Skip to content
aerandil.com
GitHub

Read Fraud network signal

GET
/v1/object-types/hospitality.fraud_network_signal/objects/{id}
curl --request GET \
  --url https://api.aerandil.com/v1/object-types/hospitality.fraud_network_signal/objects/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0 \
  --header 'Authorization: Bearer <token>'

Read an existing instance.

What Watchtower, the card rail’s federated fraud network (proposal 0029), answered when this house asked about a card, email or phone before holding a card — frozen as issued; only a contest is ever added. match_present says whether a fraud outcome on the rail (contributed within the last two years) carries one of the digests; the count, the breadth of houses behind it and its recency are bucketed, and breadth reads only below_cohort until the cohort floor is met — the network never says which house, nor how many. band_floor is the lowest risk band the rail lets the hold’s assessment carry and floor_basis why: a card match blocks only on the house’s own loss or on another house’s recent issuer-confirmed loss that a second house or the guest’s contact corroborates; anything else sends the hold to review. A desk that believes the guest contests the answer (contest_fraud_network_signal), which puts it before the platform’s review and lets the next answer for the same subject take the hold to review instead (desk_override, override_of). fingerprints keeps the digests the house asked about, so the platform’s review of a contest can find the contributions the answer rested on. Recorded by the card rail only.

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
id
required
string format: uuid

Object id (UUID v7, server-generated at create time).

Query Parameters

Section titled “Query Parameters”
branch
string format: uuid

Read through an open branch’s copy-on-first-write overlay view instead of the canonical (main) plane. Does not compose with as_of (422). The branch must exist under the caller’s tenant.

Responses

Section titled “Responses”

200

Section titled “200”

Object found.

Media typeapplication/json
object
created_at
required
string format: date-time
id
required
string format: uuid
object_type
required
Allowed value: hospitality.fraud_network_signal
properties
required
object
band_floor
required
The lowest band the hold's assessment may carry given this answer
string
Allowed values: low medium high block not_assessed
contest_reason
Why the desk contested it, in words
string
contested_at
When the desk contested this answer for the platform's review
string format: date-time
contributor_breadth
required
Whether the houses behind the match meet the cohort floor
string
Allowed values: none below_cohort cohort_met
expires_at
required
When the answer stops being a fair read (24 hours on)
string format: date-time
fingerprints
The digests the house asked about, as `[{kind, digest}]` — one per kind queried, 64 lower-case hex under the network salt, never an identifier — kept so the platform's review of a contest can find the contributions behind the answer (since 2026-11-03; an answer frozen before then carries none)
floor_basis
Why the answer set that floor — none, contact, card_unconfirmed, card_corroborated, card_own_house or desk_override
string
Allowed values: none contact card_unconfirmed card_corroborated card_own_house desk_override
id
required
Signal id
string
issued_at
required
When the network answered
string format: date-time
kinds_queried
required
The identifier kinds the house could ask about
Array<string>
Allowed values: card email phone
match_count_bucket
required
How many matching outcomes, bucketed
string
Allowed values: none one few many
match_present
required
Whether any confirmed outcome on the network carries one of them
boolean
matched_kinds
required
Which identifier kinds matched
Array<string>
Allowed values: card email phone
override_of
The contested answer this one takes to review instead (desk_override)
string format: uuid
recency_bucket
required
How recent the newest matching outcome is
string
Allowed values: none within_30_days within_180_days older
salt_epoch
required
The network salt generation the read was taken under
integer
subject_id
required
The subject's id
string
subject_kind
required
What the risk read was about
string
Allowed values: reservation payment charge person loyalty_redemption folio
provenance

Per-property source attribution and pins. An entry under properties means the property’s current value came from that source (on the source’s own clock, source_updated_at); an entry under pins is a human override protecting the property from sourced writes.

object
pins
object
key
additional properties
object
pinned_at
string format: date-time
pinned_by
object
reason
required
string
properties
object
key
additional properties
object
external_id
string
recorded_at
required
string format: date-time
source
required
string
source_updated_at
string format: date-time
stream
string
scope
required
One of: discriminator: level
object
level
required
string
Allowed value: tenant
Allowed values: tenant
tenant_id
required
string format: uuid
updated_at
required
string format: date-time
version
required
integer
>= 1
Example
{
  "object_type": "hospitality.fraud_network_signal",
  "properties": {
    "band_floor": "low",
    "contributor_breadth": "none",
    "floor_basis": "none",
    "kinds_queried": [
      "card"
    ],
    "match_count_bucket": "none",
    "matched_kinds": [
      "card"
    ],
    "recency_bucket": "none",
    "subject_kind": "reservation"
  },
  "scope": {
    "level": "tenant"
  }
}

Headers

Section titled “Headers”
ETag
string
/^"\d+"$/

Quoted strong validator (RFC 7232 §2.3) carrying the object’s monotonic version. Informational on the read path — object mutation goes through typed actions on /v1/actions/{action}/apply, not raw CRUD.

404

Section titled “404”

No object with that id (or soft-deleted).