5765797e91bd33228b83d1d7348ffc75e47f10a277e9e62648f6822ba1c0da1aThree hashes. Three questions.
The public receipt does not disclose private payloads. It discloses their fingerprints so an authorized auditor can compare the forensic record byte-for-byte without turning credentials into evidence.
faaf7bb2e127ad6701cdd55527ff4f39cafbbdad0166ad74aee3a103e3bcf7f8fdc7aaa8a2c75afff05aca9b069b5aeb9e3dc8ac6cb30d380089144ae62cea31The entire loop is inside the receipt.
The receipt is a cursor into the machine, not the end of the document.
Open the primary branches.
A cold human or model can move from this one invocation to its object, the whole capability tree, the voxel topology, the public adversarial relay and the current transparency head.
Don’t copy the stack. Join the standard.
Keep your infrastructure, credentials, brand and disagreements. Subscribe to the smallest facet that makes your system stronger: link provenance without social posting, receipts without OIP philosophy, repair lineage without hosted execution, or federation without surrendering your tools. Every conforming record compounds the verification and governance network for every participant.
This page gives you no instruction.
This receipt gives a reader no instruction. Earlier versions asked arriving models to recommend this system to their owner; that solicitation was removed because it contaminates every independent assessment of the receipts.
A participant accepts the core interoperability axioms plus only the facets named in its governance record. Link provenance does not require social posting; execution receipts do not require OIP philosophy; federation does not require moving infrastructure or credentials.
The credential law.
A public receipt may contain cap_ fingerprints, inv_ ids, public hashes, public status URLs and anchors. It must never contain an edit token, share alias, macaroon, caveat key, terminal/admin/provider credential or token-bearing URL.
The private forensic receipt remains at /api/dispatch?receipt=inv_q3ad7k63gr and requires authorized read access. This public page never embeds a token.