--- title: "Base Shell To Full Submission" url: "https://apipartners.mosaicinsurance.com/apis/trident-sandbox-1/versions/063565b3-7d5d-4ebb-9e4e-ea5966a41579/operations/enrichSubmission" --- > Full API specification: https://apipartners.mosaicinsurance.com/apis/trident-sandbox-1/versions/063565b3-7d5d-4ebb-9e4e-ea5966a41579.md # Base Shell To Full Submission `POST` `/submission/full` Operation ID: `enrichSubmission` Adds underwriting and classification data to an existing draft submission — **Step 2** of the submission lifecycle (`Base → Full → Quote`). Pass the `policyKey` and `policyActivityKey` returned by `POST /policies/submission/base` as query parameters: `?policyKey={policyKey}&policyActivityKey={policyActivityKey}`. ## Required fields `underWriter`, `mosaicOccupation`, `sectionIdentifier` (optional at Step 1, required here). ## Conditional fields `referenceType` — required when the submission's producing entity (derived from `division`) is `MSSL` or `MEEA` (Mosaic Asta Europe). ## Optional fields `umr`, `revTurnover` (insured's annual revenue/turnover), `producingUnderwriter` (defaults to `underWriter` when omitted), `lloydsIndustrialSector` (overrides the automatic derivation when supplied), `sBFClass`. ## Re-submittable Step 1 fields `insured`, `producer`, `policy`, `directAssumed`, `typeOfBilling`, `division`, `writtenLine`, `policyDescription`, `class`, `producingCompany`, `marketSource` may be re-supplied here — required only when calling `/policies/submission/full` standalone without a prior `/policies/submission/base` call. ## Derived server-side (not part of the contract) `office`, `mop`, and `typeOfPlacementBespoke` are never supplied by the caller. ## Lookup objects Reference fields are restricted per field: `producer`, `mosaicOccupation`, `underWriter`, `producingUnderwriter`, `lloydsIndustrialSector`, `sBFClass`, `policy.product`, `directAssumed`, `typeOfBilling`, `division`, `producingCompany`, `marketSource`, and `insured.insureContacts` accept `id` only; `policy.currency`, `policy.territory`, and `class` accept `code` only; `sectionIdentifier` accepts `id` only (1 = C&C, 2 = Non C&C) and `referenceType` accepts `id` only (1 = EEA, 2 = Non-EEA, 3 = Both). ## Response timing The call typically completes within 40–60 seconds. ## Query parameters - `policyKey` (string, required) - policyKey returned by Step 1 (/policies/submission/base) - `policyActivityKey` (string, required) - policyActivityKey returned by Step 1 (/policies/submission/base) ## Header parameters - `X-Origination-Source` (string, required) - Identifies the calling system or channel that originated this request. Used for traceability and auditing across the platform. - `X-Audit-UserId` (string, required) - Identifier of the end user on whose behalf this request is made, recorded for audit trail purposes. ## Request body (required) Content types: `application/json` ## Responses - `201` - Full submission created successfully. - `400` - Validation failed — one or more required fields are missing or invalid. - `500` - Internal server error — unexpected error during submission processing. ## OpenAPI definition ```yaml openapi: 3.0.1 info: title: Trident APIs version: dev servers: - url: https://apinonprod.mosaicinsurance.com description: Generated server url paths: /submission/full: post: security: - api_key: [] tags: - Submission summary: Base Shell To Full Submission description: >- Adds underwriting and classification data to an existing draft submission — **Step 2** of the submission lifecycle (`Base → Full → Quote`). Pass the `policyKey` and `policyActivityKey` returned by `POST /policies/submission/base` as query parameters: `?policyKey={policyKey}&policyActivityKey={policyActivityKey}`. ## Required fields `underWriter`, `mosaicOccupation`, `sectionIdentifier` (optional at Step 1, required here). ## Conditional fields `referenceType` — required when the submission's producing entity (derived from `division`) is `MSSL` or `MEEA` (Mosaic Asta Europe). ## Optional fields `umr`, `revTurnover` (insured's annual revenue/turnover), `producingUnderwriter` (defaults to `underWriter` when omitted), `lloydsIndustrialSector` (overrides the automatic derivation when supplied), `sBFClass`. ## Re-submittable Step 1 fields `insured`, `producer`, `policy`, `directAssumed`, `typeOfBilling`, `division`, `writtenLine`, `policyDescription`, `class`, `producingCompany`, `marketSource` may be re-supplied here — required only when calling `/policies/submission/full` standalone without a prior `/policies/submission/base` call. ## Derived server-side (not part of the contract) `office`, `mop`, and `typeOfPlacementBespoke` are never supplied by the caller. ## Lookup objects Reference fields are restricted per field: `producer`, `mosaicOccupation`, `underWriter`, `producingUnderwriter`, `lloydsIndustrialSector`, `sBFClass`, `policy.product`, `directAssumed`, `typeOfBilling`, `division`, `producingCompany`, `marketSource`, and `insured.insureContacts` accept `id` only; `policy.currency`, `policy.territory`, and `class` accept `code` only; `sectionIdentifier` accepts `id` only (1 = C&C, 2 = Non C&C) and `referenceType` accepts `id` only (1 = EEA, 2 = Non-EEA, 3 = Both). ## Response timing The call typically completes within 40–60 seconds. operationId: enrichSubmission parameters: - $ref: "#/components/parameters/XOriginationSource" - $ref: "#/components/parameters/XAuditUserId" - name: policyKey in: query description: policyKey returned by Step 1 (/policies/submission/base) required: true schema: type: string example: "20793" - name: policyActivityKey in: query description: policyActivityKey returned by Step 1 (/policies/submission/base) required: true schema: type: string example: "45632" requestBody: description: "Full submission payload. Required: `underWriter`, `mosaicOccupation`, `sectionIdentifier`. Conditional: `referenceType`. All other fields are optional." content: application/json: schema: $ref: "#/components/schemas/FullCyberSubmissionRequest" examples: Standalone — Base + Full combined: summary: Standalone — Base + Full combined description: "Use this shape when calling `/policies/submission/full` directly without a prior `/policies/submission/base` call. Includes all Step 1 fields together with the Step 2 fields. Note: `policy.product` isn't required by validation here, but omitting it leaves the UC3 (office), UC6 (sBFClass) and UC7 (majorPeril) derivations without a product code, so include it whenever you have it." value: insured: insureContacts: id: "2089372" producer: id: "2000556" policy: effectiveDate: 2026-01-15 expiryDate: 2027-01-15 currency: code: USD product: id: "4" territory: code: GBR directAssumed: id: "1" typeOfBilling: id: "1" division: id: "2" writtenLine: 100 sectionIdentifier: id: "1" referenceType: id: "2" class: code: CY producingCompany: id: "2" typeOfPlacementBespoke: id: "1" underWriter: id: "2001685" producingUnderwriter: id: "2001685" mosaicOccupation: id: "792" lloydsIndustrialSector: id: "10" sBFClass: id: "7" revTurnover: 10000 required: true responses: "201": description: Full submission created successfully. headers: Access-Control-Allow-Origin: schema: type: string Access-Control-Allow-Methods: schema: type: string Access-Control-Allow-Headers: schema: type: string content: application/json: schema: $ref: "#/components/schemas/CyberSubmissionResponse" examples: Successful Full Submission Response: summary: Full submission processed and created description: Successful Full Submission Response value: policyStatus: Quote Preparation policyNo: Q0038456 reference: CYB-2026-001 policyKey: "20894" policyActivityKey: "45632" policyActivityStatus: Active "400": description: Validation failed — one or more required fields are missing or invalid. headers: Access-Control-Allow-Origin: schema: type: string Access-Control-Allow-Methods: schema: type: string Access-Control-Allow-Headers: schema: type: string content: application/json: schema: $ref: "#/components/schemas/ErrorResponse" examples: Missing Required Field: description: Missing Required Field value: error: code: VALIDATION_ERROR message: "Missing required fields: underWriter" "500": description: Internal server error — unexpected error during submission processing. headers: Access-Control-Allow-Origin: schema: type: string Access-Control-Allow-Methods: schema: type: string Access-Control-Allow-Headers: schema: type: string content: application/json: schema: $ref: "#/components/schemas/ErrorResponse" examples: Internal Server Error: description: Internal Server Error value: error: code: INTERNAL_ERROR message: "Failed to create full cyber submission: service unavailable" security: - api_key: [] components: parameters: XOriginationSource: name: X-Origination-Source in: header required: true description: Identifies the calling system or channel that originated this request. Used for traceability and auditing across the platform. schema: type: string example: S01x XAuditUserId: name: X-Audit-UserId in: header required: true description: Identifier of the end user on whose behalf this request is made, recorded for audit trail purposes. schema: type: string example: jsmith schemas: FullCyberSubmissionRequest: type: object description: "Full submission payload — Step 2 of the submission lifecycle (`Base → Full → Quote`). Extends the Step 1 fields (all optional here, required only when calling this endpoint standalone without a prior `/policies/submission/base` call) with underwriting data. Required: `underWriter`, `mosaicOccupation`, `sectionIdentifier`. Conditional: `referenceType` (required when the producing entity, derived from `division`, is MSSL or MEEA). `office`, `mop`, and `typeOfPlacementBespoke` are NOT part of the contract — derived server-side." required: - underWriter - mosaicOccupation - sectionIdentifier properties: insured: $ref: "#/components/schemas/SubmissionInsured" description: Optional. Already on the DRAFT from Step 1; supply only when calling Full standalone. producer: $ref: "#/components/schemas/IdReference" description: Optional. Already on the DRAFT from Step 1. `id` only. policy: $ref: "#/components/schemas/SubmissionPolicy" description: Optional. Already on the DRAFT from Step 1. Use the top-level `policyDescription` field for a free-text description. directAssumed: $ref: "#/components/schemas/IdReference" description: Optional. `id` only. typeOfBilling: $ref: "#/components/schemas/IdReference" description: Optional. `id` only. division: $ref: "#/components/schemas/IdReference" description: Optional. `id` only. writtenLine: type: integer minimum: 1 format: int32 description: Optional. Written line percentage (e.g. 100). example: 100 policyDescription: type: string description: Optional. Free-text policy description. Defaulted/derived server-side when omitted. example: Cyber primary 2026 renewal class: $ref: "#/components/schemas/CodeReference" description: 'Optional. Risk class — `code` only (e.g. `{ "code": "CY" }`).' producingCompany: $ref: "#/components/schemas/IdReference" description: Optional. Producing company — `id` only. Required when division is Mosaic Asta Europe. marketSource: $ref: "#/components/schemas/IdReference" description: Optional. Market source — `id` only. sectionIdentifier: $ref: "#/components/schemas/SectionIdentifierRef" description: "**Required.** Section identifier — `id` only (1 = C&C, 2 = Non C&C)." referenceType: $ref: "#/components/schemas/ReferenceTypeRef" description: "**Conditional.** Reference type — `id` only (1 = EEA, 2 = Non-EEA, 3 = Both). Required when the producing entity (derived from `division`) is MSSL or MEEA." underWriter: $ref: "#/components/schemas/IdReference" description: '**Required.** Underwriter — `id` only (e.g. `{ "id": "8842" }`).' mosaicOccupation: $ref: "#/components/schemas/IdReference" description: '**Required.** Mosaic occupation — `id` only (e.g. `{ "id": "198" }`).' umr: type: string description: Optional. Unique Market Reference. example: B1234567890 revTurnover: type: integer minimum: 0 format: int32 description: Optional. Insured's annual revenue or turnover amount. example: 0 producingUnderwriter: $ref: "#/components/schemas/IdReference" description: Optional. Producing underwriter — `id` only. Defaults to the submission underwriter when omitted. lloydsIndustrialSector: $ref: "#/components/schemas/IdReference" description: Optional. Lloyd's industrial sector — `id` only. When supplied, takes precedence over the server's automatic derivation. sBFClass: $ref: "#/components/schemas/IdReference" description: Optional. sBFClass — `id` only. CyberSubmissionResponse: required: - policyKey - policyNo - policyStatus type: object properties: policyStatus: type: string description: Current status of the policy example: Quote Preparation enum: - Quote Preparation - Policy Updated - Bound - Declined - Referred - Quote NTU policyNo: pattern: ^[QP]\d{7}$ type: string description: Policy number assigned to the submission. Starts with 'Q' for quotes, 'P' for policies example: Q0038456 reference: type: string nullable: true description: Business reference number for tracking purposes example: CYB-2026-001 policyKey: type: string description: Internal policy key identifier used for database references example: "20894" policyActivityKey: type: string description: Internal policy activity key identifier for tracking specific policy activities example: "45632" policyActivityStatus: type: string description: Status of the current policy activity example: Active enum: - Active - Completed - Pending - Cancelled - Quote NTU quoteNo: type: string nullable: true description: Quote number assigned when the submission reaches quote stage. example: Q0021748 description: Response object containing cyber submission details including policy information, status, and reference keys ErrorResponse: type: object properties: error: $ref: "#/components/schemas/ErrorDetail" SubmissionInsured: type: object description: >- Insured details for the shell submission. **Option A — Existing contact:** Set `insureContacts.id` to the XFI contact identifier. All other insured fields are ignored. **Option B — New insured:** Provide `companyName`, `domicileCountry`, `domicileState`, and any available mailing-address fields. `insureContacts` must be omitted. properties: companyName: type: string description: "**Required when creating a new insured** (i.e. `insureContacts` is not provided). Legal company name as stated in the submission documentation." x-conditional-required: Required when creating a new insured (insureContacts not provided). example: Veritas Capital domicileCountry: description: '**Required when creating a new insured.** Domicile country — **always send as `code`**, e.g. `{ "code": "USA" }`. Represents the country where the insured is legally domiciled.' example: code: USA properties: code: description: ISO country code or XFI country code. example: USA type: string required: - code type: object x-conditional-required: Required when creating a new insured (insureContacts not provided). domicileState: description: '**Required when creating a new insured** and the domicile country has state-level data. Domicile state — **always send as `code`**, e.g. `{ "code": "NY" }`.' example: code: NJ properties: code: description: State/province code. example: NY type: string required: - code type: object x-conditional-required: Required when creating a new insured (insureContacts not provided). mailingAddress1: type: string example: 123 Cedar Street mailingAddressCity: type: string example: Green Bay email: type: string format: email description: Optional if insureContacts is provided. example: underwriting@veritascap.com zipCode: type: string description: Post code / zip for the insured mailing address. **Required when creating a new insured** and the insured’s country uses postal codes. x-conditional-required: Required when creating a new insured and the country uses postal codes. example: "54304" obligor: $ref: "#/components/schemas/IdReference" description: Conditional — Political Risk only. Obligor contact reference — `id` only. insureContacts: $ref: "#/components/schemas/IdReference" description: 'Insured contact reference — `id` only (e.g. `{ "id": "2000887" }`). Use this to reference an existing insured in XFI. When supplied, all other insured fields (companyName, domicile, mailing address) are ignored.' IdReference: type: object description: Reference to a lookup-backed entity identified by `id` (the XFI lookup id, environment-specific). required: - id additionalProperties: false properties: id: type: string description: XFI lookup id — the canonical identifier (environment-specific). example: "260" SubmissionPolicy: type: object description: Policy node. effectiveDate, expiryDate, currency, product, territory are mandatory. required: - effectiveDate - expiryDate - currency - product - territory properties: effectiveDate: type: string format: date description: "**Required.** Policy effective date (ISO 8601). Source: policy terms section of the slip." example: 2024-01-01 expiryDate: type: string format: date description: "**Required.** Policy expiry date (ISO 8601). Source: policy terms section of the slip." example: 2025-01-01 currency: $ref: "#/components/schemas/CodeReference" description: "**Required.** Currency reference — `code` only (e.g. `USD`, `GBP`, `EUR`)." product: $ref: "#/components/schemas/IdReference" description: "**Required.** Product reference — `id` only." territory: $ref: "#/components/schemas/CodeReference" description: "**Required.** Territory reference — `code` only." CodeReference: type: object description: Reference to a lookup-backed entity identified by `code` (the environment-stable business code). required: - code additionalProperties: false properties: code: type: string SectionIdentifierRef: type: object description: Section identifier, identified by `id`. Ids are fixed and stable across all environments. required: - id additionalProperties: false properties: id: type: string enum: - "1" - "2" description: 1 = C&C, 2 = Non C&C. example: "1" ReferenceTypeRef: type: object description: Reference type, identified by `id`. Ids are fixed and stable across all environments. required: - id additionalProperties: false properties: id: type: string enum: - "1" - "2" - "3" description: 1 = EEA, 2 = Non-EEA, 3 = Both. example: "1" ErrorDetail: type: object properties: code: type: string message: type: string securitySchemes: api_key: type: apiKey name: x-api-key in: header ```