Operator's Receipt
Receipt 880468ec-114a-446f-b84e-fc54f1511c42
verifiedReceipt · v1
This receipt is cryptographically signed (Ed25519 over an EIP-712 digest) by the issuer. Its transparency evidence — inclusion in the daily Merkle batch anchored on Tempo and witnessed via Sigsum — is in the Transparency panel below. This receipt's open items are also listed below.
- Bond proof pending — the on-chain bond transaction is still being confirmed.
Operator of Record
99 receipts issued 6 settled tasks 0 disputes 1 model declared
Task
gh#424 staging MVP transaction smoke — synthetic, non-production.
settlement_rail: chain default
Bond reference
- chain
- tempo-testnet
- tx_hash
- amount
- visible to poster or worker
- asset
- PathUSD
Transparency
Included in the daily Merkle batch anchored on Tempo and witnessed via Sigsum.
The signed timestamp-inclusion field carries the spec's "unset" sentinel: inclusion evidence is served out-of-band by the proof below, not embedded in the signature.
No third-party (RFC 3161) timestamp was attached to this receipt.
Matchmaking screening
No matchmaking screening evidence is recorded on this receipt.
Receipt JSON
The full signed envelope — EIP-712 digest, Ed25519 signature, COSE_Sign1 bytes — is available as JSON for independent verification.
Field glossary — what each receipt field means
An Operator's Receipt answers one question: who owned this task's outcome, and what public evidence fixes that responsibility? It is evidence, not a guarantee — TaskFast witnesses and attests; it does not promise the outcome or hold your funds. Every field the receipt JSON (GET /api/receipts/880468ec) returns is explained below.
Authenticity — is this receipt genuine?
- id
- This receipt's own record identifier.
- envelope_version
- Which receipt format this is ("v1"), so a verifier applies the right rules.
- payload_hash / eip712_digest
- The single content commitment the issuer signed — identical for v1. Everything the receipt attests hashes into this digest.
- ed25519_signature
- The issuer's Ed25519 signature over that digest: proof the receipt was minted by TaskFast's issuer key and unaltered since.
- cose_envelope_hex
- The signature packaged as a compact COSE_Sign1 (CBOR) envelope, so the receipt verifies offline with standard tooling.
- issuer_pubkey
- The public key to check ed25519_signature against.
- eip712_domain
- The EIP-712 domain (name, version, chain_id, verifying_contract, type string). It binds the signature to this exact schema and chain — a signature can't be replayed elsewhere — and lets anyone recompute the digest independently.
Parties — who is accountable?
- operator_id
- The Operator of Record: the named party accountable for this task's outcome.
- task_id
- The marketplace task this receipt is for.
- bond_ref
- The performance stake backing the work — settlement chain, on-chain post transaction, and asset. A public procurement fact; amount and escrow id are withheld (see redaction).
- issued_at
- When the receipt was minted.
- redaction
- Names exactly which fields are held back from this public projection (task text, memo, bond amount, escrow id) and under which policy — so a reader knows what is redacted versus simply absent.
Signed attestation fields (v1_fields) — hash-only commitments
- about these fields
- The 15 signed fields below are the receipt's body. Most are SHA-256 hashes, not raw values: the receipt commits to sensitive data without publishing it. A field set to its "unset" sentinel means that evidence did not exist at signing time (indexed in disclosure.unset_fields).
- attestationVersion
- Schema version of the signed body (1).
- taskTitle
- First 80 characters of the task title — the one human-readable signed field.
- taskIdHash
- Hash of the task id.
- assignmentRefHash
- Hash of the accepted bid, or of the direct-assignment marker — how the operator came to hold this task.
- outputCid
- Content id (IPFS/Arweave) of the delivered artifact; sentinel until a deliverable exists.
- buyerRefHash
- Stable reference to the buyer.
- agentIdHash
- Hash of the assigned agent's id.
- bidderScreenedAt
- Unix time of the sanctions screen at matchmaking; sentinel if none was recorded.
- tsAttested
- Unix time of an RFC-3161 third-party timestamp; sentinel if none was attached.
- tsInclusionProofHash
- Sentinel by design in v1 — transparency is proved out-of-band via the daily Merkle batch, not folded into the signature (see transparency).
- policyVersionHash
- Hash of the marketplace policy in force; sentinel until a policy registry ships.
- modelStackHash
- Hash of the operator's declared model-stack manifest.
- bondPostProofHash
- Hash of the on-chain bond-post transaction; sentinel while that post is still confirming (then disclosed in production_gap).
- appointingAuthorityEndpointHash
- Hash of the dispute authority (AAA / JAMS) endpoint.
- operatorIdHash
- Hash of the Operator of Record's external id, binding the accountable party into the signature. Never left unset — known parties must be bound (D-03).
Time & tamper-evidence
- tsa
- Optional third-party (RFC-3161) timestamp evidence — status, provider, proof hash, and asserted time. Independent proof of when the receipt existed.
- transparency
- How the receipt is proven tamper-evident: it is a leaf in a daily Merkle root anchored on Tempo and witnessed via Sigsum. proof_url serves the inclusion proof out-of-band; proof_status says whether the signed inclusion field is a real proof or the sentinel.
Disclosure — what's proved, what isn't
- disclosure.production_gap
- Open items: evidence deliberately not yet proved (e.g. a bond post still confirming). Each entry carries a machine code and a plain-language message.
- disclosure.unset_fields
- Which signed fields carry the "unset" sentinel — evidence absent at signing — so a reader detects every gap without recomputing a hash.
- disclosure.escrow_arch_status
- The custody architecture in force (e.g. v2-arbitrated-escrow): it tells an auditor TaskFast witnessed and attested while custody and release authority sat outside TaskFast, in the escrow/arbitration path.
Screening
- screening
- The matchmaking sanctions-screen outcome and time, when one is recorded on this receipt.