ORCA: Object-Relationship Content Attributes

A single program eligibility decision for one household member. One Decision is created per member per applied program at submission. Decisions are resolved automatically (via electronic checks and rules engine) or manually by a caseworker.

The eligibility determination record for an application. One Determination is created per application at submission. Its status reflects the overall progress of evaluating all household members across all applied programs.

A case represents the ongoing relationship with a client or household. It spans years, multiple applications, and multiple programs.

A document record spanning all its versions. Holds identity, type, and correlation context; file bytes live in DocumentVersion records.

A routing queue that organizes tasks by team, program, or skill.

A workflow task representing a unit of work in a safety net benefits program.

A configured external data source available in this deployment. Entries are defined in `data-exchange-config.yaml` at deployment time — not created via API. The blueprint defines entries for known federal services; states overlay to add endpoint configuration and any state-specific services.

A single external service call from submission through resolution. Governs the call lifecycle and serves as the correlation handle adapters use when calling back with a result.

A scheduled interaction between a staff member and a person at a given time.

Payload for application.closed — signals intake is complete.

Snapshot of the newly created application resource.

Payload for eligibility.application.decision_completed.

Payload for application.deleted — auto-emitted when an application record is permanently removed.

Payload for eligibility.application.determination_completed.

Payload for eligibility.application.expedited.

A single program eligibility determination result for a household member.

Client-writable fields for an application member.

Payload for application.opened — signals caseworker has begun active review.

Payload for application.review_completed — signals data collection is complete; triggers eligibility determination.

Payload for application.submitted — starts the regulatory clock; triggers program-type-aware routing (see Decision 15).

Payload for application.updated — auto-emitted on PATCH; contains only the fields that changed.

Payload for application.withdrawn — triggers open task cancellation and withdrawal notice.

Client-writable fields for an application.

Current status of the appointment.

Payload for the data_exchange.call.completed event. Carries the full result from the external service. The `result` field is polymorphic on `serviceType`. Calling domains subscribe to this event and use `metadata.{domain}` fields to route the result to the correct record.

Payload for the data_exchange.call.failed event.

Whether the call blocks until a result is returned (sync) or enters an async waiting state (async).

Payload for the data_exchange.call.submitted event.

Payload for the data_exchange.call.timed_out event.

A person associated with a case and their relationship to the primary applicant.

Current status of the case.

Citizenship and immigration status information.

Contact information and communication preferences.

How the decision was reached. `auto` — resolved by the rules engine without caseworker intervention (e.g., Medicaid ex parte). `manual` — resolved by a caseworker after review.

Outcome status of a single program eligibility decision. `pending` — not yet evaluated, or deferred to caseworker review by the rules engine. `approved` — member meets program requirements. `denied` — member does not meet requirements based on provided information. `ineligible` — member cannot qualify for this program (e.g., citizenship bar, age limit).

Demographic information for a person.

Lifecycle status of the determination. `pending` — created at submission, awaiting processing. `in_progress` — at least one Decision has been resolved. `completed` — all Decisions have reached a terminal state. `withdrawn` — the application was withdrawn before determination completed.

Payload for document_management.document.created — emitted when a document and its first version are created atomically.

Where the document is in its records management lifecycle.

Associates a document with a program record (application, case, etc.) for cross-program reuse and retention tracking.

Defines the category and retention rules for a class of documents. Baseline types are seeded from document-management-config.yaml.

An immutable record of a specific file upload. Each upload creates a new version; prior versions are preserved.

Payload for document_management.document_version.uploaded — emitted when a subsequent version is uploaded.

A CloudEvents 1.0 envelope.

Education and enrollment information.

The outcome of a single data exchange service call. Shared between the CallCompletedEvent payload and the eligibility adapter input schema so both consumers reference the same field names and result values. The serviceResult field carries the service-specific raw payload — its shape is polymorphic on serviceType.

Summary of a single electronic data check that informed a decision.

An employer of one or more people.

Basic employment information (employers and dates only).

Health coverage enrollment check result. Used to detect existing coverage that may affect Medicaid eligibility. Source and interface vary by state.

Request payload for expedited SNAP screening. Evaluates household-level financial criteria only (7 CFR § 273.2(i)) — combined income, assets, and shelter costs. States needing member-level data for their rules engine can extend this via overlay.

Response from expedited SNAP screening.

Lifecycle state of an external service call.

IRS Federal Tax Information result via FDSH. Used for income verification via tax records. See CMS FDSH FTI spec.

Medicare enrollment status result via FDSH. Used for Medicaid third-party liability checks. See CMS FDSH Medicare spec.

SSA Composite query result via FDSH. Covers SSA verification of citizenship/identity and income (Title II/XVI). See CMS FDSH SSA Hub spec.

Veteran status and coverage result via FDSH VCI. Used for third-party coverage discovery. See CMS FDSH VCI spec.

USCIS Verification of Lawful Presence result via FDSH. Used for immigration status verification. See CMS FDSH VLP spec.

Authorization context for frontend applications. Extends BackendAuthContext with UI permissions and user preferences. Used in enriched JWTs for frontends (via BFF/gateway) or returned by GET /users/me. States can customize this independently from BackendAuthContext.

Final determination request for per-household programs (snap). Extends PerHouseholdProgramRequest with the verification summary for the household.

Incarceration status check result. Used to detect active incarceration that disqualifies applicants from certain programs. Source and interface vary by state.

Final determination request for per-applicant programs (medicaid, chip, tanf, ccdf). Extends PerMemberProgramRequest with the verification summary for this applicant.

Caseworker-writable fields for an interview obligation record.

IRS Income and Eligibility Verification System result. Covers unearned income data via the IEVS interface.

Basic employment record (employer and dates only).

Request payload for Medicaid ex parte evaluation of one applicant. Extends PerMemberProgramRequest with the electronic check results needed to determine Medicaid eligibility without applicant-provided documentation.

A household member with their demographic data and associated income, expenses, and assets. Used as the evaluation payload passed to the adapter for each member.

A computed metric value with definition metadata.

A threshold or goal for the metric.

Military and veteran status information.

Base request for per-household program evaluations (snap). One call per household per program. Extends AdapterRequest with the program being evaluated, all members in the household benefit unit, and household-level data. The returned ProgramDecision represents the household unit as a whole.

Base request for per-applicant program evaluations (medicaid, chip, tanf, ccdf). One call per applicant per program. Extends AdapterRequest with the program being evaluated and the applicant's context.

Basic identity and contact information for a person.

Eligibility decision for one program, returned by the adapter. Used as the response for both per-applicant and per-household evaluations — for household programs the decision represents the household unit as a whole. Extends AdapterResponse so the blueprint's metadata is echoed back for correlation.

The event that starts the retention clock for this document type.

Authorization roles that determine base permissions and data scoping. - applicant: Self-service access to own applications (scoped by personId) - case_worker: Process applications for assigned county - supervisor: Oversee case workers, approve determinations (may span counties) - county_admin: Administer county staff and configuration - state_admin: Statewide oversight and administration (all counties) - partner_readonly: External partner with limited read access

USCIS SAVE (Systematic Alien Verification for Entitlements) result. Used for immigration status verification outside of FDSH VLP. See USCIS SAVE technical documentation.

A result count for a single resource type, enabling UI to show type-based filtering.

A single search result with a uniform shape regardless of the underlying resource type. Attributes provide typed key-value pairs for consistent client rendering.

A typed key-value pair for rendering search result details.

The type of resource matched by the search.

The specific federal service interface being called. Each type has a distinct adapter interface, input schema, and result schema. FDSH services are prefixed fdsh_ — they route through the CMS Federal Data Services Hub. IEVS sources are separate systems with distinct interfaces. See the Data Exchange architecture doc for the full reference.

SSA Income and Eligibility Verification System result. Covers SSA benefit and wage data via the IEVS interface (distinct from FDSH SSA).

State Wage Information Collection Agency result. Returns state wage records for income verification. Interface varies by state.

A workflow task representing a unit of work in a safety net benefits program.

Payload for a CRUD-emitted deleted event. Carries no data — the entity no longer exists and consumers should treat the subject ID as permanently removed.

Payload for a CRUD-emitted updated event. Contains a field-level diff recording which fields changed and their before/after values. Emitted automatically by the mock server on every PATCH request. Consumers can react to specific field mutations without fetching the full resource.

Client-writable task fields. Base schema for TaskCreate and TaskUpdate.

Minimal authorization context for backend API authorization. Stored in the User Service and embedded in JWT tokens during login. Domain APIs read these claims for authorization decisions without runtime calls to the User Service. For frontend tokens that include UI permissions and preferences, see FrontendAuthContext in user.yaml.

American Indian or Alaska Native tribal membership information.

Unemployment Insurance Benefit result. Returns current UI benefit amounts for income verification. Interface varies by state.

Computed UI permissions and display data for frontend feature toggling. Backend computes these from role and permissions to provide a UI-friendly interface for showing/hiding features. Structure is flexible - states define their own fields via overlays. Example fields: name, availableModules, canApproveApplications, etc.

User account for authentication and authorization. Links an IdP identity to roles, permissions, and county assignments. Note: Job function details (skills, team, workload) are not stored here. Staff users link to a CaseWorker record in the Case Management domain.

User preferences for the application. Structure is flexible - states define their own fields via overlays. Example fields: timezone, dateFormat, itemsPerPage, language, theme, etc.

User account status.

A document submitted as evidence against a verification obligation.

An outbound notice requesting documents from an applicant for a verification obligation.

An electronic service check result recorded as evidence against a verification obligation.

An electronic or document evidence item accumulated against a verification obligation.

A source of verification, which may be an external API or document.

A verification summary as passed by the intake domain. Extends the common shape with the member identifier from the intake domain.

Client-writable fields for a verification obligation record.