Keep identity and NPWP/NIK details, a status declaration you can operationalise (with versioning), contract terms covering status changes and withholding mechanics, and a threshold monitoring record that reproduces your decision at the time of payment.