Telemetry Payload Schema

The WaspadaTelemetryPayload is the JSON object sent from the SDK to the Gateway.

interface WaspadaTelemetryPayload {
  /** UUID v4 event identifier */
  event_id: string;

  /** ISO 8601 UTC timestamp */
  timestamp_utc: string;

  /** Registered partner platform ID */
  source_platform: string;

  /** SDK semantic version */
  sdk_version: string;

  /** Extracted threat indicators (PII-stripped) */
  indicators: ExtractedIndicators;

  /** Extraction confidence (0.0 - 1.0) */
  extraction_confidence: number;

  /** Source document type */
  document_type: "PDF" | "IMAGE";

  /** Client-side verification metadata */
  client_verification: {
    extraction_tier: "REGEX_ONLY" | "NER_ENCODER" | "HYBRID";
    sdk_version: string;
    platform_attestation: string | null;
    local_crypto_hash: string;
  };

  /** RS256 JWT signature from partner backend */
  client_signature: string;
}

interface ExtractedIndicators {
  mule_bank_bic?: string;
  mule_account_number?: string;
  scammer_alias?: string;
  malicious_urls?: string[];
}

PII Fields That Are NEVER Transmitted

Field	Status
Victim name	Stripped
Victim NRIC	Stripped
Victim phone	Stripped
Victim account	Stripped
Transaction amount	Stripped
Device fingerprint	Never collected