Core ideas
Receipts
Verify what was bound and signed.
A receipt binds input, checks, evidence, decision, and software version.
excellent receipt verify release-current.jsonExpected result: the verifier reports whether the signed payload and digest match.
A receipt does not prove every external source was truthful. It proves which records were bound and signed together.
If verification fails, do not rely on the result until the digest or signing key issue is resolved.