Action Receipt

Turn an agent action into audit-ready evidence

An Action Receipt records the key evidence for one controlled run: policy version, checkpoint, approver, external action, and restore coverage, assembled into a tamper-evident receipt (hash-chain on roadmap).

receipt.json

finalized
run_idrun_042
policy_hashsha256:8c1f6a9e...
checkpoint_idcp_004
action_idrefund_7781
decisionapproved_by: support_lead
external_effectpayment.refund via broker
restore_coveragefiles=enforced, runtime=enforced, egress=governed, db=brokered
receipt_hashsha256:91fd2c0a...

Enterprise reviewers need the full action chain

The receipt should show which policy allowed the action, whether a restore path existed before execution, who approved the irreversible step, and what happened in the external system.

redacted receipt payload
{
  "run_id": "run_042",
  "policy_hash": "sha256:8c1f6a9e...",
  "checkpoint": { "id": "cp_004", "materialized": true },
  "decision": { "type": "approved", "by": "support_lead" },
  "receipt_hash": "sha256:91fd2c0a..."
}