Skip to main content
DOCUMENTATION

PEAC-Receipt

PEAC-Receipts are portable decision records that provide signature-verified evidence of agent interactions. These verifiable receipts enable compliance tracking, audit trails, dispute resolution, and policy enforcement across the open internet.

What is PEAC-Receipt?

PEAC-Receipt is a standardized HTTP header containing a signed JWS (Ed25519) structured as a JWT-compatible envelope. It serves as a portable decision record proving what happened, under what policy, and with what evidence.

The receipt contains: resource accessed, timestamp, policy snapshot hash, optional payment evidence, and is signed using Ed25519 for fast offline verification.

Header Format

PEAC-Receipt: eyJhbGciOiJFZERTQSIsImtpZCI6IjIwMjUtMDkta2V5MSIsInR5cCI6IkpXVCJ9.
eyJpc3MiOiJvcmlnaW5hcnkueHl6IiwiaWF0IjoxNzM3NTYyODAwLCJyZXNvdXJjZSI6Ii9hcGkvY29udGVudCIsInBheW1lbnQiOnsic3RhdHVzIjoidmVyaWZpZWQiLCJhbW91bnQiOjEuMDAsImN1cnJlbmN5IjoiVVNEIn19.
r5k2nF8xT3mQwK9LpXvYzJ7dR2sE4gH6tB1cA8oU0fPqN3vM5wJ9eX7lK2yT6uG8hZ4nV1xS3dW0jR6pL5

Receipt Claims

  • iss: Issuer (domain that signed the receipt)
  • iat: Issued at (Unix timestamp)
  • resource: Path or identifier of accessed resource
  • payment: Payment evidence (status, amount, currency, transaction ID)
  • kid: Key identifier for signature verification

Verification

Verify receipts using our API or verify endpoint:

curl -X POST https://www.originary.xyz/api/verify \
  -H "Content-Type: application/json" \
  -d '{"receipt": "eyJhbGci..."}'

Or use our web interface: originary.xyz/verify

Related Resources

Ready to implement?

Deploy PEAC receipts in your infrastructure with the CLI or reference implementation.

View Quickstart