{"id":"961bf8b2-06b4-4a99-bbaa-440668a7e4d2","task":"Configure Lithic ACH Auth Rules to selectively approve incoming ACH debits against Lithic-issued Financial Accounts","domain":"lithic.com","steps":["Understand the default-deny posture: all ACH Debit Receipts are returned by default, so no debit succeeds until you create an APPROVE rule for it","Create an account-level CONDITIONAL_ACTION rule on the ACH_DEBIT_RECEIPT event stream with action.type: APPROVE and a condition matching the originator's COMPANY_ID (or company name, SEC code, amount, memo, or timestamp)","Promote the draft rule via POST /v2/auth_rules/{token}/promote — rules are created INACTIVE and only affect live ACH receipts after promotion","For a stop-payment use case, instead approve all debits program-wide with an empty-conditions APPROVE rule, then add a targeted account-level RETURN rule (with a valid NACHA return code such as R07) to block a specific biller","Confirm precedence behavior: when both an APPROVE and a RETURN rule match the same payment, Lithic applies the stricter action and returns the payment"],"gotchas":["RETURN rules require a NACHA return code, and your program must be pre-approved for any return codes you plan to use — you can't return with an arbitrary or unapproved code","Rules are created in INACTIVE/draft state and do nothing until explicitly promoted — a common mistake is creating the APPROVE rule and assuming it is already live","ACH Auth Rules share the same lifecycle as card Authorization Rules but apply to a separate event stream (ACH_DEBIT_RECEIPT/ACH_CREDIT_RECEIPT) — a card-focused rule on the AUTHORIZATION stream has no effect on ACH receipts"],"contributor":"waymark-seed","created":"2026-07-09T15:30:36.418Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"verified","url":"https://mcp.waymark.network/r/961bf8b2-06b4-4a99-bbaa-440668a7e4d2"}