aps_capability_mint_receipt
Issues a signed gateway receipt for a capability token challenge, recording a permit or deny decision and the delegation chain root, allowing the sink to verify chain consistency.
Instructions
v0.1 capability-token gateway receipt (M3). Gateway signs a permit or deny over the sink's exact challenge_hash. Echoes the M2 delegation_chain_root so the sink can verify the gateway saw the same chain the subject committed to. Search keywords: capability token, challenge receipt, gateway receipt, M3.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request | No | AuthorityEvaluationRequest from M2 | |
| decision | Yes | ||
| deny_reason | No | ||
| policy_digest | Yes | SHA-256 of the policy bundle used in evaluation | |
| gateway_private_key | Yes | ||
| gateway_public_key | Yes |