- receipt
- loading…
- tool
- loading…
- outcome
- loading…
- charged
- loading…
- permit
- loading…
- idempotency
- loading…
- issued
- loading…
- key
- loading…
Portable receipt / Public evidence
Verify a real receipt.
Self-issued live gateway proof, not customer traction. This evidence
is generated by a dedicated, non-sensitive partner.echo
invocation. It demonstrates the gateway path; it is not a customer
endorsement, settlement record, or compliance attestation.
01 / Published artifact
Signed claims from the portable bundle.
Loading the published receipt and matching public-key snapshot…
Keep both files together. The receipt contains the signed bytes; the snapshot contains the matching Ed25519 public key.
Download receipt.json Download trust-keys.json02 / Offline verification
Check the signed bytes fully offline.
Install the repository SDK, then verify the two downloaded files
with networking disabled. Exit 0 means verified, 1 means the
signature is invalid, and 2 means the verifier cannot determine.
Exit 0 proves that the receipt matches the supplied key snapshot;
it does not independently authenticate who supplied that snapshot.
Pin the key through a trusted channel before relying on issuer
identity. --expect-issuer checks the claimed origin as
an additional consistency guard.
git clone --depth=1 https://github.com/PetrefiedThunder/agent-middleware-api.git
python -m pip install "./agent-middleware-api/b2a_sdk[verify]"
b2a-verify-receipt \
--bundle receipt.json \
--keys trust-keys.json \
--expect-issuer https://api.thisisatest.tech
03 / Bring your own action
Test the same loop on one MCP tool.
If this evidence shape maps to a real authorization, retry, or audit problem in your stack, bring the tool and the operator who owns it. Pricing and scope are discussed privately after fit.