| Member identifier | memberID in prose, loyaltyID in the 4 Sep lookup example. | ”loyalty ID” in prose, loyaltyId in examples. Opaque, no PII. | Directional name; follows OnlinePOS default |
| Money | Integers in the example (10000 − 2000 − 1000 = 7000), unit never stated. | Integer minor units (øre) plus ISO 4217 currency. | Proposed — OnlinePOS to confirm |
| Context on the request | venue. | venueId, baxId and cashRegisterId (all required, so REKOM can attribute every order to a venue and till), terminalId, clerkNumber, channel. Names mirror the REST transaction API so reconciliation is a join. | BAX and terminal identifiers agreed after 7 Oct 2026; names directional |
| Line fields | lineId, productId, prices, discounts, allocation. | Adds quantity, unitPrice, productGroupId, productMasterId, ean, parentLineId, noDiscount, noPercentageDiscount, existing-discount text/campaign, totals, requestedAt. | Information proposed; names directional |
| Loyalty metadata on the transaction | Rich metadata (status, per-line breakdown, error, memberID filter) in V1 §15. | GUID confirmed and exposed as a meta attribute on the order in the REST API; everything else reconciled from REKOM’s own records. Further meta attributes remain an open point. | Agreed 7 Oct 2026 and after / Open |
| Authentication | ”Authentication” as part of webhook registration, unspecified. | HMAC-SHA256 request signatures (OnlinePOS-Signature), secret per environment; no scheduled rotation, REKOM swaps the secret itself with both secrets active during the overlap. | Proposed |
| Timeout and retries | ”Up to three retries… within an agreed overall maximum timeout”, numbers open. | p95 ≤ 150 ms / p99 ≤ 250 ms target on REKOM’s side; POS timeout 500 ms per attempt, one connect-retry, hard cap 3 s. | Proposed |