Signed records that recipients can verify themselves.
An open receipt format, offline verification tools and interoperability work. Instrumented systems issue signed records; recipients obtain keys independently, check the records and apply their own trust policies.
A valid signature does not establish claim truth, complete action coverage, signer authority or recipient acceptance.
Try a signed receipt · Integrate · Specification · Conformance evidence
| Repository | Responsibility |
|---|---|
| verify | Offline CLI, shared browser receipt engine, fixtures and release manifest |
| drafts | Individual Internet-Draft sources and submission history |
| Acta | Public-record reference application and protocol website, not the receipt specification |
| acta-mcp | MCP adapter exposing verification tools |
| verified-runs-grader | A worked governed-run grading/attestation workflow |
Verifier: 0.11.0. Status reviewed 2026-10-23.
- draft-farley-acta-signed-receipts-03: active individual Internet-Draft.
- draft-farley-acta-knowledge-units-00: expired individual Internet-Draft (expired 2026-10-08).
Internet-Drafts are proposals, not adopted IETF standards or endorsements.
As of 13 October 2026, the conformance corpus documents implementation drivers and negative fixtures. Read the exact workflow run, source commit, package version and skipped checks before drawing conclusions. A driver or integration reference is not blanket certification or corporate endorsement.
The verifier repository includes current protectmcp:decision and historical
receipt fixtures. Its browser and CLI regression tests use the same engine and
check successful signatures, wrong/missing keys and tampered records.
Tom Farley / ScopeBlind maintains this project. Independent verification means recipients can run checks without the issuer, not that an independent foundation governs the project. Contributions, negative fixtures and interop reports are welcome through repository issues and pull requests. Use the verifier's security policy for vulnerabilities.
The Acta public record is a reference application. ScopeBlind / Legate are commercial applications and enforcement products. Neither is required to verify an individual receipt.
Consult each repository's license and patent notice. Bundled self-checks detect byte drift; publisher authentication requires an independently trusted reference.