The contract, rendered.

Permanent identifier for the filing-derived transaction. It is never reused; parser versions and restatements retain this identifier.

Immutable parse-generation identifier. Use disclosure_id, not version_id, for downstream identity across a restatement.

sha256, hex, of the canonical JSON array ["veridion-disclosure-content-v1", disclosure_id, version_id, member.member_id, member.full_name, member.chamber, asset.ticker, asset.name, asset.asset_type, asset.source_code, asset.description, transaction.type, transaction.date, filing.type, filing.filed_date, amount.range_low, amount.range_high, amount.verbatim_text, owner.label, owner.determination, receipt.document_id, receipt.url, receipt.source_system, receipt.page, provenance.source_line_number] using the served values exactly (null where null). Recompute it from this row to check the calculation; store it to check later that the same version_id still serves the same content. Derived fields (delay_days, statutory window, midpoint), timestamps, parser and methodology versions, and the change block are excluded, so a corrected derivation rule does not change the hash of an unchanged filing. The basis label changes if the field list ever changes.

Identity uses only filer, document, filed instrument, transaction date and type, amount range, and owner. Parser line, span, version, and run identifiers are excluded.

Full pulls contain upserts. updated_since also emits supersede events; remove the row only when version_id matches the version held locally. A withdrawn stable identifier remains directly retrievable with its reason.

upsert: this version is the one to hold. supersede: a version you may hold has been replaced, and is only emitted on updated_since reads.

active: served in snapshot reads. withdrawn: no longer served in snapshots but still directly retrievable by disclosure_id, with reason set.

When Veridion observed the event this row reports (the version's first observation for an upsert; the supersession instant for a supersede).

Why a row was withdrawn or superseded, when the pipeline recorded one; null for an ordinary upsert. States the mechanism, never a motive.

The filer, resolved against the congressional directory where a match exists. Identity fields only; what the filing itself says is in the receipt.

Veridion's stable identifier for the filer, the same value /v1/members/{member_id} resolves and the member_id= filter takes. Derived from the name as filed; it does not change across filings or restatements.

The filer's official Bioguide ID (for example G000596) where the congressional directory has one; null for executive-branch filers and for congressional filers the directory could not match. Never invented.

The filer's name from the official directory where matched; otherwise the name as it appears on the filing with honorifics (Hon., Sen., Rep.) removed.

house or senate from the office that published the receipt; executive for Office of Government Ethics filers.

Democrat, Republican or Independent, from the congressional directory's D, R or I; null when the directory records none and for every executive-branch filer.

Two-letter state of the seat, as recorded in the congressional directory; null for executive-branch filers.

House district as STATE-N with N an integer and 0 an at-large seat (GA-14, AK-0); null for senators, executive-branch filers, and rows whose filing does not state one. The same form the /v1/members directory uses.

The instrument as the filing names it, classified from the office's own asset code. Nothing is resolved against a securities master; a ticker is served only when the filing states one.

The ticker as it appears on the filing, upper-cased; null when the filing states none (most OGE lines, bonds, funds without a symbol, and paper filings whose ticker column is blank). Not looked up or inferred from the asset name.

The asset as named on the filing, whitespace collapsed. If the filing names nothing but gives a ticker, the ticker; if it gives neither, the literal "Disclosed asset" so the row is not silently dropped.

Classified from the office's own asset code on congressional filings: ST equity, OP option, MF and EF fund, GS government_security, PS partnership, CT crypto, anything else other. OGE lines carry equity, fund or other. etf, municipal_bond and corporate_bond are reserved in the enum and produced by no current source.

The asset code exactly as the office recorded it (ST, OP, MF, EF, GS, PS, CT and others), upper-cased; the input to asset_type. Null when the source carries none.

Free-text description from the filing's asset line when the office publishes one separately from the name; null otherwise. Never composed by Veridion.

What was done and on what date, as stated on the filing.

buy from a P code or a purchase/buy label; sell from an S code or a sale/sell label; exchange from an E code or an exchange label; other for anything the filing marks differently. Partial versus full sale is not distinguished here; the filing's own wording is in amount.verbatim_text and the receipt.

The transaction date as stated on the filing. Not the filing date, and not adjusted for weekends or holidays.

The report this row was parsed from and its timing against the STOCK Act's 45-day transaction window, computed from the two dates on the filing.

periodic_transaction_report for House Clerk and Senate eFD PTRs and OGE Form 278-T; annual_report for OGE Form 278e; null when the receipt URL matches no known form pattern. Determined from the office and receipt, not from the row's text.

The date the office records the report as filed. The STOCK Act window and delay_days are measured to this date.

filed_date minus transaction.date, in whole days, as the two dates appear on the filing. Null when either is absent. Not clamped: a filing that predates its own transaction would serve a negative value rather than a corrected one.

45 for a periodic transaction report, the STOCK Act's transaction-level reporting window; null for annual reports and unknown forms, which carry no per-transaction deadline. A constant of the form, not a per-row judgement.

Present only when the filing type has an applicable transaction-level window and delay_days is known.

The bounded range exactly as disclosed. A missing amount is never estimated.

Lower bound of the band the filing discloses, in whole USD, as printed on the form ($1,001 to $15,000 serves 1001).

Upper bound of the disclosed band, in whole USD. For an open-ended band such as "over $50,000,000" this is the stated threshold, and midpoint is absent.

Always USD. Every disclosure form Veridion serves reports in dollars.

Veridion's arithmetic midpoint of range_low and range_high, rounded to the dollar. It is a convenience, not a disclosed value: the filer reported a band, never a figure. Absent when the band is open-ended ("over", "more than", "less than" and their variants) because a midpoint of an unbounded range is invented. Use it only with the range shown beside it.

States what the amount fields are: the bounded range as the filing disclosed it. The only basis served today; a future exact-amount source would carry its own.

The amount text exactly as it appears on the filing, before any parsing. When range_low and range_high disagree with this text, this text is the filing.

Whose holding the transaction concerns, from the filing's Owner column, and how that value was established.

The filing's Owner column: self, spouse, joint or dependent_child as marked; not_specified_in_filing when the official receipt was checked and the column is blank; undetermined when the row was located but the column could not be read with confidence. See determination for how the value was established.

How the owner value was established. owner_column_undetermined means the filing row was located but the extracted text did not positively establish whether its Owner column was blank.

The government receipt this row was parsed from. Preserve the access label.

The office's own identifier for the document: the House Clerk's numeric document id, the Senate eFD report id, or the OGE document id. Resolves at /v1/receipts/{document_id}.

The government's URL for the document this row was parsed from, on the office's own domain. Never a Veridion-hosted copy. Cite it beside any claim built on the row.

gated means the official Senate eFD URL requires acknowledging its access agreement before the filing is displayed; other supported sources are open.

The office that published the receipt: house_clerk, senate_efd or oge. sec_edgar is declared in the enum and serves no rows; /v1/status reports it as no_data.

MIME type of the document at receipt.url: application/pdf for House Clerk and OGE documents, text/html for Senate eFD filings, which the Senate publishes as pages.

Page of the document the row was parsed from, where the source is paginated and the parser recorded it (OGE filings); null for congressional rows, whose position is given by provenance.source_line_number instead.

When Veridion's warehouse first recorded the source document this row comes from. Independent of provenance.parsed_at, which belongs to the parser generation and may be earlier when a later retrieval re-attached an existing parse.

How and when this version of the row was produced, and when the row was first observed, which is the instant as_of reads against. None of these fields is in content_hash.

House Clerk PTR rows carry a PDF source-line coordinate when the parser recorded one; null rows are reconciled by reason, and parser-output gaps are enumerated in house_clerk_gap_register. Senate eFD records are parsed as filing transactions rather than House PTR PDF lines, so source_line_number is null by design.

When the parser generation named in parser_version produced this version of the row. A reparse under a new parser writes a new version with its own parsed_at; the earlier version stays in /history.

The parser generation that produced this version (for example house-ptr-line-v2). Not part of content_hash, so a reparse that changes no filing fact changes no hash.

The admission and derivation rules this row was served under, currently receipt-or-drop-v1. A rule change ships as a new label and a changelog entry; see the stability policy.

When the source record entered Veridion's warehouse. first_observed_at is never later than this; the two differ when identity resolution carried an earlier observation forward.

When Veridion first observed this row. Immutable and used by the as_of filter.

Inclusive lower bound for as_of and updated_since. Requests one millisecond before this instant are refused rather than returned as an empty result.

True when requested_as_of predates retained point-in-time history. This is distinct from a genuine empty result.

Rows withheld because the serving view and executable response contract disagreed. Any value above zero means the page is partial.

The normalized updated_since filter applied to this incremental page. Null for a full snapshot pull.

Pinned on page one and carried inside every cursor. Later writes cannot shift the result set during pagination.

Atomic dataset generation pinned on page one. A value of zero means the requested as_of predates retained exact payload history, or the current-row fallback is active while temporal history is unavailable.

Every observed version of this disclosure_id, oldest first. Each entry carries its own change block (upsert or supersede, active or withdrawn) and version_id. The last entry is the current state.

Permanent identifier for the filing-derived transaction. It is never reused; parser versions and restatements retain this identifier.

Immutable parse-generation identifier. Use disclosure_id, not version_id, for downstream identity across a restatement.

sha256, hex, of the canonical JSON array ["veridion-disclosure-content-v1", disclosure_id, version_id, member.member_id, member.full_name, member.chamber, asset.ticker, asset.name, asset.asset_type, asset.source_code, asset.description, transaction.type, transaction.date, filing.type, filing.filed_date, amount.range_low, amount.range_high, amount.verbatim_text, owner.label, owner.determination, receipt.document_id, receipt.url, receipt.source_system, receipt.page, provenance.source_line_number] using the served values exactly (null where null). Recompute it from this row to check the calculation; store it to check later that the same version_id still serves the same content. Derived fields (delay_days, statutory window, midpoint), timestamps, parser and methodology versions, and the change block are excluded, so a corrected derivation rule does not change the hash of an unchanged filing. The basis label changes if the field list ever changes.

Identity uses only filer, document, filed instrument, transaction date and type, amount range, and owner. Parser line, span, version, and run identifiers are excluded.

Full pulls contain upserts. updated_since also emits supersede events; remove the row only when version_id matches the version held locally. A withdrawn stable identifier remains directly retrievable with its reason.

upsert: this version is the one to hold. supersede: a version you may hold has been replaced, and is only emitted on updated_since reads.

active: served in snapshot reads. withdrawn: no longer served in snapshots but still directly retrievable by disclosure_id, with reason set.

When Veridion observed the event this row reports (the version's first observation for an upsert; the supersession instant for a supersede).

Why a row was withdrawn or superseded, when the pipeline recorded one; null for an ordinary upsert. States the mechanism, never a motive.

The filer, resolved against the congressional directory where a match exists. Identity fields only; what the filing itself says is in the receipt.

Veridion's stable identifier for the filer, the same value /v1/members/{member_id} resolves and the member_id= filter takes. Derived from the name as filed; it does not change across filings or restatements.

The filer's official Bioguide ID (for example G000596) where the congressional directory has one; null for executive-branch filers and for congressional filers the directory could not match. Never invented.

The filer's name from the official directory where matched; otherwise the name as it appears on the filing with honorifics (Hon., Sen., Rep.) removed.

house or senate from the office that published the receipt; executive for Office of Government Ethics filers.

Democrat, Republican or Independent, from the congressional directory's D, R or I; null when the directory records none and for every executive-branch filer.

Two-letter state of the seat, as recorded in the congressional directory; null for executive-branch filers.

House district as STATE-N with N an integer and 0 an at-large seat (GA-14, AK-0); null for senators, executive-branch filers, and rows whose filing does not state one. The same form the /v1/members directory uses.

The instrument as the filing names it, classified from the office's own asset code. Nothing is resolved against a securities master; a ticker is served only when the filing states one.

The ticker as it appears on the filing, upper-cased; null when the filing states none (most OGE lines, bonds, funds without a symbol, and paper filings whose ticker column is blank). Not looked up or inferred from the asset name.

The asset as named on the filing, whitespace collapsed. If the filing names nothing but gives a ticker, the ticker; if it gives neither, the literal "Disclosed asset" so the row is not silently dropped.

Classified from the office's own asset code on congressional filings: ST equity, OP option, MF and EF fund, GS government_security, PS partnership, CT crypto, anything else other. OGE lines carry equity, fund or other. etf, municipal_bond and corporate_bond are reserved in the enum and produced by no current source.

The asset code exactly as the office recorded it (ST, OP, MF, EF, GS, PS, CT and others), upper-cased; the input to asset_type. Null when the source carries none.

Free-text description from the filing's asset line when the office publishes one separately from the name; null otherwise. Never composed by Veridion.

What was done and on what date, as stated on the filing.

buy from a P code or a purchase/buy label; sell from an S code or a sale/sell label; exchange from an E code or an exchange label; other for anything the filing marks differently. Partial versus full sale is not distinguished here; the filing's own wording is in amount.verbatim_text and the receipt.

The transaction date as stated on the filing. Not the filing date, and not adjusted for weekends or holidays.

The report this row was parsed from and its timing against the STOCK Act's 45-day transaction window, computed from the two dates on the filing.

periodic_transaction_report for House Clerk and Senate eFD PTRs and OGE Form 278-T; annual_report for OGE Form 278e; null when the receipt URL matches no known form pattern. Determined from the office and receipt, not from the row's text.

The date the office records the report as filed. The STOCK Act window and delay_days are measured to this date.

filed_date minus transaction.date, in whole days, as the two dates appear on the filing. Null when either is absent. Not clamped: a filing that predates its own transaction would serve a negative value rather than a corrected one.

45 for a periodic transaction report, the STOCK Act's transaction-level reporting window; null for annual reports and unknown forms, which carry no per-transaction deadline. A constant of the form, not a per-row judgement.

Present only when the filing type has an applicable transaction-level window and delay_days is known.

The bounded range exactly as disclosed. A missing amount is never estimated.

Lower bound of the band the filing discloses, in whole USD, as printed on the form ($1,001 to $15,000 serves 1001).

Upper bound of the disclosed band, in whole USD. For an open-ended band such as "over $50,000,000" this is the stated threshold, and midpoint is absent.

Always USD. Every disclosure form Veridion serves reports in dollars.

Veridion's arithmetic midpoint of range_low and range_high, rounded to the dollar. It is a convenience, not a disclosed value: the filer reported a band, never a figure. Absent when the band is open-ended ("over", "more than", "less than" and their variants) because a midpoint of an unbounded range is invented. Use it only with the range shown beside it.

States what the amount fields are: the bounded range as the filing disclosed it. The only basis served today; a future exact-amount source would carry its own.

The amount text exactly as it appears on the filing, before any parsing. When range_low and range_high disagree with this text, this text is the filing.

Whose holding the transaction concerns, from the filing's Owner column, and how that value was established.

The filing's Owner column: self, spouse, joint or dependent_child as marked; not_specified_in_filing when the official receipt was checked and the column is blank; undetermined when the row was located but the column could not be read with confidence. See determination for how the value was established.

How the owner value was established. owner_column_undetermined means the filing row was located but the extracted text did not positively establish whether its Owner column was blank.

The government receipt this row was parsed from. Preserve the access label.

The office's own identifier for the document: the House Clerk's numeric document id, the Senate eFD report id, or the OGE document id. Resolves at /v1/receipts/{document_id}.

The government's URL for the document this row was parsed from, on the office's own domain. Never a Veridion-hosted copy. Cite it beside any claim built on the row.

gated means the official Senate eFD URL requires acknowledging its access agreement before the filing is displayed; other supported sources are open.

The office that published the receipt: house_clerk, senate_efd or oge. sec_edgar is declared in the enum and serves no rows; /v1/status reports it as no_data.

MIME type of the document at receipt.url: application/pdf for House Clerk and OGE documents, text/html for Senate eFD filings, which the Senate publishes as pages.

Page of the document the row was parsed from, where the source is paginated and the parser recorded it (OGE filings); null for congressional rows, whose position is given by provenance.source_line_number instead.

When Veridion's warehouse first recorded the source document this row comes from. Independent of provenance.parsed_at, which belongs to the parser generation and may be earlier when a later retrieval re-attached an existing parse.

How and when this version of the row was produced, and when the row was first observed, which is the instant as_of reads against. None of these fields is in content_hash.

House Clerk PTR rows carry a PDF source-line coordinate when the parser recorded one; null rows are reconciled by reason, and parser-output gaps are enumerated in house_clerk_gap_register. Senate eFD records are parsed as filing transactions rather than House PTR PDF lines, so source_line_number is null by design.

When the parser generation named in parser_version produced this version of the row. A reparse under a new parser writes a new version with its own parsed_at; the earlier version stays in /history.

The parser generation that produced this version (for example house-ptr-line-v2). Not part of content_hash, so a reparse that changes no filing fact changes no hash.

The admission and derivation rules this row was served under, currently receipt-or-drop-v1. A rule change ships as a new label and a changelog entry; see the stability policy.

When the source record entered Veridion's warehouse. first_observed_at is never later than this; the two differ when identity resolution carried an earlier observation forward.

When Veridion first observed this row. Immutable and used by the as_of filter.

True when more than one version has been observed. States that the row's content changed after first publication; the reason, if the source gave one, is on each event's change block. No motive is inferred.

True when the version count exceeded the response cap and the oldest events were withheld rather than silently dropped mid-sequence. event_count still reports the full number observed.

Permanent identifier for the filing-derived transaction. It is never reused; parser versions and restatements retain this identifier.

Immutable parse-generation identifier. Use disclosure_id, not version_id, for downstream identity across a restatement.

sha256, hex, of the canonical JSON array ["veridion-disclosure-content-v1", disclosure_id, version_id, member.member_id, member.full_name, member.chamber, asset.ticker, asset.name, asset.asset_type, asset.source_code, asset.description, transaction.type, transaction.date, filing.type, filing.filed_date, amount.range_low, amount.range_high, amount.verbatim_text, owner.label, owner.determination, receipt.document_id, receipt.url, receipt.source_system, receipt.page, provenance.source_line_number] using the served values exactly (null where null). Recompute it from this row to check the calculation; store it to check later that the same version_id still serves the same content. Derived fields (delay_days, statutory window, midpoint), timestamps, parser and methodology versions, and the change block are excluded, so a corrected derivation rule does not change the hash of an unchanged filing. The basis label changes if the field list ever changes.

Identity uses only filer, document, filed instrument, transaction date and type, amount range, and owner. Parser line, span, version, and run identifiers are excluded.

Full pulls contain upserts. updated_since also emits supersede events; remove the row only when version_id matches the version held locally. A withdrawn stable identifier remains directly retrievable with its reason.

upsert: this version is the one to hold. supersede: a version you may hold has been replaced, and is only emitted on updated_since reads.

active: served in snapshot reads. withdrawn: no longer served in snapshots but still directly retrievable by disclosure_id, with reason set.

When Veridion observed the event this row reports (the version's first observation for an upsert; the supersession instant for a supersede).

Why a row was withdrawn or superseded, when the pipeline recorded one; null for an ordinary upsert. States the mechanism, never a motive.

The filer, resolved against the congressional directory where a match exists. Identity fields only; what the filing itself says is in the receipt.

Veridion's stable identifier for the filer, the same value /v1/members/{member_id} resolves and the member_id= filter takes. Derived from the name as filed; it does not change across filings or restatements.

The filer's official Bioguide ID (for example G000596) where the congressional directory has one; null for executive-branch filers and for congressional filers the directory could not match. Never invented.

The filer's name from the official directory where matched; otherwise the name as it appears on the filing with honorifics (Hon., Sen., Rep.) removed.

house or senate from the office that published the receipt; executive for Office of Government Ethics filers.

Democrat, Republican or Independent, from the congressional directory's D, R or I; null when the directory records none and for every executive-branch filer.

Two-letter state of the seat, as recorded in the congressional directory; null for executive-branch filers.

House district as STATE-N with N an integer and 0 an at-large seat (GA-14, AK-0); null for senators, executive-branch filers, and rows whose filing does not state one. The same form the /v1/members directory uses.

The instrument as the filing names it, classified from the office's own asset code. Nothing is resolved against a securities master; a ticker is served only when the filing states one.

The ticker as it appears on the filing, upper-cased; null when the filing states none (most OGE lines, bonds, funds without a symbol, and paper filings whose ticker column is blank). Not looked up or inferred from the asset name.

The asset as named on the filing, whitespace collapsed. If the filing names nothing but gives a ticker, the ticker; if it gives neither, the literal "Disclosed asset" so the row is not silently dropped.

Classified from the office's own asset code on congressional filings: ST equity, OP option, MF and EF fund, GS government_security, PS partnership, CT crypto, anything else other. OGE lines carry equity, fund or other. etf, municipal_bond and corporate_bond are reserved in the enum and produced by no current source.

The asset code exactly as the office recorded it (ST, OP, MF, EF, GS, PS, CT and others), upper-cased; the input to asset_type. Null when the source carries none.

Free-text description from the filing's asset line when the office publishes one separately from the name; null otherwise. Never composed by Veridion.

What was done and on what date, as stated on the filing.

buy from a P code or a purchase/buy label; sell from an S code or a sale/sell label; exchange from an E code or an exchange label; other for anything the filing marks differently. Partial versus full sale is not distinguished here; the filing's own wording is in amount.verbatim_text and the receipt.

The transaction date as stated on the filing. Not the filing date, and not adjusted for weekends or holidays.

The report this row was parsed from and its timing against the STOCK Act's 45-day transaction window, computed from the two dates on the filing.

periodic_transaction_report for House Clerk and Senate eFD PTRs and OGE Form 278-T; annual_report for OGE Form 278e; null when the receipt URL matches no known form pattern. Determined from the office and receipt, not from the row's text.

The date the office records the report as filed. The STOCK Act window and delay_days are measured to this date.

filed_date minus transaction.date, in whole days, as the two dates appear on the filing. Null when either is absent. Not clamped: a filing that predates its own transaction would serve a negative value rather than a corrected one.

45 for a periodic transaction report, the STOCK Act's transaction-level reporting window; null for annual reports and unknown forms, which carry no per-transaction deadline. A constant of the form, not a per-row judgement.

Present only when the filing type has an applicable transaction-level window and delay_days is known.

The bounded range exactly as disclosed. A missing amount is never estimated.

Lower bound of the band the filing discloses, in whole USD, as printed on the form ($1,001 to $15,000 serves 1001).

Upper bound of the disclosed band, in whole USD. For an open-ended band such as "over $50,000,000" this is the stated threshold, and midpoint is absent.

Always USD. Every disclosure form Veridion serves reports in dollars.

Veridion's arithmetic midpoint of range_low and range_high, rounded to the dollar. It is a convenience, not a disclosed value: the filer reported a band, never a figure. Absent when the band is open-ended ("over", "more than", "less than" and their variants) because a midpoint of an unbounded range is invented. Use it only with the range shown beside it.

States what the amount fields are: the bounded range as the filing disclosed it. The only basis served today; a future exact-amount source would carry its own.

The amount text exactly as it appears on the filing, before any parsing. When range_low and range_high disagree with this text, this text is the filing.

Whose holding the transaction concerns, from the filing's Owner column, and how that value was established.

The filing's Owner column: self, spouse, joint or dependent_child as marked; not_specified_in_filing when the official receipt was checked and the column is blank; undetermined when the row was located but the column could not be read with confidence. See determination for how the value was established.

How the owner value was established. owner_column_undetermined means the filing row was located but the extracted text did not positively establish whether its Owner column was blank.

The government receipt this row was parsed from. Preserve the access label.

The office's own identifier for the document: the House Clerk's numeric document id, the Senate eFD report id, or the OGE document id. Resolves at /v1/receipts/{document_id}.

The government's URL for the document this row was parsed from, on the office's own domain. Never a Veridion-hosted copy. Cite it beside any claim built on the row.

gated means the official Senate eFD URL requires acknowledging its access agreement before the filing is displayed; other supported sources are open.

The office that published the receipt: house_clerk, senate_efd or oge. sec_edgar is declared in the enum and serves no rows; /v1/status reports it as no_data.

MIME type of the document at receipt.url: application/pdf for House Clerk and OGE documents, text/html for Senate eFD filings, which the Senate publishes as pages.

Page of the document the row was parsed from, where the source is paginated and the parser recorded it (OGE filings); null for congressional rows, whose position is given by provenance.source_line_number instead.

When Veridion's warehouse first recorded the source document this row comes from. Independent of provenance.parsed_at, which belongs to the parser generation and may be earlier when a later retrieval re-attached an existing parse.

How and when this version of the row was produced, and when the row was first observed, which is the instant as_of reads against. None of these fields is in content_hash.

House Clerk PTR rows carry a PDF source-line coordinate when the parser recorded one; null rows are reconciled by reason, and parser-output gaps are enumerated in house_clerk_gap_register. Senate eFD records are parsed as filing transactions rather than House PTR PDF lines, so source_line_number is null by design.

When the parser generation named in parser_version produced this version of the row. A reparse under a new parser writes a new version with its own parsed_at; the earlier version stays in /history.

The parser generation that produced this version (for example house-ptr-line-v2). Not part of content_hash, so a reparse that changes no filing fact changes no hash.

The admission and derivation rules this row was served under, currently receipt-or-drop-v1. A rule change ships as a new label and a changelog entry; see the stability policy.

When the source record entered Veridion's warehouse. first_observed_at is never later than this; the two differ when identity resolution carried an earlier observation forward.

When Veridion first observed this row. Immutable and used by the as_of filter.

Permanent identifier for the filing-derived transaction. It is never reused; parser versions and restatements retain this identifier.

Immutable parse-generation identifier. Use disclosure_id, not version_id, for downstream identity across a restatement.

sha256, hex, of the canonical JSON array ["veridion-disclosure-content-v1", disclosure_id, version_id, member.member_id, member.full_name, member.chamber, asset.ticker, asset.name, asset.asset_type, asset.source_code, asset.description, transaction.type, transaction.date, filing.type, filing.filed_date, amount.range_low, amount.range_high, amount.verbatim_text, owner.label, owner.determination, receipt.document_id, receipt.url, receipt.source_system, receipt.page, provenance.source_line_number] using the served values exactly (null where null). Recompute it from this row to check the calculation; store it to check later that the same version_id still serves the same content. Derived fields (delay_days, statutory window, midpoint), timestamps, parser and methodology versions, and the change block are excluded, so a corrected derivation rule does not change the hash of an unchanged filing. The basis label changes if the field list ever changes.

Identity uses only filer, document, filed instrument, transaction date and type, amount range, and owner. Parser line, span, version, and run identifiers are excluded.

Full pulls contain upserts. updated_since also emits supersede events; remove the row only when version_id matches the version held locally. A withdrawn stable identifier remains directly retrievable with its reason.

upsert: this version is the one to hold. supersede: a version you may hold has been replaced, and is only emitted on updated_since reads.

active: served in snapshot reads. withdrawn: no longer served in snapshots but still directly retrievable by disclosure_id, with reason set.

When Veridion observed the event this row reports (the version's first observation for an upsert; the supersession instant for a supersede).

Why a row was withdrawn or superseded, when the pipeline recorded one; null for an ordinary upsert. States the mechanism, never a motive.

The filer, resolved against the congressional directory where a match exists. Identity fields only; what the filing itself says is in the receipt.

Veridion's stable identifier for the filer, the same value /v1/members/{member_id} resolves and the member_id= filter takes. Derived from the name as filed; it does not change across filings or restatements.

The filer's official Bioguide ID (for example G000596) where the congressional directory has one; null for executive-branch filers and for congressional filers the directory could not match. Never invented.

The filer's name from the official directory where matched; otherwise the name as it appears on the filing with honorifics (Hon., Sen., Rep.) removed.

house or senate from the office that published the receipt; executive for Office of Government Ethics filers.

Democrat, Republican or Independent, from the congressional directory's D, R or I; null when the directory records none and for every executive-branch filer.

Two-letter state of the seat, as recorded in the congressional directory; null for executive-branch filers.

House district as STATE-N with N an integer and 0 an at-large seat (GA-14, AK-0); null for senators, executive-branch filers, and rows whose filing does not state one. The same form the /v1/members directory uses.

The instrument as the filing names it, classified from the office's own asset code. Nothing is resolved against a securities master; a ticker is served only when the filing states one.

The ticker as it appears on the filing, upper-cased; null when the filing states none (most OGE lines, bonds, funds without a symbol, and paper filings whose ticker column is blank). Not looked up or inferred from the asset name.

The asset as named on the filing, whitespace collapsed. If the filing names nothing but gives a ticker, the ticker; if it gives neither, the literal "Disclosed asset" so the row is not silently dropped.

Classified from the office's own asset code on congressional filings: ST equity, OP option, MF and EF fund, GS government_security, PS partnership, CT crypto, anything else other. OGE lines carry equity, fund or other. etf, municipal_bond and corporate_bond are reserved in the enum and produced by no current source.

The asset code exactly as the office recorded it (ST, OP, MF, EF, GS, PS, CT and others), upper-cased; the input to asset_type. Null when the source carries none.

Free-text description from the filing's asset line when the office publishes one separately from the name; null otherwise. Never composed by Veridion.

What was done and on what date, as stated on the filing.

buy from a P code or a purchase/buy label; sell from an S code or a sale/sell label; exchange from an E code or an exchange label; other for anything the filing marks differently. Partial versus full sale is not distinguished here; the filing's own wording is in amount.verbatim_text and the receipt.

The transaction date as stated on the filing. Not the filing date, and not adjusted for weekends or holidays.

The report this row was parsed from and its timing against the STOCK Act's 45-day transaction window, computed from the two dates on the filing.

periodic_transaction_report for House Clerk and Senate eFD PTRs and OGE Form 278-T; annual_report for OGE Form 278e; null when the receipt URL matches no known form pattern. Determined from the office and receipt, not from the row's text.

The date the office records the report as filed. The STOCK Act window and delay_days are measured to this date.

filed_date minus transaction.date, in whole days, as the two dates appear on the filing. Null when either is absent. Not clamped: a filing that predates its own transaction would serve a negative value rather than a corrected one.

45 for a periodic transaction report, the STOCK Act's transaction-level reporting window; null for annual reports and unknown forms, which carry no per-transaction deadline. A constant of the form, not a per-row judgement.

Present only when the filing type has an applicable transaction-level window and delay_days is known.

The bounded range exactly as disclosed. A missing amount is never estimated.

Lower bound of the band the filing discloses, in whole USD, as printed on the form ($1,001 to $15,000 serves 1001).

Upper bound of the disclosed band, in whole USD. For an open-ended band such as "over $50,000,000" this is the stated threshold, and midpoint is absent.

Always USD. Every disclosure form Veridion serves reports in dollars.

Veridion's arithmetic midpoint of range_low and range_high, rounded to the dollar. It is a convenience, not a disclosed value: the filer reported a band, never a figure. Absent when the band is open-ended ("over", "more than", "less than" and their variants) because a midpoint of an unbounded range is invented. Use it only with the range shown beside it.

States what the amount fields are: the bounded range as the filing disclosed it. The only basis served today; a future exact-amount source would carry its own.

The amount text exactly as it appears on the filing, before any parsing. When range_low and range_high disagree with this text, this text is the filing.

Whose holding the transaction concerns, from the filing's Owner column, and how that value was established.

The filing's Owner column: self, spouse, joint or dependent_child as marked; not_specified_in_filing when the official receipt was checked and the column is blank; undetermined when the row was located but the column could not be read with confidence. See determination for how the value was established.

How the owner value was established. owner_column_undetermined means the filing row was located but the extracted text did not positively establish whether its Owner column was blank.

The government receipt this row was parsed from. Preserve the access label.

The office's own identifier for the document: the House Clerk's numeric document id, the Senate eFD report id, or the OGE document id. Resolves at /v1/receipts/{document_id}.

The government's URL for the document this row was parsed from, on the office's own domain. Never a Veridion-hosted copy. Cite it beside any claim built on the row.

gated means the official Senate eFD URL requires acknowledging its access agreement before the filing is displayed; other supported sources are open.

The office that published the receipt: house_clerk, senate_efd or oge. sec_edgar is declared in the enum and serves no rows; /v1/status reports it as no_data.

MIME type of the document at receipt.url: application/pdf for House Clerk and OGE documents, text/html for Senate eFD filings, which the Senate publishes as pages.

Page of the document the row was parsed from, where the source is paginated and the parser recorded it (OGE filings); null for congressional rows, whose position is given by provenance.source_line_number instead.

When Veridion's warehouse first recorded the source document this row comes from. Independent of provenance.parsed_at, which belongs to the parser generation and may be earlier when a later retrieval re-attached an existing parse.

How and when this version of the row was produced, and when the row was first observed, which is the instant as_of reads against. None of these fields is in content_hash.

House Clerk PTR rows carry a PDF source-line coordinate when the parser recorded one; null rows are reconciled by reason, and parser-output gaps are enumerated in house_clerk_gap_register. Senate eFD records are parsed as filing transactions rather than House PTR PDF lines, so source_line_number is null by design.

When the parser generation named in parser_version produced this version of the row. A reparse under a new parser writes a new version with its own parsed_at; the earlier version stays in /history.

The parser generation that produced this version (for example house-ptr-line-v2). Not part of content_hash, so a reparse that changes no filing fact changes no hash.

The admission and derivation rules this row was served under, currently receipt-or-drop-v1. A rule change ships as a new label and a changelog entry; see the stability policy.

When the source record entered Veridion's warehouse. first_observed_at is never later than this; the two differ when identity resolution carried an earlier observation forward.

When Veridion first observed this row. Immutable and used by the as_of filter.

Dereferences to the catalog entry for this problem at https://www.veridionmarkets.com/data-api/problems/{code}: what it means, who has to change something, and whether to retry.

Stable short identifier for the problem, identical to the last path segment of type. Branch on this, not on title.

Equals the X-Request-ID response header. Quote it to support.

House district as STATE-N, 0 for an at-large seat; null for senators and executive-branch filers. The same form every disclosure row's member.district uses.

The cache contract this response was served under; always no-store for a measurement. Rendered as Cache-Control: no-store, max-age=0 with CDN-Cache-Control and Vercel-CDN-Cache-Control: no-store, and echoed in X-Veridion-Cache-Policy.

Seconds a browser or client cache may reuse this body without revalidating; 0, the max-age the Cache-Control header carries.

Seconds the CDN may reuse this body; 0, because CDN-Cache-Control is no-store. Public record responses declare a nonzero value here; measurements never do.

The upper bound on how old this body can be when it reaches a client, counted from generated_at; 0 for a measurement, and the same number the X-Veridion-Cache-Max-Staleness header carries.

The name of the response header that reports how long a cache held this body, or null when no cache is permitted to hold it, as here. Public record responses name the Age header.

Rows /v1/disclosures returns right now, counted from the serving view at read time after every exclusion. Not the count of rows that qualify. Every count is nullable because the measurement reports unavailable rather than guessing when it cannot reach the view.

Licensed-feed rows for which the warehouse holds a valid HTTPS document reference.

Deprecated compatibility alias for licensed_feed_document_reference_rows; this is not the total licensed-feed population.

Deprecated compatibility alias for rows with a document URL.

All rows collected through the licensed-feed channel, whether or not a government document reference is held.

Deprecated compatibility alias for licensed_feed_rows_total.

populated divided by examined. The integer denominator and numerator remain authoritative.

Exact per-year DocID membership against completed House Clerk PTR indexes. No cross-year aggregate coverage rate is published because archive-year and filing-date buckets are different scopes.

documents_held divided by clerk_published_documents for this archive year. Counts are authoritative; a value of 1 is emitted only when documents_missing is exactly zero.

Whether this office publishes rows into v1 today. sec_edgar is listed and false: it is the declared scope boundary, not an omission. A reader should learn the boundary from the response rather than infer it from a query that returns nothing.

Merkle root over every row's content_hash (leaves in disclosure_id order, sha256 over concatenated child digests, odd node paired with itself), recomputed from the stored bytes. Null for a snapshot generated before 1.3.6. Verify with scripts/verify-disclosure-export.mjs --sha256 <sha256> --root <merkle_root>.

The contract version this response was produced under; the same value as X-API-Version.

When this response was computed. Every age_seconds below is measured from this instant, so the block is internally consistent even when read from a cache.

Always no-store with zero max-age at every layer: a status page that could be served stale would defeat itself. age_header is null because no cache is permitted to add one.

The cache contract this response was served under; always no-store for a measurement. Rendered as Cache-Control: no-store, max-age=0 with CDN-Cache-Control and Vercel-CDN-Cache-Control: no-store, and echoed in X-Veridion-Cache-Policy.

Seconds a browser or client cache may reuse this body without revalidating; 0, the max-age the Cache-Control header carries.

Seconds the CDN may reuse this body; 0, because CDN-Cache-Control is no-store. Public record responses declare a nonzero value here; measurements never do.

The upper bound on how old this body can be when it reaches a client, counted from generated_at; 0 for a measurement, and the same number the X-Veridion-Cache-Max-Staleness header carries.

The name of the response header that reports how long a cache held this body, or null when no cache is permitted to hold it, as here. Public record responses name the Age header.

ready when no check below is failing. degraded when any source is stale or unavailable, the export is stale, unavailable or missing its merkle_root, coverage recovery is stale or unavailable, the Congress summary is stale, unavailable or unattested, a temporal-conformance contract fails, the temporal window is unreadable, the House index lists unaccounted filings, or a pipeline job is not delivering. unavailable when the status itself could not be measured. The endpoint never reports a state more optimistic than its own arithmetic: a stored 'ready' older than its threshold is reported stale.

Present only on the unavailable body, naming what could not be read.

How far back as_of reads can go. The floor is the activation instant of retained payload history; depth is the time since. Neither says anything about filing completeness before the floor, which is what /v1/coverage measures.

available when the temporal dataset-state resolver answered; unavailable when it did not, which degrades the endpoint with the reason in detail.

Inclusive millisecond boundary from the same temporal dataset-state resolver used by disclosure queries; null if unreadable.

Unrounded (measured_at - point_in_time_floor) / 86400000 milliseconds. Temporal depth is not filing completeness; null means unmeasured.

The instant depth_days was measured against; equals generated_at.

Retained versions are close-only and generations append-only; the current mechanism has no age-based rolling prune.

The sentence stating how the floor and depth are measured, carried on every response.

Why the window is unavailable, when it is; null when available.

Which checks pulled state down, and the measurement behind each. Empty when state is 'ready', and empty when state is 'unavailable' because nothing could be measured. This names the cause; it does not change when the endpoint reports degraded.

The check that failed, named as the block it lives in: source:<system>, source:<system>:index_reconciliation, bulk_export, bulk_export:merkle_root, coverage_recovery, congress_public_summary, temporal_conformance, temporal_window, pipeline:attendance, or pipeline:<cron>.

The measurement behind the failure, quoted with its numbers and timestamps, so a caller can act on it without diffing the block it came from.

Freshness of every source Veridion polls, measured from the same table the serving views read. One entry per source system, including the ones that publish nothing.

house_clerk, senate_efd, oge or sec_edgar. sec_edgar is listed in no_data state as a declared scope boundary, so a reader learns it from the response rather than from a query that returns nothing.

ready: the last poll succeeded within expected_max_age_seconds. stale: the stored state says ready but last_success_at is older than the threshold; the worse of the two is reported. source_unavailable: the most recent poll failed. no_data: the source publishes no rows into v1 by policy. unknown: the stored state was unreadable.

When the source was last polled successfully; null if never.

When the current run of failed polls began; null while polls succeed.

generated_at minus last_success_at, in whole seconds; null when there is no success to measure from.

The age past which the source reads stale: 86400 for House Clerk and Senate eFD, 3888000 (45 days) for OGE annual filings, null for sec_edgar which has no poll to age.

An operational alerting threshold chosen by Veridion. Not a service commitment; commercial terms live in a license.

The stored explanation for the state, as the poller recorded it; the no_data boundary statement for sec_edgar.

The government's own index reconciled against what this API serves, when a source publishes an index we can read (House Clerk PTR search). Age says when we last succeeded; this says whether the index lists filings we do not yet account for. Null for sources without a readable index.

current: every document on the index since cutoff_date is accounted for (parsed, or terminal without qualifying rows). unaccounted: at least one is not. index_unavailable: the government index could not be read at the last check. unmeasured: no reconciliation newer than expected_max_age_seconds.

When the hourly ingest run last reconciled the House Clerk's searchable PTR index against the warehouse; null when no reconciliation has been stored.

generated_at minus checked_at, in whole seconds, floored at zero; null when checked_at is null.

The age past which the reconciliation is reported unmeasured: 21600 (6 h), the same threshold as the Congress summary, because the same hourly ingest cadence refreshes both. An operational alerting threshold, not a service commitment.

The earliest filing date the reconciliation examined: the check date minus 14 days. Documents filed before it are outside this measurement.

Documents the Clerk's index listed with a filing date on or after cutoff_date at the last check; null when the index could not be read.

Of documents_on_index, those the parser finished with qualifying rows that are served.

Documents the parser finished and found no qualifying transaction rows in; accounted for, not served.

Documents on the index since cutoff_date that are neither served nor terminal without rows, plus any document the discovery pass could not fetch. Any value above zero degrades the endpoint.

The newest filing date among documents_on_index; null when there are none.

The newest filing date among parsed_documents; the gap to latest_index_filing_date is the visible lag of the served corpus behind the government index.

Up to five unaccounted documents with the recorded reason.

The House Clerk DocID of the unaccounted filing.

The filing date the index lists for it; null when the index gave none.

The recorded overlay status and reason, as status:reason, or overlay_row_missing when the document was never attempted, truncated to 200 characters.

The daily bulk snapshot: its day, generation, size, file hash and Merkle commitment. Absent only on the unavailable body.

ready: the latest daily snapshot manifest is readable and younger than expected_max_age_seconds. stale: older. unavailable: the manifest could not be read. no_snapshot_yet: none has been written.

The UTC day the newest snapshot was pinned to, the same day /v1/export names.

When the newest snapshot finished writing and its manifest was recorded.

The temporal generation the snapshot was pinned to; the same value as_of reads and /v1/export report for that day.

Rows in the snapshot file after validation; the leaves the merkle_root commits to.

Rows the serving view returned that failed the contract schema and were left out of the file rather than written broken. Zero is the expected value; a positive count is published, never hidden.

Size in bytes of the stored snapshot file, as verified after writing.

sha256, hex, of the stored snapshot file. Verify a download against it before reading.

Merkle root over every row's content_hash in the export: leaves in disclosure_id order, sha256 over the concatenated 32-byte child digests, an odd node paired with itself. Recomputed from the stored bytes before the manifest was written. Null for a snapshot generated before 1.3.6. scripts/verify-disclosure-export.mjs recomputes it from a downloaded export with no network and compares it with this value.

The content_hash basis the leaves were hashed under (veridion-disclosure-content-v1). Set exactly when merkle_root is set.

generated_at minus the snapshot's generated_at, in whole seconds.

108000 (30 hours): the snapshot runs daily at 07:40 UTC, so one slow run passes and a fully missed day is flagged before a second day of silence.

An operational alerting threshold chosen by Veridion. Not a service commitment; commercial terms live in a license.

Why the export is not ready, when it is not; null when ready.

Hours from a filing's filed_date to Veridion's first observation, per source. Published only over rows with verified continuity; withheld with the reason otherwise. Absent only on the unavailable body.

measured when every eligible source has a published distribution; partial when some do; unavailable when none does. Never degrades the endpoint: an unpublished distribution is a disclosed limit, not a failure of served rows.

When the observation-delay report was computed; the same report /data-api renders.

The sentence stating the measurement and its eligibility rule, carried on every response.

One entry per eligible source, measured or unevaluated with its record.

A distribution is published for this source.

The source measured. OGE is excluded by policy: one annual document is one event, not a distribution.

The configured day continuous observation of this source began.

Earliest filed_date of a row in the distribution.

Latest filed_date of a row in the distribution.

Rows in the distribution: served rows whose source has verified daily continuity for every day between filed_date and first observation.

Median of first_observed_at minus filed_date, in hours, over measured_rows.

95th percentile in hours; null when withheld under 100 rows.

The largest observation delay in the distribution, in hours.

withheld_small_n when measured_rows is under 100, in which case p95_hours is null.

Attendance of the jobs that produce this API's data, from the cron attendance store. Absent only on the fail-closed 503 body. A missed, died or never-run job, a failed export run, or an unreadable store degrades the endpoint by name.

degraded when any listed job is not delivering: no successful completion since its most recent due slot, its latest run died, it has never run, or (export job only) its latest run failed. unavailable when the attendance store could not be read, which also degrades the endpoint.

When attendance was evaluated; the 24-hour window ends here.

When the attendance instrument was installed. Due slots are counted only after this instant.

Deprecated in 1.3.14; the same value as instrumented_invocations. Kept for additive compatibility.

Deprecated in 1.3.14; the same value as unwrapped_invocations.

Deprecated in 1.3.14; the same value as scheduled_invocations.

Distinct scheduled invocations (pathname plus query) whose route records attendance. One route scheduled under several query shapes counts once per shape, because a due slot belongs to one invocation.

Distinct scheduled invocations whose route records no attendance.

instrumented_invocations plus unwrapped_invocations: every distinct invocation in vercel.json.

Distinct cron pathnames that record attendance. This is the coverage figure: read it, not the invocation pair, when asking how much of the cron surface is watched.

Distinct cron pathnames that record no attendance.

instrumented_routes plus unwrapped_routes: every distinct cron pathname in vercel.json.

Lines in vercel.json's cron list. Exceeds scheduled_invocations when one URL carries more than one schedule.

Fields in this block that are kept for compatibility and should not be read for new work.

For each deprecated field, the field that carries the same value under its correct name.

The full statement of how attendance is measured: the store, the two units, slot attribution and its tolerance, and what each job state means. Carried on every response so the numbers never travel without their rules.

Why the block is unavailable, when it is; null otherwise.

The jobs that produce this API's data, one entry per invocation shape observed or scheduled.

The invocation as scheduled: pathname plus query string, exactly as vercel.json lists it.

Every cron expression vercel.json schedules this invocation under; empty when it appears in none.

false for an invocation shape that appears in no vercel.json entry. It has no due slots and cannot miss one; it is listed rather than hidden.

The job now, not the last 24 hours. missed: a due slot with no run attributed. died: the latest attempt started and never finished within its ceiling. failed: the latest run returned an error. wrote_zero: the latest run succeeded and wrote no rows. write_count_unavailable: succeeded, count unreadable. running: the latest run has not finished and is within its ceiling. never_ran: no run recorded although slots were due. unevaluated: attendance could not be read, or no run and no due slot yet. unwrapped: the route records no attendance. Precedence in that order when several apply.

Due slots in the window, from the schedules, counted only after observation_started_at.

Due slots in the window that a run was attributed to.

expected_slots_24h minus observed_slots_24h.

Runs that started in the window and attribute to no due slot, counted rather than dropped, because they ran.

Runs in the window that started and never finished within their ceiling, including ones a later run has since superseded. History; the state field describes now.

When the job last completed successfully; null if never.

The most recent run of this invocation; null when it has never run.

When the latest run started.

When the latest run finished; null while running or after it died.

Whether the latest run reported success; null until it finishes.

Rows the latest run wrote, in the unit rows_written_basis names; null when the run did not report one.

What rows_written counts, named per route, because a row means different things to different jobs.

The HTTP status the run returned; null while running.

The run's own error text, with credentials and URLs redacted; null on success.

Where House Clerk document recovery stands: how many documents are parsed, queued, failing, terminally failed, or withheld by the lossless-reparse check. Absent only on the unavailable body.

ready: every House document is parsed or terminal and the stamped measurement is current. recovery_in_progress: documents remain pending or in progress. complete_with_terminal_gaps: nothing pending, but some documents ended in a terminal failure. stale: the stamped measurement is older than its budget. unavailable: it could not be read. Any state other than ready degrades the endpoint with the measurement quoted, as does a refresh_outcome other than succeeded.

When the stamped coverage measurement was computed.

true when computed_at is older than the measurement's own stale_after budget.

House Clerk PTR documents known to the recovery ledger.

Documents queued for a parse or reparse and not yet attempted.

Documents with an attempt under way.

Documents whose latest attempt failed and will be retried.

Documents whose attempts are exhausted; no further retry is scheduled and no rows are served from them.

Documents where a reparse produced fewer rows than were served before and the lossless check rejected the replacement. Those documents are absent from the API rather than served with a lossy replacement.

The latest recorded refresh of the coverage measurement, so a reader can tell a fresh number from a stale one.

The recorded outcome of the latest coverage refresh; unevaluated when none has been recorded; unavailable when the record could not be read.

The stage the latest refresh reached: parser_state, then coverage_snapshot, then complete.

When the latest refresh started.

When the latest refresh finished; null if it did not.

generated_at minus completed_at, in whole seconds.

Documents the refresh examined to produce the counts above.

Milliseconds spent in the parser_state stage.

Milliseconds spent in the coverage_snapshot stage.

Milliseconds for the whole refresh route invocation.

The stable code of the failure, when the refresh failed; null otherwise.

The failure's own text, or why no outcome could be read; null on success.

Why the block is stale or unavailable, when it is; null otherwise.

The Congress public summary that /api/congress/summary serves, its age, and whether the newest owner outcome attests to it. Absent only on the unavailable body.

ready: the newest successful refresh outcome attests to the served summary. unattested: the summary's refreshed_at is newer than any recorded outcome, so the served figures were written by a path that did not record its outcome. stale/unavailable: age or read failure. The remaining values echo refresh_outcome.state when no better word applies; 'succeeded' is no longer emitted.

When the served Congress summary was last rewritten, in the warehouse's own timestamp form.

generated_at minus refreshed_at, in whole seconds.

21600 (6 hours): the summary's independently scheduled owner runs every four hours.

An operational alerting threshold chosen by Veridion. Not a service commitment; commercial terms live in a license.

Congressional warehouse rows the summary was computed over, including rows not yet qualified for the API.

The newest outcome recorded by the summary's owner, which is what attests the served figures.

The newest recorded outcome of the summary's owner: succeeded or failed at a stage, running while an attempt is open, stalled when an open attempt has outlived its ceiling, unevaluated when none is recorded, unavailable when the ledger could not be read.

The owner attempt this outcome belongs to. Every refresh of the summary records one; a summary refreshed without one reads unattested.

The stage the attempt reached, in order: preflight, amount_coverage, public_summary, disclosure_aggregates, verification, complete.

When the attempt started.

When the terminal event was recorded.

generated_at minus observed_at, in whole seconds.

Warehouse rows the attempt examined; zero on a failure before the summary stage.

Warehouse rows at the time of the attempt, as the owner counted them.

The refreshed_at the attempt stamped on the summary. When this equals the block's refreshed_at, the served summary is attested by this outcome.

Milliseconds in the amount_coverage stage.

Milliseconds in the public_summary stage.

Milliseconds in the disclosure_aggregates stage.

Milliseconds for the whole attempt.

The stable code of the failure, when the attempt failed; null otherwise.

The failure's own text; null on success.

Why the summary is not ready, when it is not; null when ready.

The four temporal contracts, verified against the pinned bulk snapshot. A failing contract degrades the endpoint by name. Absent only on the unavailable body.

ready when every contract passed on the pinned snapshot; degraded when any failed; unavailable when the snapshot could not be read.

When the contracts were last verified, against the pinned bulk snapshot.

One entry per contract, T1 through T4.

T1: point-in-time reads exclude later versions. T2: pagination stays fixed while writes continue. T3: incremental sync reconstructs the full set. T4: restatements preserve permanent row identity.

pass with zero violations; fail with the count; unevaluated when the evidence is missing.

Rows that broke the contract; null when unevaluated.

Rows the contract was checked over.

The UTC day the contract was last verified.

A declared boundary, stated rather than discovered.

Always false in v1: no institutional delivery channel is offered through this endpoint.

The declared reason: first-party provenance for institutional delivery has not been proven and is not claimed.

Standing guidance on reading this block: what no_data means, what degraded does and does not imply, and how to verify a download.