Rollback an unpaid debit
Direction: Wuzzlo → Operator
Restores an eligible debit that has not already been settled or rolled back.
Processing order
- Verify the Wuzzlo
Signaturebefore creating any records. - Load the original debit and validate its lifecycle state.
- Confirm the rollback amount matches the original debit.
- Restore funds atomically and return the resulting balance.
Response contract
Security: Invalid signatures must not create transaction or idempotency records.
Authentication
Wuzzlo-to-Operator: Base64 RSA-SHA256 PKCS#1 v1.5 signature of the exact UTF-8 JSON body, verified with the Wuzzlo public key.
Request
Operator session token validated through /auth/login.
Durable idempotency key. An exact replay must return OP_DUPLICATE_REQUEST without changing balance.
Authoritative monetary amount. Use decimal-safe arithmetic.
Response
HTTP 200 rollback response. The body status MUST be the single exact value assigned to the matching scenario; statuses are not interchangeable.
Balance returned for this response scenario. Successful mutations return the calculated post-transaction balance; duplicate and rejected scenarios return the unchanged balance.