| 1 | An individual reaches verified or manual-review end to end: create, identity document, submit, poll | Run the individual journey |
| 2 | A company with two or more key parties reaches a verdict after the submit | Run the company journey |
| 3 | Your client reads the client id and secret from a secret store, caches the bearer token until shortly before it expires, sends it only in the Authorization header, and gets a new token on a 401 from the gateway | Code review against Sandbox and authentication |
| 4 | investorId and every keyPartyId are stored as soon as the create answers; a crash between the create and storing the id is recovered by repeating the create with the same body | Stop your process between the create and the store, resume, and check there is no second investor |
| 5 | Your flow branches on the create’s status code: 201, 200 (limited access) and each 409 | Code review |
| 6 | Corrections are sent only before the submit | Code review |
| 7 | Uploads branch on the status code and on verification.status, and handle the three 502 codes as documented | Code review against Documents |
| 8 | The submit reads status and each result, calls again on incomplete, and drives missing uploads from details on 422 | Code review |
| 9 | A separate poller reads the status by investorId, stops on a final status and follows the production cadence | Statuses |
| 10 | manual-review keeps the investor pending in your product and is never shown as a rejection | Product review against Handling manual-review |
| 11 | If you whitelist wallets: the suitability is sent before whitelisting, the DLT test is offered to investors in the EEA, and whitelisting is polled until it leaves processing | Run the whitelisting guide |
| 12 | If you send tax forms: each PDF goes as multipart/form-data, with the form that fits the investor’s type; a W-9 sent as data goes only after the investor certified it in your flow on the published certification text, with that certification, and a 409 tax_form_already_active naming a W-9 you sent is treated as on file, any other goes to support; each W-8’s expiry date (December 31 of the third year after signing) is stored with the investor, and a newly signed form is sent before it | Run the tax-form guide |
| 13 | Every non-2xx response is logged with its correlationId; document content is never logged | Log review |
| 14 | No client secret or access token is present in source control, scripts or shared documents | Secret scan |
