Bridge
Connect permitted actions to external bank and transaction environments while isolating core risk policy.
When to use it
Safely execute financial mutations in sandbox test environments with atomic state and permit enforcement.
Supported Operations & Data Contracts
This module operates within published graph systems and task workflows.
sandbox_transfer · Execute Sandbox Bank Transfer (Graph Only)POST /api/v1/modules/bridge
Atomically debits source balance and credits payee balance within the isolated sandbox bank ledger.
Input Parameters
| Field | Type | Requirement | Description |
|---|---|---|---|
accountId | string | Required | Source account identifier. |
payeeId | string | Required | Destination payee account identifier. |
amount | number (integer minor units) | Required | Transfer amount (e.g. 50000 for ₹500). |
currency | string ('INR') | Required | Supported currency. |
Output Fields
| Field | Type | Description |
|---|---|---|
transferId | string | Unique transaction identifier. |
status | string ('completed') | Execution status. |
parametersHash | string | Parameter hash verified against consumed execution permit. |
Example Request Payload
JSON Request BodyContent-Type: application/json
{
"operation": "sandbox_transfer",
"input": {
"accountId": "acc_101",
"payeeId": "acc_202",
"amount": 25000,
"currency": "INR"
}
}Example Response
JSON Response (HTTP 200)Cache-Control: no-store
{
"module": "bridge",
"output": {
"transferId": "tx_99812",
"status": "completed",
"parametersHash": "8b7e28a9..."
}
}Configuration in Graph Builder
When adding Bridge into a visual component or graph workflow, configure its node runtime settings in the builder inspector:
Position Bridge as the terminal execution node in durable workflows. Precede Bridge with Gate to compute parameter digests. Requires interactive human approval via /api/platform/tasks/:id/approve before execution.
Current Boundaries & Guarantees
Requires delegated sandbox:transfer scope, enabled sandbox, kill switch off, and server permit secret. Requires real signed-in customer confirmation. Direct module calls return HTTP 501.