OptionalpublisherOptionalonLocal diagnostics for request_signature_* discovery causes.
OptionaljwksDeterministic/custom key source. Defaults to resolveAgent brand.json discovery.
OptionalreplayShared nonce replay store. Defaults to one process-local store per client.
OptionalrevocationKey revocation source. Defaults to one process-local store per client.
OptionalnowClock in epoch seconds.
OptionalresolverSafe discovery/cache tuning for the default seller-pinned JWK resolver.
OptionalfetchFetch capabilities for seller key discovery. The callback must authenticate only to the supplied, already-pinned seller URL and protocol.
Applicable pins from persisted media-buy records. Reuse refresh callbacks bound to the seller/publisher/tenant across deliveries to share their cooldown. Never use webhook payload fields.