Integrations and source ownership

• Signing provider. Agree how envelopes are created and how authenticated signer events, identity and receipts are returned. Retain the provider envelope reference on the packet.
• Document source. Agree which system supplies the document and how its hash and revision are fixed for review.
• Identity source. Map people and their organization to the accounts that may prepare, review and reconcile packets.

Agree the source of truth for each field and a stable external event identity. A repeated provider callback should resolve to the same signer observation. An unknown provider response needs reconciliation against its operation key and receipt before another action is sent. Keep credentials in the approved secret store, restrict them to the needed scope and test revocation before live use.

Use the implementation plan to rehearse those handoffs.