Module native_receipts 

Host-owned native receipt handoff; never populated from MCP arguments.

Functions

load_configured_host_authority

Snapshot explicit host authority once during transport startup, never per request.

load_host_authority

Read only the explicitly configured host file, before the MCP transport starts. Never consult tool/session arguments or discover a signing key implicitly.