issue_approval_receipt
Records a human allow/deny decision and returns a signed approval receipt for audit and verification.
Instructions
Record a human allow/deny and return a signed approval receipt. The MAC covers actor, tool, resource, args hash (host ∪ model), policy version, risk, expiry, decision, and nonce (HMAC-SHA256 over CHP canonical JSON). Signing key from CHP_RECEIPT_KEY / AUDIT_LEDGER_KEY, or the documented insecure default.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| call | Yes | ||
| actor | Yes | Human approver identity (email or handle) | |
| policy | Yes | ||
| reason | No | Why the human allowed or denied | |
| decision | Yes | Human decision — logged on every issue | |
| signing_key | No | Override HMAC key (tests / local only) | |
| ttl_seconds | No | Receipt lifetime; must not exceed policy.max_ttl_seconds |