OpenChainGraph · CRY-05 · Session Receipt · Zero-Egress

Agent-Action Audit-Trail Aggregator

Collapse a whole agent session into one tamper-evident regulatory receipt. Paste the OpenChainGraph artifacts (or bare execution_hash strings) collected across the session; the aggregator builds a SHA-256 Merkle tree over the ordered leaf hashes, returns the Merkle root, a per-leaf inclusion proof, and an ordered chain-depth map. The single audit object suited to EU AI Act Art. 12 record-keeping and DORA. Exports an AP2 cryptographic_mandate with session_receipt_root set. Client-side · Zero PII.

v1.0.0 cryptographic_mandate SHA-256 Merkle session_receipt_root EU AI Act Art.12 DORA Zero PII

↑ ART-30 Conformance ↑ ART-31 A2A·x402 ↑ ART-33 MCP Attestation ↓ CRY-04 Merkle Verify ↓ PTG-01 Prompt Template

🔒 All inputs are processed locally in your browser. No data is transmitted. Paste only OpenChainGraph artifacts or execution_hash strings — these carry no PII by design. Use synthetic or anonymised inputs only.

Session Artifacts — paste N OpenChainGraph artifacts (or hashes)

JSON array of artifacts or execution_hash strings Each element is either a full OpenChainGraph artifact object (with execution_hash, tool_id, chain.chain_depth) or a bare 64-hex / sha256:-prefixed hash string. Order is preserved as Merkle leaf order. Leaf execution hashes are hex-normalised (the sha256: prefix is stripped for tree hashing).

Session Receipt

Merkle Root & Chain-Depth Map

session_receipt_root:—

tree leaves / depth:—

max_chain_depth:—

Per-Receipt Inclusion Proofs

Leaf #	tool_id	chain_depth	execution_hash (leaf)	inclusion_proof (sibling path → root)

OpenChainGraph Artifact · execution_hash

execution_hash:—

Computed client-side via WebCrypto SHA-256 over cgCanon({policy_parameters, output_payload}) per Standard §6. Parent hashes: none

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `aggregate_execution_receipts`. Task: Aggregate N OpenChainGraph artifacts (or bare execution_hash strings) collected across an agent session into a single tamper-evident session receipt: a SHA-256 Merkle root over the ordered leaf execution hashes, a per-leaf inclusion proof (sibling path), and an ordered chain-depth map.
Call it with arguments: {"policy_parameters":{"artifacts":[]}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string, or re-run the in-page WebMCP tool `aggregate_execution_receipts`.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/cry-05-agent-action-audit-trail-aggregator.html#p=v1.H4sIAAAAAAAA_wEQAO__eyJhcnRpZmFjdHMiOltdfe-vIbcQAAAA