{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://travel.agenthaven.dev/contracts/schemas/authority-status.schema.json",
  "title": "Mandate status at the authority (check 10)",
  "description": "GET <issuer>/mandates/<jti> on the authority, answered as JSON. The seller calls it after claiming the jti and before any side effect, with a 5-second timeout and one retry, and fails closed: no answer, a non-2xx other than 404, or a status it does not act on is authority_unavailable (503); 404 is mandate_invalid; revoked is mandate_revoked. Revocation by the person or the operator flips status to revoked; the verifier polls this endpoint and the seller to measure the time to first refusal (F-07). Status: IMPLEMENTED by the seller (check 10, since 2026-09-07) and by agent-authority (https://sealedby.dev, since 2026-09-11; 404 for an unknown jti; CORS on GET).",
  "type": "object",
  "required": ["jti", "status"],
  "properties": {
    "jti": { "type": "string" },
    "status": { "type": "string", "enum": ["active", "revoked"] },
    "revoked_at": { "type": "string", "format": "date-time" },
    "revoked_by": { "type": "string", "enum": ["person", "operator"], "description": "Who revoked; never a name or a number." },
    "policy_version": { "type": "string" }
  }
}