Bind the execution
The production receipt design records modelHash, codeHash, inHash, outHash, attRef, ts and sig. These fields bind the request and answer to approved model and code measurements.
Anchor the record
AttestationVerifier and ModelRegistry on Arc provide the receipt verification and policy-binding path. The receipt verifier can check a downloaded receipt and its supplied anchor. A missing or pending anchor remains unconfirmed.
Disclose by scope
Scoped view keys are intended to enable authorized payment disclosure. Audit exports give reviewers selected hashes and metadata, with payment amounts included only when chosen.
Understand the evidence
Execution provenance does not prove that a model answer is correct. The dashboard verifies receipt signatures and input/output hash bindings. These checks do not independently verify hardware evidence, payment or anchoring. The receipt verifier offers separate, explicitly selected read-only contract, policy and anchor checks.