Besides the changes you push, CLC reads portfolios on its own, so one missed push
does not leave the collateral stale. Point us at an endpoint of yours and we will
call it.

Give a full HTTPS URL containing the {borrower_id} placeholder, which CLC
substitutes the borrower's id on each call, so you have to store our
bor_… id alongside the portfolio on your side. Plain HTTP is rejected.

CLC issues a GET and expects the same body it would accept on
PUT /v1/borrowers/{borrowerId}/portfolio,
as_of plus the complete positions.

If your endpoint needs authentication, set header_name and header_value and
CLC sends that header on every call. Sending a name without a value is rejected.
The value is stored write-only: it is never returned by
GET /v1/portfolio-source and never appears in a
response.

Requires scope borrower:write.