A5O wax seal authorship mark
FRAMEWORK SEAL · NOT A CRYPTOGRAPHIC VERDICT
CANON-SIGN 2.0RCT 1.4PUBLIC INPUTS

Verify integrity.
Inspect every input.

The body, published keys, and dual signatures agree. This establishes integrity: any alteration to the receipt is detectable. It does not by itself establish authenticity — see Trust Anchor below.

PUBLIC INPUTSReceipt · public keys · appointment evidence
NEVER TRANSMITTEDPrivate keys · signer · decision logic
LIVE CONFORMANCE TEST

In-browser verification console

This fixture is cryptographically real but non-production. Every check runs in this browser from public evidence alone.

RECEIPT ARTIFACTA5O-RCT-1.4
DECISIONALLOW
F-STOPf/1.2
Receipt
RCT-A5O-PUBLIC-DEMO-2026-07-10-0001
Appointer
did:a5o:appointer:agent-obo-inc
Onebehalfof
did:a5o:principal:visionary-member-0710
Agent
did:a5o:agent:iris-01
Action
book_private_aviation · TEB-NCE
Receipt hash
62e03d2cee69c50bf2…3218ce9dac3b
PUBLIC VERDICT

READY

Run the verification or select a failure scenario to see the evidence chain respond.

Awaiting public evidence test
AUTHENTICITY BOUNDARY

Trust Anchor

This verifier runs entirely in your browser and never contacts the operator. Every input it consumes — receipt, published keyset, appointment evidence — is nonetheless served from this origin.

A passing verdict therefore establishes integrity: the artifact is internally consistent and any alteration is detectable. It does not by itself establish authenticity, which requires binding the published keyset to an anchor outside this operator's control.

Keyset digest
7a9ef5fe592a…21eca42b
External anchor
Not yet published
Verifier source
Inspect inline source
EVIDENCE, NOT ASSERTION

Inspect every public input

The seal stays portable. The verifier does not call the operator or replay the private gate.

receipt.jsonPUBLIC · READ ONLY
{
  "receipt_id": "RCT-A5O-PUBLIC-DEMO-2026-07-10-0001",
  "schema_version": "A5O-RCT-1.4",
  "timestamp": "2026-07-10T14:08:00Z",
  "appointer": "did:a5o:appointer:agent-obo-inc",
  "appointment_ref": "sha256:d508391b4b27fefae6cb089fe87d285276e125862cd9e84ac600e9fefcf5c61c",
  "agent": "did:a5o:agent:iris-01",
  "onebehalfof": "did:a5o:principal:visionary-member-0710",
  "action": {
    "descriptor": "book_private_aviation",
    "target": "TEB-NCE"
  },
  "scope": [
    "aviation.booking",
    "route:TEB-NCE",
    "credits:<=150"
  ],
  "decision": "ALLOW",
  "reason_code": "RC-OK-VISIONARY-AVIATION",
  "revocation_as_of": 42,
  "fstop": "f/1.2",
  "receiptHash": "62e03d2cee69c50bf267a150c1fd22e7843adda96c5ce4d49f563218ce9dac3b",
  "signatures": {
    "ed25519": {
      "alg": "Ed25519",
      "public_key": "7d5fe8583e343e59612701cfeec6ab9e2b0c0026ae0b665e8c57cf5d5a78cae3",
      "signature": "27f1bc7af75ff9806605a9026147c7ef1fbcb72822107639caa01396e6368924413cb7a2d6c677ce677cfde6a902fbec7517a1bf4a95b0be5c6aa8fd589d6109"
    },
    "ml_dsa_87": {
      "alg": "ML-DSA-87",
      "public_key": "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",
      "signature": "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"
    }
  }
}
TRUST BOUNDARY

The proof travels. The secrets do not.

01PUBLIC VERIFIER

Receives evidence

  • Signed receipt artifact
  • Published public keyset
  • Appointment + revocation evidence
ONE-WAY RELEASEpublic material only
02OPERATOR BOUNDARY

Retains control

  • Ed25519 + ML-DSA-87 private keys
  • Gate and policy engine
  • Signing ceremony + runtime state
PRIVATE MATERIAL NEVER SHIPPED
THE LOAD-BEARING DISTINCTION
“An unbound principal field is a label, not a proof.”

In RCT 1.4, onebehalfof sits inside the canonical receipt body. Change the principal and the hash changes. Change the hash and both signatures fail.