Gone (410)

The hosted-flow token is expired or already used. Tokens are single-use with a 30-minute TTL, and every dead link answers this same way — expired, consumed, or never-existed are indistinguishable on purpose (a link found in a log or screenshot must not become an oracle).

What to do

• Create a new donor_session and hand the donor the fresh url.
• Never store or reuse hosted-flow URLs; treat them as one-shot.
• A session whose link expired before anyone opened it emits partner_session.expired on your webhook/feed — that is your signal to re-send.