{
  "bundle_version": "0.1",
  "receipt": {
    "type": "ZkVmReceipt",
    "system": "risc0",
    "receiptFormat": "groth16-bn254",
    "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
    "seal": "BHO67h0eMZvI3gWstPzGa8elXAfCKDN2jJ8oyU+KAugfsHnnRDQy58W3/GftIQ7eB6DyILXo3VbBgRsPp2cW8ShbZQWMM+2me9lPFYX81/2UfDf2Mdv+4D4UdV8+RG55FbsU/rFEfTeFWxx4cgtfTb/YrgBd596g61q2W6uBuMYsgAh0FWjpR8LLyYQAqQqHneMPxtRRidxfXM/hW4bwfRgCu33K+4+S2bFcEQ+ExViNPCdEM1Gpibq49ndt5KAtKk3cb5ODEnE1KAh7y2HDVxB6CDFCOCdeMh4+OzdK9ccevYOwyXA/wQrvdWEMOGthvwmML/g6T8MhFx58VqDGdg==",
    "journal": {
      "chaingraph_version": "0.4.0",
      "kernel_digest": "sha256:f6c593e542fe2fbd5e4226a231dff7ce88a280d8fa68cc757c9fe6602afe29f3",
      "output": {
        "credential_audience": "seller-agent-042",
        "credential_seller_service_id": "svc-abc123",
        "credential_subject": "buyer-agent-001",
        "findings": [
          {
            "check": "amount_vs_spend_cap",
            "detail": "payload value 5000000 vs credential spend_cap_amt 10000000",
            "pass": true
          },
          {
            "check": "network_vs_allowed_set",
            "detail": "payload network \"base\" vs credential allowed_networks [\"base\"]",
            "pass": true
          },
          {
            "check": "asset_vs_allowed_set",
            "detail": "payload asset \"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\" vs credential allowed_assets [\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"]",
            "pass": true
          },
          {
            "check": "payee_vs_merchant_allowlist",
            "detail": "payload payee \"0xMERCHANT0000000000000000000000000000beef\" vs credential payee_allowlist [\"0xMERCHANT0000000000000000000000000000beef\"]",
            "pass": true
          },
          {
            "check": "validity_window_vs_payload_timestamp",
            "detail": "payload window [1754400100, 1754400400] vs credential window [1754400000, 1754500000]",
            "pass": true
          },
          {
            "check": "scope_string_coverage",
            "detail": "payload scheme \"exact\" needs scope \"payments:x402:exact\" (or a wildcard) in credential scope [\"payments:x402:exact\"]",
            "pass": true
          }
        ],
        "indeterminate_reasons": [],
        "kya_claim_basis": "Skyfire kya-pay token claims (docs.skyfire.xyz/docs/common-token-claims.md, /docs/token-schemas.md, pinned 2026-08-06): documented sub/aud/ssi/sdm/iss/iat/exp/env/amt/cur/val. allowed_networks/allowed_assets/payee_allowlist/scope are this tool's own scope-representation extension, not documented Skyfire claims -- stated here so the distinction is never implied as pinned.",
        "note": "Cross-checks a declared KYA-shaped credential's scope (spend cap, allowed networks/assets, payee allowlist, validity window, scope strings) against a declared x402 PaymentPayload. Never fetches either, never contacts Skyfire or a facilitator, never verifies a signature, never initiates or settles a payment.",
        "payload_network": "base",
        "payload_scheme": "exact",
        "rationale": [
          "Ran 6 evaluable check(s) (amount vs spend cap, network vs allowed set, asset vs allowed set, payee vs merchant allowlist, validity window vs payload timestamp, scope string coverage); 0 check(s) could not run because the credential omitted a claim the payload requires.",
          "amount_vs_spend_cap: PASS -- payload value 5000000 vs credential spend_cap_amt 10000000",
          "network_vs_allowed_set: PASS -- payload network \"base\" vs credential allowed_networks [\"base\"]",
          "asset_vs_allowed_set: PASS -- payload asset \"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\" vs credential allowed_assets [\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"]",
          "payee_vs_merchant_allowlist: PASS -- payload payee \"0xMERCHANT0000000000000000000000000000beef\" vs credential payee_allowlist [\"0xMERCHANT0000000000000000000000000000beef\"]",
          "validity_window_vs_payload_timestamp: PASS -- payload window [1754400100, 1754400400] vs credential window [1754400000, 1754500000]",
          "scope_string_coverage: PASS -- payload scheme \"exact\" needs scope \"payments:x402:exact\" (or a wildcard) in credential scope [\"payments:x402:exact\"]",
          "Verify-only: this kernel never initiates, signs, or settles an x402 payment (x402 EXECUTION is a KILLED ledger row). It performs no signature verification -- the pinned Skyfire docs (2026-08-06) do not specify a caller-reproducible KYA signing scheme in this context, so this is a scope cross-check only.",
          "Skyfire kya-pay token claims (docs.skyfire.xyz/docs/common-token-claims.md, /docs/token-schemas.md, pinned 2026-08-06): documented sub/aud/ssi/sdm/iss/iat/exp/env/amt/cur/val. allowed_networks/allowed_assets/payee_allowlist/scope are this tool's own scope-representation extension, not documented Skyfire claims -- stated here so the distinction is never implied as pinned."
        ],
        "rejected_inputs": [],
        "verdict": "IN_SCOPE"
      }
    }
  },
  "journal_contract": {
    "spec": "SPEC.md §18.7",
    "serialization": "rfc8785-jcs+utf8",
    "journal_digest": "sha256:6bbcb1a4a9e06e973d82900eefdbd7aafe783e455096df11240ad1c1c4736bcc",
    "claim_digest": null
  },
  "provenance": {
    "repo": "PostOakLabs/ainumbers",
    "receipt_source": "chaingraph/graph/nodes/art-565-kya-x402-scope-verifier.json",
    "receipt_source_sha256": "sha256:8aa63146a78dc51aad7b58235400835437153eab713b634b91023fc5abcf5466",
    "anchor_source": "registry/lineage/checkpoint.sigsum-record.json",
    "checkpoint_source": "registry/lineage/checkpoint"
  },
  "anchor": {
    "type": "c2sp-tlog-proof-v1",
    "record": {
      "anchor_type": "c2sp-tlog-proof-v1",
      "log_origin": "sigsum.org/v1/tree/44ad38f8226ff9bd27629a41e55df727308d0a1cd8a2c31d3170048ac1dd22a1",
      "log_url": "https://seasalp.glasklar.is",
      "log_public_key": "0ec7e16843119b120377a73913ac6acbc2d03d82432e2c36b841b09a95841f25",
      "anchored_hash": "sha256:3b9dddcfacf47214cc0bbb19edbc39a5cd3d1c97fa00aa0fd68a517cf67aee2a",
      "leaf": {
        "checksum": "76ea62f7c28942563a1008b44ff888a990b6b2f1d740023982bbd04662adbedb",
        "signature": "2e994211513e790035c9040f4e23b518e64a188f8fd211d203d3a380511fa355e559348b84fc00953c3aa9d91d95bb3696a292054041389943b0fcf4b6c9c502",
        "public_key": "64ffed0396abb761968b34ce849b7b09bc47b8a492ba2efd006b6b8f5622ceca"
      },
      "tree_head": {
        "size": 75024,
        "root_hash": "3cd5407964fe6c6df9f1e7051f5a8e941030b93b68a97656de81f9baa43d640d",
        "log_signature": "ff6baa55f14a9b9a695483113f00fc5c9f3bbb9ca74c01c83dfd8715ad154b2f2d302e71b1b4f52f87ba58f9c15a80a30c6302f0910dc2f0d3e7d857ab0a5003"
      },
      "inclusion_proof": {
        "leaf_index": 75022,
        "path": [
          "15d2f7a6315ce3382346be0bae0b920bfa68349ad438b517277c6e973f5343ef",
          "33dc416363cc76a4e1d907d7c46cafa5ccde896c4b3aac8783b7dc56df5795d8",
          "d2ee6278e332275416624857eed451d640f159258f4c9b315be88fe939ca8a77",
          "83e35bee174ca40f3413c410657f7b3a7c444435043c0af96c8865e03095913c",
          "a59bef38745cdb26f6b87a19b8cd0f609c2e906f02f1d3991d9fa60f0480b580",
          "3ce012af67840673cbd9835e3e57c1d8c6f47f6d737188365acb80151a30e0cc",
          "668dba989ea933a1ecea7315cad1eb9b4e65c7bfdf993edb5f9e992e4c7a354d",
          "6e3104eb98a720cc868416197a730db01f0032cbbb3f74602bf997125a81f28b"
        ]
      },
      "witness_cosignatures": [
        {
          "key_hash": "0dad9d849c57687454f100d87fa729b54cb69f7af97346613348defcba9c361c",
          "timestamp": 1792825229,
          "signature": "b71a5a1b8d95c3a70512cab1930c2468533f3cf40d09d4126fb3c8eadd17fc738a0944b56886befa48d4f917306867b5d669b77f3091c90d936783f470338c07"
        },
        {
          "key_hash": "cd02db1cc0488c28245d7c3ff50b3e214334c067f2571e849425146bb6bd173d",
          "timestamp": 1792825229,
          "signature": "95d726f8522e14a3ec2bd04687b0ea98db64dad72319e1a40653b9d0066423ffd17f37a44c6e7d1da09c13b4cb3c364080a4850aba12a602456706989bfff303"
        },
        {
          "key_hash": "9a0dcddbd96f6d6d404227b5ff23de7a43f25cdde9790af5ace332d347fac49a",
          "timestamp": 1792825230,
          "signature": "86b01971d57851ba8e5fd51e9c3f4845d50dfe9baead1f72a0e759e6a309386cd234321575bac7986b35fd13f98b6ee8e7645a92afef9cfb9f09cf88c0a81c0e"
        },
        {
          "key_hash": "6d6a78191e59815eff9131941fc3e08dd716a281c8b886dd67880d552e587a23",
          "timestamp": 1792825229,
          "signature": "81671d11a22ae26bd348344f7e15db82ca6267f7de4126a8e947a5da628989eb167a8b282d202c62377bf26753a1de62c322b6460b899f854465da5fc1c27601"
        },
        {
          "key_hash": "6bdf03b285fce48e00ff9b199cb2b77472dcc4a112f067fa5b274929cb9504e3",
          "timestamp": 1792825229,
          "signature": "49450a408ffdb2e047076e8ed01beb2f8077a53e3cab765ecec0614151f50c643038be46f4a7266ed6edb30974d4154b9a4c2c6c3b46d71e10f878dbe2c36102"
        },
        {
          "key_hash": "ff2f237a707a2d3a6adfb1600d3375cafe4527ba4fcec793e6093b9b1a4bd79a",
          "timestamp": 1792825229,
          "signature": "dfa05cb7f4c1389903f8377e8f4daf7fbf3a7c99ad65bc9c81029c12cb07004d25473ed022e0cefe5cdf05e497aeded87e57fabcc7d87dbfc1923bee2ab1260e"
        },
        {
          "key_hash": "81538d254f0a67aa07172826ef46fe0cd04b7425bd634a50bb0a8419d55fa65f",
          "timestamp": 1792825229,
          "signature": "6caece92c05dd00057b0c908c969b0eccbcf87c1b418c3fe4cb7b3dad781c125dc86b1895fc7019614a1eca3cfb6fb19f8442e64069d38870f1f620a6d41a60d"
        },
        {
          "key_hash": "774fafee07d3b0d9399d669676440a6301db9fa8fe2140d7d352418da25144c5",
          "timestamp": 1792825230,
          "signature": "7f0c93c5f31347edcd47f5850bf665de43539efb3b295e32563f004f0feec33ae3d9d84e031f1859e42b10218a17a0f0df019253f448ccd76d7499afa2e0ab04"
        },
        {
          "key_hash": "f6f91669f7955f542718af9edb6a1276d88a0f8822cba9046e549d0b3796f394",
          "timestamp": 1792825229,
          "signature": "a3d77cfcafbc1a1d096b422276fa50994e269a7b61797064a4b2e758808bf8c4e27b4f1caae28291bd486c71ae2c2a6b57d0443cc7a7eac11114ce517c3c800c"
        },
        {
          "key_hash": "5da2b3803c2f802eed9744b74e3e4a3d31e1e77ed994ef56730d57fa52f698a5",
          "timestamp": 1792825229,
          "signature": "302d4d04700aff6efa819b203915b04f7ffdac8b1579b969d54d332f3a74063d390383fa77766d4e3fbe995cc2de69be6127d3a0662559db80b9f6e187c59105"
        },
        {
          "key_hash": "3573fb7fdab7434cd0dad9fd6460abf420388055db8aaaec177c248f03a990cc",
          "timestamp": 1792825230,
          "signature": "a6bdce3abf06934fb65d3ccfa49dab537569f36f9ffddb219642104272de95cdadb2f501cfd0e71995328c5b6df899d89f88650c67a3a61f2cca166ac1556c06"
        },
        {
          "key_hash": "d59098d686f47ec1d4d1984c8ac0ab97a3d8a65c7ba8cb6422ada0fae927e194",
          "timestamp": 1792825230,
          "signature": "8dab0aaec1272e078195a13b620c2a6f46128218ac70440383b59f9038d4d42f4bc8b643c001592ae005b157f221ba0387733d1505dd5b3298ad579398129c04"
        }
      ]
    },
    "checkpoint_text": "ainumbers.co/registry/lineage\n77\n5z6Ug6W2BZ2nOm3btMKO8R4pkYHtYENH0v+MJOm9qac=\n\n— ainumbers.co/registry/lineage JrLnur2JVUx48WLcyZxWqbSgiY63HRRAlGCvfM7AgCcnBY06MX8kbyWE290q052tS6nQyxTr3fclM7c2Qi/pfqcrGAM=\n",
    "subject": {
      "kind": "registry-checkpoint",
      "origin": "ainumbers.co/registry/lineage",
      "log_policy": "chaingraph/policies/ainumbers-registry-lineage.tlog-policy"
    }
  },
  "trust_policy": {
    "name": "sigsum-generic-2025-1",
    "source": "chaingraph/policies/sigsum-generic-2025-1.tlog-policy",
    "sha256": "sha256:666d9d0b9ab2e4019769c42eaccd7d6d502a9abac45979bb9b08b7213e4f53e3",
    "shape": "2 logs, 3 witnesses, quorum 2-of-3"
  }
}
