Record federated contribution
const url = 'https://api.aerandil.com/v1/actions/hospitality.action.record_federated_contribution/apply';const options = { method: 'POST', headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'}, body: '{"branch":"2489E9AD-2EE2-8E00-8EC9-32D5F69181C0","params":{"attestation_reference":"example","clipping_applied":true,"contribution_kind":"encrypted_aggregate","contribution_slot":"example","delta_spent":"example","epsilon_spent":"example","input_snapshot_hash":"example","input_window_end":"2026-04-15T12:00:00Z","input_window_start":"2026-04-15T12:00:00Z","local_code_digest":"example","local_record_count_bucket":"lt_10","local_runner_version":"example","local_subject_count_bucket":"lt_10","participation_id":"example","payload_hash":"example","payload_reference":"example","payload_size_bytes":1,"rejection_reason":"example","result_status":"accepted","secure_aggregation_mask_ref":"example","validation_warnings":["example"]},"return_modified":false,"target":{"id":"2489E9AD-2EE2-8E00-8EC9-32D5F69181C0","object_type":"hospitality.federated_run"}}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://api.aerandil.com/v1/actions/hospitality.action.record_federated_contribution/apply \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "branch": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "params": { "attestation_reference": "example", "clipping_applied": true, "contribution_kind": "encrypted_aggregate", "contribution_slot": "example", "delta_spent": "example", "epsilon_spent": "example", "input_snapshot_hash": "example", "input_window_end": "2026-04-15T12:00:00Z", "input_window_start": "2026-04-15T12:00:00Z", "local_code_digest": "example", "local_record_count_bucket": "lt_10", "local_runner_version": "example", "local_subject_count_bucket": "lt_10", "participation_id": "example", "payload_hash": "example", "payload_reference": "example", "payload_size_bytes": 1, "rejection_reason": "example", "result_status": "accepted", "secure_aggregation_mask_ref": "example", "validation_warnings": [ "example" ] }, "return_modified": false, "target": { "id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0", "object_type": "hospitality.federated_run" } }'Record one participant contribution metadata and payload reference. Verifies run is collecting and participant eligible, validates code digest, window, payload bounds, and forbidden raw data, validates local privacy spend against reserved budget, and marks the contribution accepted, rejected, or suppressed. Idempotent on run_id + participation_id + contribution_slot. Validators (commit 5): contribution_window_must_match_run, contribution_local_code_digest_must_match_definition, contribution_payload_size_must_be_bounded, contribution_clipping_required_for_model_update, contribution_no_raw_payload_inline.
Effects: create hospitality.federated_contribution; link hospitality.link.federated_contribution_for_run; link hospitality.link.federated_contribution_from_participation; modify hospitality.federated_run.
Authorizations
Section titled “Authorizations”Request Bodyrequired
Section titled “Request Bodyrequired”object
Apply against an open branch’s overlay view instead of the canonical (main) plane. The action’s writes land in the branch’s copy-on-first-write overlay, its events in the branch’s own stream, and the invocation is journaled for merge-by-replay. Branch writes are action-only, so this is the write-side entry point to a branch (POST /v1/branches forks one).
object
When true, the response carries modified_objects and modified_links projections — the engine reads the event log inside the same transaction so the projection observes the handler’s own writes.
object
Responses
Section titled “Responses”Action applied. modified_objects and modified_links populated when return_modified: true was supplied.
Envelope returned by the Aerandil action engine. correlation_id ties every event emitted by this invocation; modified_objects and modified_links project the events the handler emitted (per the action’s declared effects); warnings carries any non-blocking soft-validator observations.
object
Per-invocation correlation id; matches events.correlation_id for every event this action appended.
Links established or removed by this invocation. Empty when the caller did not request return_modified.
object
Objects created, modified, or soft-deleted by this invocation. Empty when the caller did not request return_modified.
object
Non-blocking soft-validator observations emitted during this invocation (e.g. comp-authority over-limit, recipe pour-cost over sell-price). Absent when no warnings were emitted.
object
Human-readable summary, suitable for logging or operator-UI surfacing.
Object type the warning was raised against.
Property the warning anchors to, when a single field is the locus. Absent for multi-field rules.
Stable kebab-case rule identifier (e.g. comp-authority-over-limit).
Example
{ "modified_links": [ { "kind": "linked", "link_type": "hospitality.link.federated_contribution_for_run" } ], "modified_objects": [ { "kind": "created", "object_type": "hospitality.federated_contribution" } ]}Conflict — concurrent modification or unique constraint violation.
Validation error — parameter validation or business-rule violation.