refinement phase 3

dev/contracts/domains/verification.md

@@ -124,9 +124,9 @@
 
 ## Admin review queue — `AdminVerificationsController` (`[Authorize(DynamicPermission)]`, rate-limited `sensitive`)
 
-### `GET api/v1/admin_verifications?status=&page=&page_size=`
+### `GET api/v1/admin_verifications?status=&page=&pageSize=`
 - **Purpose:** the review queue — one row per step awaiting attention.
-- **Params:** `status` (default `in_review`) + pagination `page`/`page_size`.
+- **Params:** `status` (default `in_review`) + pagination `page`/`pageSize`.
 - **`data`:** `PagedResult<AdminPendingStepDto>`. Documents carry **signed GET URLs**.
 
 ### `GET api/v1/admin_verifications/{nurseVerificationId}`
@@ -255,3 +255,15 @@ GET  /api/v1/nurses/{nurseId}/trust_badge  -> { isVerified: true, approvedAt, cr
   `verification_status` / `verification_step_status` / `credential_type` / `verification_method` enums;
   transactional `is_verified` flip; encrypted-never-serialized `credential_number`; three new mocked vendor
   seams (`IShahkarVerifier`, `IIdentityKycProvider`, `ICredentialVerifier`). Scheduled expiry cron deferred.
+
+---
+
+## Refinement phase 3 additions (REQ-011)
+
+- **`VerificationStepDto`** gains `isRequired` (mirrors the step-type catalog; an optional step never blocks
+  bookability).
+- **`POST api/v1/nurse_verification/credential_details`** (nurse) — captures the structured credential
+  fields collected with the uploads: `{ inoNumber (required), specialties: string[], licenseNumber?,
+  issuingAuthority?, holderName?, issuedAt?, expiresAt? }` → `VerificationStatusDto`. Upserts an
+  `ino_membership` (and, if a license number is sent, `moh_competency_license`) `nurse_credentials` row
+  (unverified — admin still decides) and persists `specialties` on the profile. The INO number is encrypted.