An AI agent execution receipt is a structured record of one tool call. It identifies the execution, names the tool and time, and commits to exact output bytes so a reviewer can repeat the hash check.
The names below were read from a live receipt verification response. Optional members can be absent from other records.
| Field | Meaning |
|---|---|
id | Stable identifier for this recorded execution. |
output_hash | SHA-256 commitment for the exact canonical bytes. |
hash_algorithm | Hash function named by the response. |
canonical_bytes | Base64 encoding of the exact bytes used for the output hash. |
canonical_byte_length | Length of the decoded canonical byte sequence. |
receipt_schema_version | Version label attached to the receipt record. |
tool | Tool name, version, and scope reported for the call. |
caller | Caller classification and privacy-preserving identifier. |
side_effects | Declared effects plus their schema version and commitment. |
verification_status | Verifier status returned for this record. |
verified | Boolean summary returned by the verifier. |
provenance | Source, request, observation time, and response digest when present. |
anchor | Anchor record and its reported evidence status when present. |
external_evidence | Additional evidence references returned with the record. |
checks | Individual verification checks, results, and details. |
checked_at | Time when this verification response was checked. |
This complete verification response was fetched from the public receipt wall at build time. The linked receipt and every displayed verifier field come from the live record.
{
"id": "bcfc11ee-ed2a-4e45-a014-e3b6dfe4f091",
"output_hash": "sha256:7192f53e4a9445c38bee81dba80972980882d03c45a7c0c73b4ec153e090c367",
"hash_algorithm": "sha256",
"canonical_bytes": "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",
"canonical_byte_length": 652,
"receipt_schema_version": "0.3",
"tool": {
"name": "new_session",
"version": "4.0.0",
"scope": "public"
},
"caller": {
"type": "anonymous",
"id": "sha256:1e977dac556d47de0aac5532e76dc10628e98562dda758e425f3603521816c0e"
},
"side_effects": {
"declared": [
"none"
],
"schema_version": "zambo-side-effects/1",
"declaration_hash": "sha256:45aad38f3aa982b9aafe92ecb416ebe98791eddbaf8ab6df0bd08605b7c1bfee"
},
"verification_status": "verified",
"verified": true,
"provenance": null,
"anchor": {
"event_id": "56e8851642bc9c09b4964e711fa889990d925c0e3cb71a321e8dedfeb188dc10",
"pubkey": "e13475107d30c918ec664adf2ab1141024a22fb35190f82c9e933704fa49af41",
"relays": [
"wss://relay.damus.io",
"wss://nos.lol",
"wss://relay.primal.net"
],
"status": "published",
"published_at": "2026-09-28T19:30:19.912Z",
"schema_version": "zambo-receipt-anchor/1",
"envelope": {
"anchored_at": "2026-09-28T19:30:19.298Z",
"evidence_url": null,
"receipt_uuid": "bcfc11ee-ed2a-4e45-a014-e3b6dfe4f091",
"output_sha256": "sha256:7192f53e4a9445c38bee81dba80972980882d03c45a7c0c73b4ec153e090c367",
"schema_version": "zambo-receipt-anchor/1",
"evidence_sha256": null,
"evidence_byte_length": null
},
"envelope_bytes": "{\"anchored_at\":\"2026-09-28T19:30:19.298Z\",\"evidence_byte_length\":null,\"evidence_sha256\":null,\"evidence_url\":null,\"output_sha256\":\"sha256:7192f53e4a9445c38bee81dba80972980882d03c45a7c0c73b4ec153e090c367\",\"receipt_uuid\":\"bcfc11ee-ed2a-4e45-a014-e3b6dfe4f091\",\"schema_version\":\"zambo-receipt-anchor/1\"}"
},
"external_evidence": [],
"checks": {
"signature_valid": {
"label": "Integrity check",
"passed": true,
"detail": "SHA-256 matches the stored canonical receipt bytes."
},
"issued_by_zambo_dev": {
"label": "Issued by zambo.dev",
"passed": true,
"detail": "Receipt is served from the zambo.dev receipt store."
},
"chain_valid": {
"label": "Chain valid",
"passed": true,
"detail": "Receipt hash chain is internally consistent."
},
"immutable_log_timestamp": {
"label": "Recorded in the immutable log",
"passed": true,
"timestamp": "2026-09-28T19:30:19.314Z",
"detail": "Recorded at 2026-09-28T19:30:19.314Z."
},
"receipt_schema_version": "0.3"
},
"checked_at": "2026-09-28T19:34:19.977Z"
}The verifier decodes canonical_bytes from Base64, hashes the exact bytes with SHA-256, and compares the lowercase digest with output_hash. It does not hash a parsed and reserialized display object.
curl -fsSL https://zambo.dev/api/receipt/bcfc11ee-ed2a-4e45-a014-e3b6dfe4f091/verify -o receipt.json
jq -r '.canonical_bytes' receipt.json | base64 -d | sha256sum
jq -r '.output_hash' receipt.jsonThe first command returns a local digest. Compare the part after sha256: in output_hash with the digest printed by sha256sum.
The core format checks the required receipt members and whether the declared hash matches the exact bytes. The reference-producer profile adds one payload convention: the canonical JSON object carries an inputs member alongside its tool and outputs. The missing-inputs vector is accepted by core and rejected by that profile. This is a producer convention, not an interoperation requirement.
The record's integrity and provenance are useful evidence about what the recording system observed. They do not guarantee that a tool output was correct or that an outside data source was truthful.
The live verification response includes these top-level fields: id, output_hash, hash_algorithm, canonical_bytes, canonical_byte_length, receipt_schema_version, tool, caller, side_effects, verification_status, verified, provenance, anchor, external_evidence, checks, checked_at. The table on this page describes each returned member.
Decode canonical_bytes from Base64 and compute SHA-256 over those exact bytes. Compare the lowercase digest with output_hash. Do not parse and reserialize the payload first.
It is the Base64 representation of the exact UTF-8 byte sequence committed by output_hash. The verifier hashes the decoded bytes, not a later display version.
Fetch the verification JSON, Base64-decode canonical_bytes, run sha256sum on the decoded bytes, then compare the digest with output_hash.
The core checks receipt structure and byte integrity. The reference-producer profile adds a payload convention requiring an inputs member. The missing-inputs boundary is core-valid and profile-rejected.