seal

Check that a record still says what was signed: the permitted or refused decision, unchanged, under a trusted or embedded key. Handles both formats: ATTESTATION-v1 (a model-call decision) and ACTION-v1 (an agent tool action). No Aqta service in the check.

{
  "type": "object",
  "properties": {
    "receipt": {
      "type": [
        "object",
        "string"
      ],
      "description": "The record, as a JSON object or a JSON string."
    },
    "public_key": {
      "type": "string",
      "description": "Base64url Ed25519 key to trust. Omit to use the key embedded in the record, which proves internal consistency only, never provenance."
    },
    "profile": {
      "type": "string",
      "description": "Usually omit this. The record's own signed version tag selects the format, and ATTESTATION-v1 is the default. Pass 'ACTION-v1' only to force an agent-action record to be checked as one."
    }
  },
  "required": [
    "receipt"
  ]
}

Read a receipt field by field, with stated limits. Does not check the signature.

{
  "type": "object",
  "properties": {
    "receipt": {
      "type": [
        "object",
        "string"
      ]
    }
  },
  "required": [
    "receipt"
  ]
}

Fetch the published Seal signing key.

{
  "type": "object",
  "properties": {}
}

A genuine signed receipt from the sample workspace (demo key), for trying verification.

{
  "type": "object",
  "properties": {
    "outcome": {
      "type": "string",
      "enum": [
        "ALLOWED",
        "BLOCKED",
        "SUPPRESSED"
      ],
      "description": "Pick a sample with this outcome. A BLOCKED receipt was signed without the call reaching the provider."
    }
  }
}

The published sample evidence pack: fixed review question, bound receipts, disclosure.

{
  "type": "object",
  "properties": {
    "pack_id": {
      "type": "string",
      "description": "Pack id. Only the published \"sample\" pack is available without an account."
    }
  }
}

Verify a review pack receipt by receipt. Each verdict comes from the signed envelope itself, never from stored state, and results are per-receipt, never an average.

{
  "type": "object",
  "properties": {
    "pack": {
      "type": [
        "object",
        "string"
      ],
      "description": "A pack object, or \"sample\" for the published sample pack."
    },
    "public_key": {
      "type": "string",
      "description": "Key to pin every receipt against. Omit to use each envelope's embedded key."
    }
  }
}

The receipt format: fields, outcomes, verification commands, and what a signature does not establish. Use before describing the format.

{
  "type": "object",
  "properties": {}
}

List your workspace receipts filtered by outcome, policy, model, or date range. Requires your aqta_ key as Bearer.

{
  "type": "object",
  "properties": {
    "outcome": {
      "type": "string",
      "enum": [
        "ALLOWED",
        "BLOCKED",
        "SUPPRESSED",
        "PASSED"
      ],
      "description": "Only receipts with this outcome."
    },
    "policy": {
      "type": "string",
      "description": "Only receipts where this policy ran, e.g. pii_scan."
    },
    "model": {
      "type": "string",
      "description": "Only receipts for this model."
    },
    "since": {
      "type": "string",
      "description": "ISO timestamp lower bound."
    },
    "until": {
      "type": "string",
      "description": "ISO timestamp upper bound."
    },
    "limit": {
      "type": "number",
      "description": "Max rows, default 25."
    }
  }
}

Inclusion proof plus signed tree head for one of your receipts. Requires your aqta_ key.

{
  "type": "object",
  "properties": {
    "attestation_id": {
      "type": "string"
    }
  },
  "required": [
    "attestation_id"
  ]
}

Outcome, model and policy counts across your recent receipts. Requires your aqta_ key.

{
  "type": "object",
  "properties": {
    "limit": {
      "type": "number",
      "description": "How many recent receipts to summarise, default 100."
    }
  }
}