User device transmits only the minimum fields registered for the declared transaction type. All other fields are cryptographically withheld at source. Vendor schema exceeding the registered minimum is rejected.