Verify a screening receipt
verify_receiptVerify an OilFlow screening receipt independently using only its receipt ID; returns the canonical payload and HMAC-SHA256 signature so auditors can confirm authenticity and coverage without trusting the server.
Instructions
Independently verify an OilFlow screening receipt. NO API KEY REQUIRED. Given a receipt id (a UUID, from receipt_id/verify_url on a verdict, or from a receipt the user was handed), returns the receipt, its canonical payload string and an HMAC-SHA256 signature, so the user's own auditor can check it without trusting OilFlow's server at audit time. receipt_type says which kind of record it is: a sanctions_screen carries the list set it checked, a predeal_verdict carries the pre-deal tier plus the depth at which it consulted sanctions data. Read coverage back to the user: sanctions-only means PEP screening is not shipped, so a politically exposed person who is not also designated will not be flagged. Use this whenever a user has been HANDED a compliance receipt and wants to know whether it is genuine and what it actually covered.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The receipt / screening id (UUID). |