{
  "type": "object",
  "properties": {
    "transferId": {
      "type": "string",
      "pattern": "^trf-"
    },
    "exportId": {
      "type": "string",
      "pattern": "^exp-"
    },
    "recipientId": {
      "type": "string"
    },
    "packageDigest": {
      "$ref": "Digest.json"
    },
    "verificationReportReference": {
      "type": "string",
      "format": "uri-reference"
    },
    "scope": {
      "type": "string",
      "minLength": 1
    },
    "acceptedAt": {
      "type": "string",
      "format": "date-time"
    }
  },
  "required": [
    "transferId",
    "exportId",
    "recipientId",
    "packageDigest",
    "verificationReportReference",
    "scope",
    "acceptedAt"
  ],
  "additionalProperties": false,
  "examples": [
    {
      "transferId": "trf-test-001",
      "exportId": "exp-test-001",
      "recipientId": "recipient-test-001",
      "packageDigest": {
        "algorithm": "SHA-256",
        "value": "5c34a84b064c4aa79bbc8f49cadeea9c55cfc9df10d655e9bc6f7a6af248e1c1"
      },
      "verificationReportReference": "urn:ltans:synthetic:recipient-report-001",
      "scope": "Complete manifest inventory for exp-test-001; cryptographic verification outside this synthetic example",
      "acceptedAt": "2026-10-15T09:00:00Z"
    }
  ],
  "description": "Recipient statement for the exact transfer/package/scope. Server must bind authenticated recipient and path transferId, compare exportId and packageDigest, authorize scope, and preserve the statement. Digest alone is not an acknowledgement or proof of cryptographic verification."
}