OpenChainGraph Suite · ART-652

Verify Receipt

Offline verifier for AINumbers Evidence Envelope v0.1 receipts. Given a receipt JSON it recomputes the RFC 8785 JCS signing preimage, verifies the Ed25519 (EdDSA) signature against the did:key resolved from issuer_id and signatures[].kid, checks that every hash field is a sha256:-prefixed 64-character hex string, and, when a prior receipt is supplied, recomputes previousReceiptHash to prove the chain link. Verify-only: it never issues a receipt, never contacts a transparency log or registry, and never resolves a DID document over the network.

compliance_controlZero PIIClient-side only

🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.

Scope & reliance

Every verdict below is RECOMPUTED from the receipt's own bytes. No self-claimed hash and no self-claimed verdict field is trusted (STANDING-ORDERS #34). The Evidence Envelope v0.1 format this node checks is an AINumbers-internal ratified artifact (research/EVIDENCE-ENVELOPE-V01-RATIFIED-2026-08-20.md), not a third-party published standard or regulation, so the node declares standards_basis: not_applicable rather than citing external clauses. What the node does NOT do: it issues nothing, signs nothing, resolves no DID document over the network, and consults no transparency log, so a signature that verifies here proves the receipt bytes match the key named inside them and nothing about whether that key is authorised. The Ed25519 and SHA-256 primitives are the vendored noble bundle inlined below, byte-identical to the kernel that runs server-side, because the zkVM guest has no WebCrypto. No formal correctness proof exists for this node yet (compute_proof_ready: deferred); see the proof-status note below the results.

Policy Parameters (JSON)

policy_parameters: { receipt, previous_receipt? } (passed verbatim to compute())

Result

Proof status

This node ships compute_proof_ready: deferred. No formal correctness proof has been produced for this kernel; the result above is a deterministic recompute, verified by a property-test floor, not a proven one.

Execution Hash & §4 Artifact

SHA-256 execution hash (JCS canonical, RFC 8785):

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `compute_verify_receipt`. Task: Offline verifier for AINumbers Evidence Envelope v0.1 receipts: recomputes the RFC 8785 JCS signing preimage, verifies the Ed25519 signature against the did:key in issuer_id, checks hash-field shape, and recomputes previousReceiptHash when a prior receipt is supplied
Call it with arguments: {"policy_parameters":{"receipt":{"schema":"ainumbers.evidence.v0.1","receipt_id":"r-0001","event_type":"policy_decision","source_adapter":"native-tool","issuer_id":"did:key:z6MkwQ66vScU6Hepc1oKGpu5TrMaCDM1oQQsaGSbEzB52pZH","issued_at":"2026-08-20T14:00:00Z","result_status":"success","input_hash":"sha256:e979b29ee8bcaf3f544784e34d467b70c683ab5d09e55c25e3b435245a77ccff","policy_digest":"sha256:ea9ede5814bedf41150053db439d54a24235dd62d18510d5288f6855d26da5b3","execution_hash":"sha256:fa15b56aeacde51aee48abb5342b48d13184689698d40993eab079ac95b8e46e","output_hash":"sha256:b5e78a89b3d010bb4265a4e77a27bf70b2ec13d52200471f35b896f989d0f1cd","links":[],"extensions":{},"signatures":[{"alg":"EdDSA","kid":"did:key:z6MkwQ66vScU6Hepc1oKGpu5TrMaCDM1oQQsaGSbEzB52pZH","value":"1h6aJpKXmQZVBwJIrKK9Vm2L--OulcUwORtKcimojjInu8hGo-AMQcQIoSUf9Jk6qB18jldkZ2HsQw612VogBA"}],"unprotected":{"proofs":{},"countersignatures":[]}}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-652-verify-receipt.html#p=v1.H4sIAAAAAAAA_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