See the integration.
Before the meeting.

// Persist this BEFORE calling startCheck. Retry the same request and key.
export function newCheck(
  workflowId: string,
  workflowVersionId: string,
  redirects: { returnUrl?: string; cancelUrl?: string } = {}
): CreationIntent {
  return {
    workflowVersionId,
    request: {
      workflowId,
      executionMode: 'demo',
      requiredAge: 18,
      idempotencyKey: randomUUID(),
      context: {
        country: null,
        resource: 'restricted-area',
        device: 'desktop',
      },
      ...(redirects.returnUrl ? { returnUrl: redirects.returnUrl } : {}),
      ...(redirects.cancelUrl ? { cancelUrl: redirects.cancelUrl } : {}),
    },
  };
}

export async function startCheck(api: Gateway, intent: CreationIntent) {
  const session = await api.create(intent.request);
  validateAction(session);
  const binding: Binding = {
    sessionId: session.sessionId,
    workflowId: intent.request.workflowId,
    workflowVersionId: intent.workflowVersionId,
    resource: intent.request.context.resource,
    executionMode: 'demo',
  };
  return { binding, session };
}

// Persist the entire Decision before sending it. A retry ONLY resends that
// immutable payload; it must not re-evaluate and reuse its key for another result.
export async function witnessDecision(api: Gateway, decision: Decision) {
  const receipt = await api.recordResourceDecision(
    decision.sessionId,
    decision.effect
  );
  if (
    !receipt ||
    typeof receipt.id !== 'string' ||
    !receipt.id ||
    receipt.evidenceClass !== 'ATTESTED' ||
    !Number.isFinite(Date.parse(receipt.recordedAt)) ||
    typeof receipt.witness?.recordId !== 'string' ||
    !receipt.witness.recordId ||
    typeof receipt.witness.chainEntryId !== 'string' ||
    !receipt.witness.chainEntryId ||
    !/^[a-f0-9]{64}$/.test(receipt.witness.projectionHash)
  )
    throw new Error('A valid witness receipt is required. Keep access closed.');
  return receipt;
}