Each of these is a stop. Open the URL the API returned, or present the challenge the API returned. Do not retype the domain, the nonce, or the amounts into a message the borrower signs by hand, and do not ask them to paste the signature back into chat. The consent page submits the grant and the repayment.
The grant is the limit set: which merchants, how much per payment, and how much per period. Policy enforces it before a voucher is issued. Changing the grant means a new signature, not an edit from the agent.
Settlement batches are also EIP-712, signed by SohoPay’s attestation key rather than the borrower. That signature is not part of your integration. See Settlement attestation.
Next steps
Borrower onboarding
Where the first two signatures happen.
Repayment
Where the third signature happens.