aps_capability_sign_effect
Consume a capability token from a ChallengeReceipt, execute an action, and produce a signed EffectReceipt that binds the token to the outcome, completing the sink attestation (M4) for the capability protocol.
Instructions
v0.1 capability-token sink effect receipt (M4). Sink consumes the token preimage from the gateway's M3 (rejecting on nullifier replay), executes the action, and signs an EffectReceipt binding the consumed token to the result. The (M1, M3, M4) tuple is the full attestation record. Search keywords: capability token, effect receipt, M4, sink attestation.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| challenge | No | Original SinkChallenge from M1 (for binding verification) | |
| challenge_receipt | No | ChallengeReceipt from M3 | |
| effect | Yes | ||
| sink_private_key | Yes | ||
| sink_public_key | Yes | ||
| gateway_public_key | Yes | Used to verify M3 before consuming the token | |
| expected_delegation_chain_root | No | If omitted, falls back to the receipt's own root |