CoreX · trust infrastructure for people, records, credentials and systemsEvidence-backed · provider-neutral · expert controls remain available
COREXIntelligence at the Core
CoreX Sandbox Examples

Readable, copyable examples without production side effects.

Use the examples to understand the sandbox request shape. The raw fixture document remains available for automated tests and deterministic replay.

Sandbox boundaries
modeSHADOW
sideEffectsfalse
productionAuthorityCreatedfalse
productionWritesAllowedfalse
providerCallsAllowedfalse
paymentCaptureAllowedfalse
credentialIssuanceAllowedfalse
entitlementMutationAllowedfalse
noteSandbox fixtures are examples only and never establish source authority.

Example requests

POST

Trust Policy Allow

Evaluate a representative allow decision without creating production authority.

/developers/sandbox/trust-policy
{
  "policyId": "SANDBOX-POLICY-ALLOW",
  "assuranceProfile": "A2_VERIFIED",
  "requiredAssuranceProfile": "A1_ACCOUNT",
  "subjectRef": "sandbox:subject",
  "resourceRef": "sandbox:resource",
  "action": "verify",
  "credentialRefs": [
    "sandbox:credential:verified"
  ],
  "requiredCredentialRefs": [
    "sandbox:credential:verified"
  ],
  "entitlementRefs": [],
  "requiredEntitlementRefs": [],
  "identityPolicyRefs": [],
  "requiredIdentityPolicyRefs": [],
  "allowedActions": [
    "verify"
  ]
}
POST

Trust Policy Step Up

Evaluate an assurance step-up requirement without changing identity or policy.

/developers/sandbox/trust-policy
{
  "policyId": "SANDBOX-POLICY-STEP-UP",
  "assuranceProfile": "A1_ACCOUNT",
  "requiredAssuranceProfile": "A2_VERIFIED",
  "subjectRef": "sandbox:subject",
  "resourceRef": "sandbox:resource",
  "action": "verify",
  "credentialRefs": [],
  "requiredCredentialRefs": [],
  "entitlementRefs": [],
  "requiredEntitlementRefs": [],
  "identityPolicyRefs": [],
  "requiredIdentityPolicyRefs": [],
  "allowedActions": [
    "verify"
  ]
}
POST

Offline Verification

Assess an explicitly timestamped offline credential snapshot without claiming live lifecycle state.

/developers/sandbox/offline-verification
{
  "credentialId": "sandbox:credential",
  "signatureStatus": "VALID",
  "lifecycleStatus": "ACTIVE",
  "statusCheckedAt": "2026-09-19T12:00:00.000Z",
  "expiresAt": "2027-09-19T12:00:00.000Z",
  "issuerRef": "sandbox:issuer",
  "maxStatusAgeSeconds": 315360000,
  "requireKnownIssuer": true
}