aps_capability_sign_effect
Consume a capability token, execute an action, and sign an irrevocable EffectReceipt binding the token to the outcome, forming the final attestation record.
Instructions
v0.1 capability-token sink effect receipt (M4). Sink consumes the token preimage from the gateway's M3 (rejecting on nullifier replay), executes the action, and signs an EffectReceipt binding the consumed token to the result. The (M1, M3, M4) tuple is the full attestation record. Search keywords: capability token, effect receipt, M4, sink attestation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| effect | Yes | ||
| challenge | No | Original SinkChallenge from M1 (for binding verification) | |
| sink_public_key | Yes | ||
| sink_private_key | Yes | ||
| challenge_receipt | No | ChallengeReceipt from M3 | |
| gateway_public_key | Yes | Used to verify M3 before consuming the token | |
| expected_delegation_chain_root | No | If omitted, falls back to the receipt's own root |