aps_capability_sign_effect
Consume a capability token to execute an action and sign an effect receipt, creating a verifiable attestation of the token's use.
Instructions
v0.1 capability-token sink effect receipt (M4). Sink consumes the token preimage from the gateway's M3 (rejecting on nullifier replay), executes the action, and signs an EffectReceipt binding the consumed token to the result. The (M1, M3, M4) tuple is the full attestation record. Search keywords: capability token, effect receipt, M4, sink attestation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| effect | Yes | ||
| challenge | Yes | Original SinkChallenge from M1 (for binding verification) | |
| sink_public_key | Yes | ||
| sink_private_key | Yes | ||
| challenge_receipt | Yes | ChallengeReceipt from M3 | |
| gateway_public_key | Yes | Used to verify M3 before consuming the token | |
| expected_delegation_chain_root | No | If omitted, falls back to the receipt's own root |