{
  "tool_id": "art-359-idv-session-receipt-builder",
  "tool_version": "1.0.0",
  "display_name": "IDV/KYC Session Evidence Receipt Builder",
  "mcp_name": "build_idv_session_receipt",
  "mandate_type": "compliance_control",
  "wave": 62,
  "gpu": false,
  "url": "https://ainumbers.co/chaingraph/art-359-idv-session-receipt-builder.html",
  "description": "Hash-chains an identity-verification (IDV/KYC) session's declared results into a tamper-evident session receipt, per attempt: session metadata (verifier identity + version, timestamp), capture-chain attestation (C2PA manifest digest if present), injection-detection verdict, liveness verdict, document-check digest, and device-signal summary. Every verifier-sourced field is labeled asserted: this kernel attests the session record as declared, not detection quality or subject genuineness. Zero PII by construction: consumes only digests, booleans, and scores, and rejects any raw-data-shaped input (images, biometric templates) before compute proceeds.",
  "input_schema_ref": "chaingraph/art-359-idv-session-receipt-builder.html#manifest",
  "consumes": [],
  "feeds": [
    "art-418-idv-verification-failure-incident-composer"
  ],
  "status": "live",
  "conformance_fixtures": true,
  "compute_capability": "server",
  "compute_images": [{"system":"sha256-source","image_id":"sha256:26c871dce0c13abab30f09deb7464533b71aeb0efca02e190a0bd388dd7274a1","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-07-10"}],
  "export_capability": [
    "json"
  ],
  "compute_proof_ready": "ready",
  "compute_proof": {"type":"ZkVmReceipt","system":"risc0","receiptFormat":"groth16-bn254","imageId":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","seal":"ItJLoA6yQhwVN7pOIlEKAmpfDwYQCv52FfVMCcD5I+UOzzpeKoFkv+KFdncbaj17milsWS53WWRgYvI6UmN7TyCWy6zd9Hhvf3XTysJjft/+n+KJbyW4PY2ZeEZaxVY2JUEklXInvkl79PlEE5Pe6ssZ481/DfBNlGjU4+sG7VQEczdVeyHlqXbSMTZEDCG6bvNAZ9bu8rATUMnESH7YBQu623Vszz+yx30xsLUfsI+NBGp9BrT8CUkhx3KTI4tXGhyd2C0fYJciLzJw3iZdwwuX8w33jsF09z6rMPPzc10TpP/JFcfJbADV+Ie6qLh+AuxLnhQYm5kYipId1WqUXQ==","journal":{"chaingraph_version":"0.4.0","kernel_digest":"sha256:26c871dce0c13abab30f09deb7464533b71aeb0efca02e190a0bd388dd7274a1","output":{"missing_fields":[],"note":"Hash-chained IDV/KYC session evidence receipt. Attests the session record AS DECLARED by the verifier -- not detection quality, not subject genuineness. All verifier-sourced fields are labeled \"asserted\". Zero PII: digests/booleans/scores only, raw-data-shaped inputs are rejected.","rejected":false,"session":{"capture_chain":{"label":"asserted","manifest_digest":"sha256:aa11aa11aa11aa11aa11aa11aa11aa11aa11aa11aa11aa11aa11aa11aa11aa1","manifest_present":true},"device_signal":{"label":"asserted","risk_score":0.05,"summary":"consistent-device-fingerprint"},"document_check":{"digest":"sha256:bb22bb22bb22bb22bb22bb22bb22bb22bb22bb22bb22bb22bb22bb22bb22bb2","label":"asserted","verdict":true},"injection_detection":{"confidence":0.97,"label":"asserted","vendor":"DetectCo","vendor_version":"1.4.0","verdict":false},"liveness":{"label":"asserted","method":"active-challenge","score":0.94,"verdict":true},"session_id":"sess-2026-0001","timestamp":"2026-07-18T09:00:00Z","verifier_id":"vendor-alpha-idv","verifier_version":"3.2.1"},"session_complete":true,"session_receipt":null}}}
}