Eligibility record
The eligibility record is Cleared’s unit of record: a versioned, sealed answer to “which actions are allowed for this subject under the published policy.”
Maturity: Contract-preview. Field names below are the public vocabulary; OpenAPI may add optional fields without changing meaning.
Definition
| Concept | Meaning |
|---|---|
| Subject | Legal person (or scoped entity) identified by opaque subject_ref / case_id linkage |
| Decision | pass / fail / refer at decide time |
| Policy binding | policy_version string on the seal |
| Allowances | allows[] — e.g. quote, settle, hold as issued |
| SoR proof | stratum_record_id (required for live pass). Optional optional_prove_id when public prove is up |
No vault bytes appear on this record.
Shape
Synthetic example:
{
"case_id": "case_synth_001",
"subject_ref": "subj_synth_001",
"decision": "pass",
"policy_version": "pol_v0.1.0",
"allows": ["quote", "settle"],
"stratum_record_id": "stratum_rec_synth_abc",
"optional_prove_id": null,
"decided_at": "2026-10-03T15:05:00Z",
"sealed_at": "2026-10-03T15:05:02Z",
"expires_at": "2026-10-10T00:00:00Z"
}
optional_prove_id: null under Stratum-only degrade is valid for quote SoR when Stratum seal is present — see Integration Surfaces.
What it proves
At the interface, a live sealed pass proves:
- A decision was recorded under a named
policy_version - The fact was ingested to Stratum under exactly-once semantics for that case+version
- Gate may allow actions listed in
allows[]until expiry (subject to fail-closed reads)
What it does not prove
- That internal screens or bureau results were “correct”
- That vault documents are authentic beyond Cleared’s private process
- That optional outsider prove is required for every quote
- Legal opinion, KYB certification language, or settlement finality
See Disclosure Boundary.
Idempotent seal
Seal / ingest clients MUST send:
Idempotency-Key: {case_id}:{policy_version}
Replays return the same stratum_record_id without double-writing. Gate cache updates are derived from successful seal ack — not from client-side “mark cleared” flags.