issuerDid","keyPair","tokenRegistry"]},"MultikeyDto":{"type":"object","description":"The issuer's Multikey key pair, including its secret — the payload for delegated signing\n (BT-2620: POST /credentials/sign via the SDK's signRemote/issueRemote).\n\n
All six fields are required; core-engine's schema rejects a partially built key with a 400\n rather than a partial success, so this DTO enforces the same shape locally via @NotBlank.\n\n
Carries a private key, exactly like SignBlobReqDto: never logged, never\n persisted, and masked in {@link com.myeg.z2.tradetrust.dto.req.MultikeyDto#toString #toString()} so it cannot leak through request logging, an\n exception message, or a debugger. Every endpoint that accepts this DTO must be POST — a key in a\n query string ends up in access logs.","properties":{"id":{"type":"string","minLength":1},"type":{"type":"string","minLength":1},"controller":{"type":"string","description":"Must equal the issuerDid the preparation was created for.","minLength":1},"publicKeyMultibase":{"type":"string","minLength":1},"secretKeyMultibase":{"type":"string","minLength":1},"@context":{"type":"string","minLength":1}},"required":["@context","controller","id","publicKeyMultibase","secretKeyMultibase","type"]},"ResponseWrapperEblCompleteMintRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/EblCompleteMintRespDto"}}},"EblCompleteMintRespDto":{"type":"object","description":"Response of POST /tradetrust/ebl/complete-mint (and /mint, which ends at the same\n step) — the assembled record, its assigned token id, and the still-unsent mint transaction.","properties":{"verifiableCredential":{"type":"object","additionalProperties":{}},"tokenId":{"type":"string","description":"0x-prefixed 32-byte hex token id, assigned during signing rather than at prepare time."},"unsignedMintTx":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/mint":{"post":{"tags":["TradeTrust eBL"],"summary":"Mint an eBL in one call","description":"Mint a transferable record in one call: prepare-mint -> core-engine signs ->\n complete-mint. One step still to do: sign and broadcast the returned\n unsignedMintTx. Sends the issuer's private key to core-engine — see\n {@link com.myeg.z2.tradetrust.dto.req.MultikeyDto com.myeg.z2.tradetrust.dto.req.MultikeyDto}.","operationId":"mint","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblMintReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperEblCompleteMintRespDto"}}}}}}}}}
```
## Deploy a Token Registry
> Deploy a brand-new Token Registry — where an eBL flow starts, since \prepare-mint\ and\
> \mint\ both require a \tokenRegistry\ and there is no default.\
> \
> \
Unsigned like every other write: the paying address signs and broadcasts it, and needs gas.\
> Afterwards read the new registry's address from \/onboard-issuer/registry\ — it is not in\
> the receipt's \contractAddress\.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"OnboardIssuerReqDto":{"type":"object","description":"Request for POST /tradetrust/ebl/onboard-issuer — build the transaction that deploys a\n brand-new eBL Token Registry.\n\n
This is where an eBL flow starts. tokenRegistry is required on prepare-mint and\n mint and core-engine keeps no server-wide default, so without a registry of your own there\n is nothing to mint into.\n\n
Like every other eBL write this returns an unsigned transaction: admin\n (or whoever you choose to pay) signs and broadcasts it, so that address needs gas first. Deployment\n is permissionless — the registry's admin comes from an encoded parameter rather than the sender —\n so the paying address and the admin need not be the same.\n\n
The new registry's address is not in the transaction receipt's contractAddress\n field. The registry is deployed by the platform's shared deployer contract, not by this\n transaction directly, so that field is null. Once the transaction succeeds, read the address from\n GET /tradetrust/ebl/onboard-issuer/registry?hash=....","properties":{"name":{"type":"string","description":"The registry's ERC-721 collection name, e.g. "MYEG Bill of Lading".","minLength":1},"symbol":{"type":"string","description":"The registry's ERC-721 symbol, e.g. "MYEGBL".","minLength":1},"admin":{"type":"string","description":"Becomes the new registry's admin, holding DEFAULT_ADMIN_ROLE, MINTER_ROLE,\n RESTORER_ROLE and ACCEPTER_ROLE — so this is the address that will be allowed\n to mint. Typically the issuer's own operational address.","minLength":1}},"required":["admin","name","symbol"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/onboard-issuer":{"post":{"tags":["TradeTrust eBL"],"summary":"Deploy a Token Registry","description":"Deploy a brand-new Token Registry — where an eBL flow starts, since prepare-mint and\n mint both require a tokenRegistry and there is no default.\n\n
Unsigned like every other write: the paying address signs and broadcasts it, and needs gas.\n Afterwards read the new registry's address from /onboard-issuer/registry — it is not in\n the receipt's contractAddress.","operationId":"onboardIssuer","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/OnboardIssuerReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Get the deployed registry address
> The address of the registry an \onboard-issuer\ transaction deployed, decoded from the\
> receipt's \Deployment\ event. Poll while \PENDING\, exactly as with\
> \/tx/status\.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"ResponseWrapperRegistryAddressRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/RegistryAddressRespDto"}}},"RegistryAddressRespDto":{"type":"object","description":"Response of GET /tradetrust/ebl/onboard-issuer/registry — the address of the Token Registry\n an onboard-issuer transaction deployed.\n\n
This endpoint exists because the address is not where callers look for it. The registry is\n deployed by the platform's shared deployer contract rather than by the submitted transaction\n itself, so the receipt's contractAddress is null and GET /tx/status — which returns\n no logs — cannot show it either. The address is only in the deployer's Deployment event, so\n this reads the receipt and decodes it.\n\n
Poll while status is PENDING, exactly as with /tx/status: a hash the node\n has not seen yet is pending rather than absent, because over JSON-RPC \"still in the mempool\" and\n \"never existed\" are indistinguishable. registry is populated only on SUCCESS.","properties":{"transactionHash":{"type":"string"},"status":{"type":"string","enum":["SUCCESS","FAILED","PENDING"]},"registry":{"type":"string","description":"The new registry's address — the value to pass as tokenRegistry from here on.\n\n
null while PENDING or on FAILED. Also null in one case worth\n handling: a SUCCESS whose logs carry no Deployment event, which means the hash\n belongs to some other transaction rather than an onboard-issuer one."}}}}},"paths":{"/tradetrust/ebl/onboard-issuer/registry":{"get":{"tags":["TradeTrust eBL"],"summary":"Get the deployed registry address","description":"The address of the registry an onboard-issuer transaction deployed, decoded from the\n receipt's Deployment event. Poll while PENDING, exactly as with\n /tx/status.","operationId":"registryAddress","parameters":[{"name":"hash","in":"query","required":true,"schema":{"type":"string","minLength":1}}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperRegistryAddressRespDto"}}}}}}}}}
```
## Prepare an eBL for signing
> Build the unsigned transferable record and its signing spec. The caller signs, then calls \complete-mint\.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblPrepareMintReqDto":{"type":"object","description":"Request for POST /tradetrust/ebl/prepare-mint — build the unsigned transferable record\n and its signing spec. issuerDid, credentialSubject and tokenRegistry are\n required; core-engine removed its server-wide default registry (a tokenId is only unique\n within one registry contract).","properties":{"issuerDid":{"type":"string","minLength":1},"credentialSubject":{"type":"object","additionalProperties":{},"minProperties":1},"tokenRegistry":{"type":"string","minLength":1},"chainId":{"type":"integer","format":"int64"},"chain":{"type":"string"},"context":{"type":"array","items":{"type":"string"}},"expirationDate":{"type":"string"},"renderMethod":{"type":"object","additionalProperties":{}},"qrCode":{"type":"object","additionalProperties":{}}},"required":["credentialSubject","issuerDid","tokenRegistry"]},"ResponseWrapperPreparedCredentialRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/PreparedCredentialRespDto"}}},"PreparedCredentialRespDto":{"type":"object","description":"Response of POST /tradetrust/credentials/prepare — the unsigned document plus its\n signing spec.\n\n
preparationId is single-use and expires (~15 minutes); pass it unmodified to\n complete or issue alongside the signed document.","properties":{"preparationId":{"type":"string"},"unsignedVerifiableCredential":{"type":"object","additionalProperties":{}},"signingSpec":{"$ref":"#/components/schemas/SigningSpecRespDto"}}},"SigningSpecRespDto":{"type":"object","description":"Exactly how core-engine expects a prepared document to be signed — part of\n {@link PreparedCredentialRespDto PreparedCredentialRespDto}. Pass mandatoryPointers to the signer verbatim; core-engine\n derives it from what it actually built, so reconstructing it silently drops fields from the base proof.","properties":{"mandatoryPointers":{"type":"array","items":{"type":"string"}},"cryptoSuite":{"type":"string"},"expectedIssuerDid":{"type":"string"}}}}},"paths":{"/tradetrust/ebl/prepare-mint":{"post":{"tags":["TradeTrust eBL"],"summary":"Prepare an eBL for signing","description":"Build the unsigned transferable record and its signing spec. The caller signs, then calls complete-mint.","operationId":"prepareMint","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblPrepareMintReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperPreparedCredentialRespDto"}}}}}}}}}
```
## Verify an eBL
> Document integrity \and\ on-chain state. Takes no \tokenRegistry\ —\
> unlike every other eBL route, it reads the registry and token id from inside the submitted\
> credential. Read \valid\ AND \trusted\ — never \valid\ alone.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"VerifyCredentialReqDto":{"type":"object","description":"Request for POST /tradetrust/credentials/verify — check signature, issuer binding and\n (if declared) revocation. Open on core-engine's side, but this service still requires its own\n caller auth like every other route (no addition to SecurityConfig.PUBLIC_PATHS).\n\n
trustedIssuers is optional; when supplied, the response's trusted field\n reports whether the credential's issuer is on it.","properties":{"verifiableCredential":{"type":"object","additionalProperties":{},"minProperties":1},"trustedIssuers":{"type":"array","items":{"type":"string"}}},"required":["verifiableCredential"]},"ResponseWrapperEblVerifyRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/EblVerifyRespDto"}}},"EblVerifyRespDto":{"type":"object","description":"Response of POST /tradetrust/ebl/verify — document integrity and on-chain\n state. Returned for both outcomes; a burned or never-minted record is a value\n (valid: false), never an error.\n\n
Read valid AND trusted — same rule as\n VerifyCredentialRespDto, and for the same reason.","properties":{"valid":{"type":"boolean"},"issuer":{"type":"string"},"trusted":{"type":"boolean"},"onChain":{"$ref":"#/components/schemas/EblOnChainRespDto"},"checks":{"type":"array","items":{"$ref":"#/components/schemas/VerifyCheckRespDto"}}}},"EblOnChainRespDto":{"type":"object","description":"The registry-side view of a transferable record, part of {@link EblVerifyRespDto EblVerifyRespDto}.\n\n
beneficiary and holder are null unless the record is active.","properties":{"minted":{"type":"boolean","description":"True while the token exists (active or surrendered); false if burned or never minted."},"status":{"type":"string","enum":["ACTIVE","SURRENDERED","BURNED","NOT_MINTED","UNKNOWN"]},"registry":{"type":"string","description":"The registry the record points at — worth checking rather than trusting valid alone:\n core-engine reports {@link Status#NOT_MINTED Status#NOT_MINTED}, not an error, for a record pointing elsewhere."},"tokenId":{"type":"string"},"titleEscrow":{"type":"string","description":"The Title Escrow owning the token while active (the registry once surrendered)."},"beneficiary":{"type":"string"},"holder":{"type":"string"}}},"VerifyCheckRespDto":{"type":"object","description":"One step of a verification, e.g. signature, status, trusted-issuer.","properties":{"type":{"type":"string"},"status":{"type":"string","description":""passed" or "failed"."},"reason":{"type":"string","description":"Why the check failed; null when it passed."}}}}},"paths":{"/tradetrust/ebl/verify":{"post":{"tags":["TradeTrust eBL"],"summary":"Verify an eBL","description":"Document integrity and on-chain state. Takes no tokenRegistry —\n unlike every other eBL route, it reads the registry and token id from inside the submitted\n credential. Read valid AND trusted — never valid alone.","operationId":"verify","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/VerifyCredentialReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperEblVerifyRespDto"}}}}}}}}}
```
## Accept a surrender
> The issuer finalizes a returned record; it is burned and retired.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblActionReqDto":{"type":"object","description":"The two fields every eBL write that takes no extra parameter needs: surrender,\n accept-surrender, reject-surrender, reject-transfer-holder,\n reject-transfer-beneficiary, reject-transfer-owners. Extended by the writes that\n need more — see {@link EblTransferHolderReqDto EblTransferHolderReqDto}, {@link EblNewBeneficiaryReqDto EblNewBeneficiaryReqDto},\n {@link EblTransferOwnersReqDto EblTransferOwnersReqDto}.\n\n
tokenId is not here — every eBL write takes it as a path variable, not a body field.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1}},"required":["from","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/accept-surrender":{"post":{"tags":["TradeTrust eBL"],"summary":"Accept a surrender","description":"The issuer finalizes a returned record; it is burned and retired.","operationId":"acceptSurrender","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblActionReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Get the endorsement chain
> The record's full transfer history, oldest first.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"ResponseWrapperEndorsementChainRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/EndorsementChainRespDto"}}},"EndorsementChainRespDto":{"type":"object","description":"Response of GET /tradetrust/ebl/{tokenId/endorsement-chain} — the record's full transfer\n history, oldest first.\n\n
Events stay as Map<String, Object> rather than a typed class, matching the SDK's own\n choice: core-engine adds event types and fields over time. Observed fields include type\n (INITIAL, TRANSFER_BENEFICIARY, TRANSFER_HOLDER, …), owner,\n holder, transactionHash, transactionIndex, blockNumber,\n timestamp (epoch milliseconds) and remark.","properties":{"tokenId":{"type":"string"},"chain":{"type":"array","items":{"type":"object","additionalProperties":{}}}}}}},"paths":{"/tradetrust/ebl/{tokenId}/endorsement-chain":{"get":{"tags":["TradeTrust eBL"],"summary":"Get the endorsement chain","description":"The record's full transfer history, oldest first.","operationId":"endorsementChain","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}},{"name":"tokenRegistry","in":"query","required":true,"schema":{"type":"string","minLength":1}}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperEndorsementChainRespDto"}}}}}}}}}
```
## Nominate the next beneficiary
> The beneficiary nominates who may take title next — step 1 of the two-step title transfer.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblNewBeneficiaryReqDto":{"type":"object","description":"Request body shape shared by POST /tradetrust/ebl/{tokenId/transfer-beneficiary}\n (irreversible once broadcast) and POST /tradetrust/ebl/{tokenId/nominate} (step 1 of the\n two-step title transfer) — both are exactly newBeneficiary + the base action fields.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1},"newBeneficiary":{"type":"string","minLength":1}},"required":["from","newBeneficiary","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/nominate":{"post":{"tags":["TradeTrust eBL"],"summary":"Nominate the next beneficiary","description":"The beneficiary nominates who may take title next — step 1 of the two-step title transfer.","operationId":"nominate","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblNewBeneficiaryReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Get the current owner
> The Title Escrow currently owning the token (or the registry, once surrendered).
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"ResponseWrapperEblOwnerRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/EblOwnerRespDto"}}},"EblOwnerRespDto":{"type":"object","description":"Response of GET /tradetrust/ebl/{tokenId/owner}.","properties":{"tokenId":{"type":"string"},"owner":{"type":"string","description":"The Title Escrow address holding the token (or the registry, once surrendered)."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/owner":{"get":{"tags":["TradeTrust eBL"],"summary":"Get the current owner","description":"The Title Escrow currently owning the token (or the registry, once surrendered).","operationId":"owner","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}},{"name":"tokenRegistry","in":"query","required":true,"schema":{"type":"string","minLength":1}}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperEblOwnerRespDto"}}}}}}}}}
```
## Reject a surrender
> The issuer returns a surrendered record to the last holder, active again.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblActionReqDto":{"type":"object","description":"The two fields every eBL write that takes no extra parameter needs: surrender,\n accept-surrender, reject-surrender, reject-transfer-holder,\n reject-transfer-beneficiary, reject-transfer-owners. Extended by the writes that\n need more — see {@link EblTransferHolderReqDto EblTransferHolderReqDto}, {@link EblNewBeneficiaryReqDto EblNewBeneficiaryReqDto},\n {@link EblTransferOwnersReqDto EblTransferOwnersReqDto}.\n\n
tokenId is not here — every eBL write takes it as a path variable, not a body field.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1}},"required":["from","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/reject-surrender":{"post":{"tags":["TradeTrust eBL"],"summary":"Reject a surrender","description":"The issuer returns a surrendered record to the last holder, active again.","operationId":"rejectSurrender","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblActionReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Reject a beneficiary transfer
> Decline an incoming beneficiary transfer.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblActionReqDto":{"type":"object","description":"The two fields every eBL write that takes no extra parameter needs: surrender,\n accept-surrender, reject-surrender, reject-transfer-holder,\n reject-transfer-beneficiary, reject-transfer-owners. Extended by the writes that\n need more — see {@link EblTransferHolderReqDto EblTransferHolderReqDto}, {@link EblNewBeneficiaryReqDto EblNewBeneficiaryReqDto},\n {@link EblTransferOwnersReqDto EblTransferOwnersReqDto}.\n\n
tokenId is not here — every eBL write takes it as a path variable, not a body field.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1}},"required":["from","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/reject-transfer-beneficiary":{"post":{"tags":["TradeTrust eBL"],"summary":"Reject a beneficiary transfer","description":"Decline an incoming beneficiary transfer.","operationId":"rejectTransferBeneficiary","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblActionReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Reject a holder transfer
> Decline an incoming holder transfer. Not the same as {@link com.myeg.z2.tradetrust.controller.EblController#rejectSurrender #rejectSurrender} — unrelated flows.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblActionReqDto":{"type":"object","description":"The two fields every eBL write that takes no extra parameter needs: surrender,\n accept-surrender, reject-surrender, reject-transfer-holder,\n reject-transfer-beneficiary, reject-transfer-owners. Extended by the writes that\n need more — see {@link EblTransferHolderReqDto EblTransferHolderReqDto}, {@link EblNewBeneficiaryReqDto EblNewBeneficiaryReqDto},\n {@link EblTransferOwnersReqDto EblTransferOwnersReqDto}.\n\n
tokenId is not here — every eBL write takes it as a path variable, not a body field.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1}},"required":["from","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/reject-transfer-holder":{"post":{"tags":["TradeTrust eBL"],"summary":"Reject a holder transfer","description":"Decline an incoming holder transfer. Not the same as {@link com.myeg.z2.tradetrust.controller.EblController#rejectSurrender #rejectSurrender} — unrelated flows.","operationId":"rejectTransferHolder","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblActionReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Reject a combined transfer
> Decline an incoming combined (owners) transfer.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblActionReqDto":{"type":"object","description":"The two fields every eBL write that takes no extra parameter needs: surrender,\n accept-surrender, reject-surrender, reject-transfer-holder,\n reject-transfer-beneficiary, reject-transfer-owners. Extended by the writes that\n need more — see {@link EblTransferHolderReqDto EblTransferHolderReqDto}, {@link EblNewBeneficiaryReqDto EblNewBeneficiaryReqDto},\n {@link EblTransferOwnersReqDto EblTransferOwnersReqDto}.\n\n
tokenId is not here — every eBL write takes it as a path variable, not a body field.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1}},"required":["from","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/reject-transfer-owners":{"post":{"tags":["TradeTrust eBL"],"summary":"Reject a combined transfer","description":"Decline an incoming combined (owners) transfer.","operationId":"rejectTransferOwners","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblActionReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Surrender an eBL
> The holder returns the record to the issuer — step 1 of 3 in the end-of-life flow.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblActionReqDto":{"type":"object","description":"The two fields every eBL write that takes no extra parameter needs: surrender,\n accept-surrender, reject-surrender, reject-transfer-holder,\n reject-transfer-beneficiary, reject-transfer-owners. Extended by the writes that\n need more — see {@link EblTransferHolderReqDto EblTransferHolderReqDto}, {@link EblNewBeneficiaryReqDto EblNewBeneficiaryReqDto},\n {@link EblTransferOwnersReqDto EblTransferOwnersReqDto}.\n\n
tokenId is not here — every eBL write takes it as a path variable, not a body field.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1}},"required":["from","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/surrender":{"post":{"tags":["TradeTrust eBL"],"summary":"Surrender an eBL","description":"The holder returns the record to the issuer — step 1 of 3 in the end-of-life flow.","operationId":"surrender","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblActionReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Transfer the beneficiary
> Transfer title to the goods. Irreversible once the returned transaction is broadcast.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblNewBeneficiaryReqDto":{"type":"object","description":"Request body shape shared by POST /tradetrust/ebl/{tokenId/transfer-beneficiary}\n (irreversible once broadcast) and POST /tradetrust/ebl/{tokenId/nominate} (step 1 of the\n two-step title transfer) — both are exactly newBeneficiary + the base action fields.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1},"newBeneficiary":{"type":"string","minLength":1}},"required":["from","newBeneficiary","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/transfer-beneficiary":{"post":{"tags":["TradeTrust eBL"],"summary":"Transfer the beneficiary","description":"Transfer title to the goods. Irreversible once the returned transaction is broadcast.","operationId":"transferBeneficiary","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblNewBeneficiaryReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Transfer the holder
> Hand possession of the record to another party. Irreversible once the returned transaction is broadcast.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblTransferHolderReqDto":{"type":"object","description":"Request for POST /tradetrust/ebl/{tokenId/transfer-holder} — irreversible once broadcast.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1},"newHolder":{"type":"string","minLength":1}},"required":["from","newHolder","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/transfer-holder":{"post":{"tags":["TradeTrust eBL"],"summary":"Transfer the holder","description":"Hand possession of the record to another party. Irreversible once the returned transaction is broadcast.","operationId":"transferHolder","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblTransferHolderReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```
## Transfer beneficiary and holder
> Move beneficiary and holder together, atomically, in one transaction.
```json
{"openapi":"3.1.0","info":{"title":"myeg-z2-service - TradeTrust","version":"0.0.1"},"tags":[{"name":"TradeTrust eBL","description":"Mint, verify, and move a transferable record (eBL) through core-engine."}],"servers":[{"url":"https://api-sandbox.zetrix.com/z2","description":"Testnet / UAT, through AWS API Gateway. Needs X-API-Key in addition to the bearer token."}],"security":[{"bearerAuth":[],"apiKeyAuth":[]},{"bearerAuth":[]}],"components":{"securitySchemes":{"bearerAuth":{"type":"http","description":"OAuth2 bearer token from the shared BaaS auth server.\n\nEvery endpoint in this subset requires one. Note the security filter runs BEFORE routing, so an unauthenticated request to a path that does not exist also answers 401, not 404 - a 404 is only visible to an authenticated caller.","scheme":"bearer","bearerFormat":"JWT"}},"schemas":{"EblTransferOwnersReqDto":{"type":"object","description":"Request for POST /tradetrust/ebl/{tokenId/transfer-owners} — moves beneficiary and\n holder together, atomically, in one transaction.","properties":{"from":{"type":"string","minLength":1},"tokenRegistry":{"type":"string","minLength":1},"newBeneficiary":{"type":"string","minLength":1},"newHolder":{"type":"string","minLength":1}},"required":["from","newBeneficiary","newHolder","tokenRegistry"]},"ResponseWrapperUnsignedTxRespDto":{"type":"object","description":"Standard BaaS response envelope. Mirrors the shape used across the microservices so\n callers get a consistent contract on L2 as on L1.","properties":{"success":{"type":"boolean"},"errorCode":{"type":"string"},"message":{"type":"string"},"data":{"$ref":"#/components/schemas/UnsignedTxRespDto"}}},"UnsignedTxRespDto":{"type":"object","description":"An unsigned EVM transaction, returned by every eBL write, by mint, and by\n onboard-issuer. Nothing has happened on-chain until the from address signs and\n broadcasts it.\n\n
Four calls on this same service finish the job:\n\n
POST /tx/generate-blob with from plus the to, data and\n value below, which returns the RLP-encoded blob.\n POST /tx/sign-blob with that blob — or sign it yourself and skip this call.\n POST /tx/submit with the signedBlob.\n GET /tx/status?hash=... until it reports SUCCESS.\n Step 1 is not optional. /tx/sign-blob takes a blob string, not the\n object below, so handing this response straight to it fails validation — an easy trap, and one\n this javadoc itself set until BT-2620's follow-up corrected it.\n\n
chainId is informational: /tx/sign-blob signs with the chain this service is\n configured for, read live from the node. It matches when both this service and core-engine point\n at the same chain, which is the only supported arrangement — worth asserting rather than assuming\n if you run your own deployment of either.","properties":{"to":{"type":"string","description":"Contract to call — the token registry, or a Title Escrow."},"data":{"type":"string","description":"ABI-encoded calldata."},"value":{"type":"string","description":"Wei value as a decimal string; "0" for every eBL operation."},"chainId":{"type":"integer","format":"int64","description":"Chain the transaction must be signed for."}}}}},"paths":{"/tradetrust/ebl/{tokenId}/transfer-owners":{"post":{"tags":["TradeTrust eBL"],"summary":"Transfer beneficiary and holder","description":"Move beneficiary and holder together, atomically, in one transaction.","operationId":"transferOwners","parameters":[{"name":"tokenId","in":"path","required":true,"schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/EblTransferOwnersReqDto"}}},"required":true},"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ResponseWrapperUnsignedTxRespDto"}}}}}}}}}
```