Compute Receipts & Sampling

Every remote execution MUST produce a receipt containing:

• tool_call_id

• args_hash

• result_hash

• policy_hash

• timestamp

• executor_id

• signature

receipt.verify Response Example

{
  "schema": "gao.receipt.verify.result.v1",
  "tool_call_id": "tc_...",
  "verified": true,
  "reasons": []
}

Sampling & Verification

1. Sampling MAY re-verify a subset of executions.

2. Verifier MUST NOT be original executor.

3. Compute measures MUST bind to hashes and tool_call_id.

4. Disputes MAY escalate to governance rules (future phase).

These mechanisms ensure integrity, not financial yield.