{
  "info": {
    "name": "Trusted Palm ID - Draft model",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json",
    "description": "Illustrative contract. No endpoint or credential is provided."
  },
  "variable": [
    {
      "key": "baseUrl",
      "value": "https://palmid.example.invalid/api/v1"
    },
    {
      "key": "accessToken",
      "value": "REPLACE_WITH_APPROVED_TEST_TOKEN"
    }
  ],
  "item": [
    {
      "name": "enrollments",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Authorization",
            "value": "Bearer {{accessToken}}"
          },
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Idempotency-Key",
            "value": "demo-request-001"
          }
        ],
        "url": "{{baseUrl}}/enrollments",
        "description": "Illustrative draft only. Not a production service. Mutual TLS is provisioned separately.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"requestId\": \"demo-request-001\",\n  \"tenantRef\": \"demo-hospital-a\",\n  \"purpose\": \"patient-verification\",\n  \"deviceRef\": \"demo-device-001\",\n  \"subjectRef\": \"demo-patient-001\",\n  \"identityProofRef\": \"demo-proof-001\",\n  \"processingBasisRef\": \"demo-basis-001\",\n  \"captureRef\": \"demo-capture-001\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "identify",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Authorization",
            "value": "Bearer {{accessToken}}"
          },
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Idempotency-Key",
            "value": "demo-request-001"
          }
        ],
        "url": "{{baseUrl}}/identify",
        "description": "Illustrative draft only. Not a production service. Mutual TLS is provisioned separately.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"requestId\": \"demo-request-001\",\n  \"tenantRef\": \"demo-hospital-a\",\n  \"purpose\": \"patient-verification\",\n  \"deviceRef\": \"demo-device-001\",\n  \"captureRef\": \"demo-capture-001\",\n  \"populationRef\": \"demo-hospital-a-enrolled\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "verify",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Authorization",
            "value": "Bearer {{accessToken}}"
          },
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Idempotency-Key",
            "value": "demo-request-001"
          }
        ],
        "url": "{{baseUrl}}/verify",
        "description": "Illustrative draft only. Not a production service. Mutual TLS is provisioned separately.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"requestId\": \"demo-request-001\",\n  \"tenantRef\": \"demo-hospital-a\",\n  \"purpose\": \"patient-verification\",\n  \"deviceRef\": \"demo-device-001\",\n  \"captureRef\": \"demo-capture-001\",\n  \"subjectRef\": \"demo-patient-001\",\n  \"businessContextRef\": \"demo-order-001\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "presence",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Authorization",
            "value": "Bearer {{accessToken}}"
          },
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Idempotency-Key",
            "value": "demo-request-001"
          }
        ],
        "url": "{{baseUrl}}/presence",
        "description": "Illustrative draft only. Not a production service. Mutual TLS is provisioned separately.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"requestId\": \"demo-request-001\",\n  \"tenantRef\": \"demo-hospital-a\",\n  \"purpose\": \"patient-verification\",\n  \"deviceRef\": \"demo-device-001\",\n  \"verificationRef\": \"demo-verification-001\",\n  \"sessionRef\": \"demo-session-001\",\n  \"locationRef\": \"demo-lab-a\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "authorizations",
      "request": {
        "method": "POST",
        "header": [
          {
            "key": "Authorization",
            "value": "Bearer {{accessToken}}"
          },
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Idempotency-Key",
            "value": "demo-request-001"
          }
        ],
        "url": "{{baseUrl}}/authorizations",
        "description": "Illustrative draft only. Not a production service. Mutual TLS is provisioned separately.",
        "body": {
          "mode": "raw",
          "raw": "{\n  \"requestId\": \"demo-request-001\",\n  \"tenantRef\": \"demo-hospital-a\",\n  \"purpose\": \"patient-verification\",\n  \"deviceRef\": \"demo-device-001\",\n  \"verificationRef\": \"demo-verification-001\",\n  \"subjectRef\": \"demo-operator-001\",\n  \"resourceRef\": \"demo-machine-001\",\n  \"action\": \"operate\",\n  \"policyRef\": \"demo-policy-001\"\n}",
          "options": {
            "raw": {
              "language": "json"
            }
          }
        }
      }
    },
    {
      "name": "evidence",
      "request": {
        "method": "GET",
        "header": [
          {
            "key": "Authorization",
            "value": "Bearer {{accessToken}}"
          },
          {
            "key": "Content-Type",
            "value": "application/json"
          }
        ],
        "url": "{{baseUrl}}/evidence/ev-demo-001",
        "description": "Illustrative draft only. Not a production service. Mutual TLS is provisioned separately."
      }
    }
  ]
}