The 3rd party is usually a service provider or other application owned or operated by the ARAP GL owner, in this scenario.  The ARAP transaction may arrive via email or other low-cost file transfer mechanism.  The boolean posted_status may only be set true by an authorized user having permissions to "post".