CompanyStatusExpiryAmount
Automatic activation rule
Confirmed means cryptographically confirmed.
- Receive callback through a provider-specific endpoint.
- Verify signature, timestamp and expected merchant/account.
- Match company, amount, currency and unique payment attempt.
- Reject duplicate idempotency keys and already-processed events.
- Activate the exact paid period and create an immutable audit event.
Manual reconciliation rule
References are evidence—not proof by themselves.
- Company submits a reference without banking credentials.
- Commercial administrator checks the business account/merchant portal.
- Amount, currency, company and reference must all match.
- Ambiguous records stay in Payment review.
- Activation requires a reason and is visible in the audit history.