Verify a receipt
verify_receiptCheck that a record still says what was signed: the permitted or refused decision, unchanged, under a trusted or embedded key. Handles both formats: ATTESTATION-v1 (a model-call decision) and ACTION-v1 (an agent tool action). No Aqta service in the check.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| profile | No | Usually omit this. The record's own signed version tag selects the format, and ATTESTATION-v1 is the default. Pass 'ACTION-v1' only to force an agent-action record to be checked as one. | |
| receipt | Yes | The record, as a JSON object or a JSON string. | |
| public_key | No | Base64url Ed25519 key to trust. Omit to use the key embedded in the record, which proves internal consistency only, never provenance. |