Docs
Every section below points at something you can run, read, or recompute. Start with the three lines.
Verify a real production receipt
This is a signed receipt from production, committed in a third-party repository. Clone the showcase folder, then:
pip install agentoracle-receipt-verify
python3 verify.py receipt.json
# → status: valid
# Ed25519 verified against the published JWKS.
# Unchecked never reports valid.Folder, the receipt, and the exact expected output: acp-cli-demos showcase ↗ · Always run through verify.py, which supplies the key set.
The receipt format
A signed record of what was checked and what came back — small enough to email, structured enough to verify on a laptop with the network off. Version 0.3 is in production. Version 0.4 is an open draft and is not normative.
Deterministic mode
For claims that are lookups rather than judgments. Six check types, no model in the trust chain, and check_mode recorded inside the signed payload so a verifier can prove it. The check-type catalog on that page is fetched live from the endpoint that serves the route, so the page cannot drift from what the endpoint does.
The verifier
Under 250 lines of Python, MIT licensed, offline against the published key set. Three outcomes: valid, invalid, indeterminate. A receipt whose key material is absent resolves to invalid — it never reports valid by omission.
Independent recomputation
argentum-core is an independent implementation whose conformance vectors matched ours byte-for-byte. Cross-language agreement is the property worth having: a single party's two code paths reproduce a misreading identically and the suite still passes.
How the evaluation runs
The gate, the confidence bands, and what happens on a failing verdict — written for someone deciding whether to put it in front of an agent.
Measurement
Experiment A measures which citations survive independent verification when an agent is gated fail-closed. The design, harness, and question set were published before any data was collected. Results ship 2 September whatever they show.
Machine-readable surfaces
Discovery documents, the agent card, and the payment manifest — for integrators wiring this up without reading prose.
What shipped, dated
Each entry corresponds to a public, verifiable artifact. That is the house style.