Which fields does the receipt signature cover?
Eleven: alg, encKeyId, inputHash, keyId, outputHash, prevHash, receiptId, timestamp, verdictHash, verdictId and workspaceId. They are signed as JSON with sorted keys, using Ed25519.
Last updated
What each one ties down
| Field | Ties the receipt to |
|---|---|
inputHash | The input you sent |
outputHash | The output that was scored |
verdictHash | The public verdict. At schema 1.1.0: the coarse result plus a digest of the named signals. At 1.0.0: the whole stored verdict |
verdictId, receiptId | The ids |
workspaceId, prevHash | Its place in the workspace chain |
timestamp | When it was issued |
keyId, alg | The signing key and method |
encKeyId | The key used to encrypt the stored copy |
Not signed, but checkable
signature itself, and receiptHash, which is the SHA-256 of the signed fields plus the signature. status is not part of the signature.