@postcept/receipt 1.1.2 → 1.2.0

package/SPEC.md

@@ -154,6 +154,9 @@ The v3 signing body is the v2 body with `version: "3"` plus:
 {
   // ...all v2 fields...
   "version": "3",
+  "algorithm": "ed25519",                 // the signature scheme, now signed
+  "signing_key_id": "ed25519:...",        // the key that signed, now signed
+  "canonicalization": "postcept-canonical-json-v1",  // the scheme in §2, now signed
   "supersedes": "<receipt_id | null>",
   "contract_digest": "sha256:... | null",
   "lifecycle": "finalized | pending_finality | ... | null",

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { asciiJson, base64ToBytes, canonicalize, TIMESTAMP_SPELLINGS } from "./canonical.js";
-export { type Observation, type Postcondition, type Receipt, receiptSigningBody, verifyObservation, verifyReceipt, } from "./receipt.js";
+export { CANONICALIZATION_SCHEME, type Observation, type Postcondition, type Receipt, receiptSigningBody, verifyObservation, verifyReceipt, } from "./receipt.js";
 export { type AuditBadge, badgeSigningBody, verifyBadge } from "./badge.js";
 export { type ConsistencyProof, type InclusionProof, type SignedTreeHead, receiptLeafHash, verifyConsistency, verifyInclusion, verifyReceiptInLog, verifySignedTreeHead, } from "./transparency.js";
 export { type EvidenceExportLike, type EvidenceManifest, evidenceContentDigest, verifyEvidenceExport, verifyEvidenceManifest, } from "./evidence.js";

package/dist/index.js

@@ -2,7 +2,7 @@
 // and VCR-audit badges. Works in the browser, Node, Deno, and edge runtimes. See
 // SPEC.md for the format and signing scheme.
 export { asciiJson, base64ToBytes, canonicalize, TIMESTAMP_SPELLINGS } from "./canonical.js";
-export { receiptSigningBody, verifyObservation, verifyReceipt, } from "./receipt.js";
+export { CANONICALIZATION_SCHEME, receiptSigningBody, verifyObservation, verifyReceipt, } from "./receipt.js";
 export { badgeSigningBody, verifyBadge } from "./badge.js";
 export { receiptLeafHash, verifyConsistency, verifyInclusion, verifyReceiptInLog, verifySignedTreeHead, } from "./transparency.js";
 export { evidenceContentDigest, verifyEvidenceExport, verifyEvidenceManifest, } from "./evidence.js";

package/dist/receipt.d.ts

@@ -38,6 +38,7 @@ export interface Observation {
     digest: string | null;
     signature: string | null;
 }
+export declare const CANONICALIZATION_SCHEME = "postcept-canonical-json-v1";
 export declare function receiptSigningBody(r: Receipt, ts: (s: string) => string): Record<string, unknown>;
 /**
  * Verify a receipt's Ed25519 signature against a published public key (base64 raw

package/dist/receipt.js

@@ -2,6 +2,11 @@
 // open standard in SPEC.md.
 import * as ed from "@noble/ed25519";
 import { base64ToBytes, canonicalize, sha256Hex, TIMESTAMP_SPELLINGS } from "./canonical.js";
+// Stable identifier for the canonical-JSON scheme (sorted keys, no whitespace,
+// non-ASCII and control characters escaped). Bound into the v3 signing body so the
+// signature covers which scheme produced the bytes. Matches CANONICALIZATION_SCHEME
+// in the control plane. Bump both together if the scheme ever changes.
+export const CANONICALIZATION_SCHEME = "postcept-canonical-json-v1";
 /**
  * The exact subset of a receipt the signature covers, by version. `ts` applies a
  * timestamp spelling so the caller can retry "Z" vs "+00:00" (see verifyReceipt).
@@ -36,6 +41,10 @@ export function receiptSigningBody(r, ts) {
         return {
             ...v2,
             version: "3",
+            // Bind the signature metadata into the protected content (see CANONICALIZATION_SCHEME).
+            algorithm: r.algorithm ?? "ed25519",
+            signing_key_id: r.signing_key_id ?? null,
+            canonicalization: CANONICALIZATION_SCHEME,
             supersedes: r.supersedes ?? null,
             contract_digest: r.contract_digest ?? null,
             lifecycle: r.lifecycle ?? null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postcept/receipt",
-  "version": "1.1.2",
+  "version": "1.2.0",
   "description": "Independently verify a Postcept Receipt, the signed proof that an AI agent's high-risk action actually happened in the system of record. Runs anywhere, needs only the public key.",
   "license": "MIT",
   "author": "Postcept",