agentic-receipts 0.1.0

Signed, tamper-evident execution receipts for AI agents, tool calls, GPU workloads, and distributed jobs.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

use crate::error::ReceiptError;
use crate::receipt::AgenticReceipt;
use crate::signing::signing_payload;
use ed25519_dalek::{Signature, Verifier, VerifyingKey};

pub fn verify_receipt(receipt: &AgenticReceipt) -> Result<(), ReceiptError> {
    let public_key_bytes =
        hex::decode(&receipt.public_key_hex).map_err(|_| ReceiptError::InvalidPublicKey)?;

    let public_key_array: [u8; 32] = public_key_bytes
        .try_into()
        .map_err(|_| ReceiptError::InvalidPublicKey)?;

    let verifying_key =
        VerifyingKey::from_bytes(&public_key_array).map_err(|_| ReceiptError::InvalidPublicKey)?;

    let signature_hex = receipt
        .signature_hex
        .as_ref()
        .ok_or(ReceiptError::MissingSignature)?;

    let signature_bytes = hex::decode(signature_hex).map_err(|_| ReceiptError::InvalidSignature)?;

    let signature_array: [u8; 64] = signature_bytes
        .try_into()
        .map_err(|_| ReceiptError::InvalidSignature)?;

    let signature = Signature::from_bytes(&signature_array);
    let payload = signing_payload(receipt)?;

    verifying_key
        .verify(&payload, &signature)
        .map_err(|_| ReceiptError::Signature)?;

    Ok(())
}