Action Receipt
Turn an agent action into audit-ready evidence
An Action Receipt records the key evidence for one controlled run: policy version, checkpoint, approver, external action, and restore coverage, assembled into a tamper-evident receipt (hash-chain on roadmap).
receipt.json
finalizedrun_idrun_042
policy_hashsha256:8c1f6a9e...
checkpoint_idcp_004
action_idrefund_7781
decisionapproved_by: support_lead
external_effectpayment.refund via broker
restore_coveragefiles=enforced, runtime=enforced, egress=governed, db=brokered
receipt_hashsha256:91fd2c0a...
Enterprise reviewers need the full action chain
The receipt should show which policy allowed the action, whether a restore path existed before execution, who approved the irreversible step, and what happened in the external system.
redacted receipt payload
{
"run_id": "run_042",
"policy_hash": "sha256:8c1f6a9e...",
"checkpoint": { "id": "cp_004", "materialized": true },
"decision": { "type": "approved", "by": "support_lead" },
"receipt_hash": "sha256:91fd2c0a..."
}