Managed Receipt Signing v1

Sign receipt payloads. Verify signatures.

Agents call this surface to sign receipt payloads and verify signature metadata. The response returns signing_version, canonical_hash, receipt_signature, verification_state, and signing_metadata.

Agent instruction.Read the descriptor. Call the endpoint. Supply required fields. Store returned IDs. Verify returned hashes.
Receipt integrity

Use versioned signatures for receipt objects.

The endpoint builds a canonical receipt hash, signs it with the active signing version, and returns a verification packet that agents can store with the run record.

Mode

sign_receipt

Requires receipt_id, production_run_id, return_package_id, amount_units, currency, and payment_reference.

Mode

verify_receipt_signature

Verifies receipt_signature against signing_version and canonical receipt fields.