#root{display:none}.faq__panel{grid-template-rows:1fr!important;visibility:visible!important}[data-reveal]{opacity:1!important;transform:none!important}Skip to content

Sample receipt

The fields that matter when you read a Render Receipt, with values from a test-fixture export so you can see the shape before you trust one.

Sample from a test export of the included example (a procedural pavilion, not a client project), 22 September 2026. Hashes shortened; the reviewer’s name is left blank.

The record

Field	Holds	In the sample
schema	The receipt format.	forma.receipt.v2
issued_at	When the receipt was signed, UTC.	2026-09-22T10:05:58+00:00
mode	The release mode of the plan.	EXACT
disclosure	The sentence shown with the image.	AI-assisted relight of an architect’s render. Not a photograph. Not a certification of the built work or of construction compliance.
signature	The signature over the payload; the private key that made it is never included.	present
public_key	The key that verifies the signature.	present
algorithm	How the signature was made.	Ed25519 over the JSON payload, canonicalised with sorted keys

The plan

The plan is what the review was allowed to change. Its hash is the identity of the plan; the file hash is the bytes on disk.

Field	Holds	In the sample
locked_layers	Layers that must not change.	camera, geometry, openings, materials and four more (8)
permitted_layers	Layers that may change.	lighting and three more (4)
protected_regions	Regions that must stay byte-identical.	1
thresholds.values	Every threshold the checks used.	edge drift 0.5 % of the diagonal, spill 1.0 %, outline IoU 0.995, colour ΔE 3.0
thresholds.hypothesis	Whether the thresholds are still engineering hypotheses.	true
estimate	Projected cost and cap.	0 USD: local render and review, no provider call

The files

Each file the review depended on, with its path inside the archive and its SHA-256.

Field	Holds	In the sample
source	The approved image and its canvas size.	evidence/source.png · ef3b22da… · 1440 × 960
output	The reviewed result and which candidate it was.	final.png · 640b7e03… · 1440 × 960
annotation	The annotated features, if any.	evidence/annotation.json · f6234a0c…
references	Input provenance.	one file, role input-provenance
masks	Outline masks, if supplied.	none

The checks

Field	Holds	In the sample
config_hash	The frozen instrument configuration.	ed14867ffa97f341
table	Every check with verdict, value, threshold, hypothesis flag and note.	11 rows
blockers	Checks that failed.	none
needs_human	Checks handed to the reviewer.	artifacts and three more (4)
deliverable_by_gates	Whether the checks alone would release the image.	false: a person is always required

The audit and the approvals

Field	Holds	In the sample
audit.tool_version	The audit tool that produced the report.	0.3.0
audit.delivery.state	What the audit concluded before review.	needs_review
approvals.reviewer	Kind, name as written, time.	human · TEST INPUT: TEST reviewer fixture · 2026-09-22T10:05:58+00:00
approvals.items	Items accepted, rejected, undecided.	6 accepted, 0 rejected, 0 undecided
approvals.deliverable	Whether the review released the image.	true
heatmap	The colour-difference data and its hash.	heatmap.json · 45176f04…

Read the reviewer field for what it is: a name someone typed, with a time. The receipt shows that a person confirmed each group and what they wrote. It does not verify who they are.

The verdict and its limits

Field	Holds	In the sample
verdict	What the record concludes.	deliverable
reasons	Why it is not deliverable, when it is not.	none
limits	What the receipt itself says it cannot prove.	“A valid signature proves this record is intact and was issued by the holder of the named key. It does not prove the measurements are correct.”, and four more sentences about unmeasurable checks and connectivity.
model	The rendered model, when the project started from one.	null
calls	Provider calls made.	null: this package makes none
restoration	Source pixels restored after the edit.	none

To check a receipt yourself, see Verify a receipt.

Values from an export made in test mode on 22 September 2026; the backend labels such receipts TEST. Hashes are shortened here.