aps_capability_sign_effect
Verifies and consumes a capability token from a gateway receipt, executes the effect, and signs an EffectReceipt, binding the token to the result to prevent replay.
Instructions
v0.1 capability-token sink effect receipt (M4). Sink consumes the token preimage from the gateway's M3 (rejecting on nullifier replay), executes the action, and signs an EffectReceipt binding the consumed token to the result. The (M1, M3, M4) tuple is the full attestation record. Search keywords: capability token, effect receipt, M4, sink attestation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| effect | Yes | ||
| challenge | Yes | Original SinkChallenge from M1 (for binding verification) | |
| sink_public_key | Yes | ||
| sink_private_key | Yes | ||
| challenge_receipt | Yes | ChallengeReceipt from M3 | |
| gateway_public_key | Yes | Used to verify M3 before consuming the token | |
| expected_delegation_chain_root | No | If omitted, falls back to the receipt's own root |