dev.cocore.compute.verifyReceipt

cocore.dev

Documentation

Verify an indexed receipt offline-equivalently: structural checks against its job + attestation, a P-256 ECDSA signature check of `enclaveSignature` against the attestation public key, lexicon-schema validation, and — when an MDA cert chain is present — a hardware-attestation check bound to the signing key. `trustLevel` rises to `hardware-attested` only when a valid Apple chain certifies the receipt-signing key.

main query

Verify an indexed receipt offline-equivalently: structural checks against its job + attestation, a P-256 ECDSA signature check of `enclaveSignature` against the attestation public key, lexicon-schema validation, and — when an MDA cert chain is present — a hardware-attestation check bound to the signing key. `trustLevel` rises to `hardware-attested` only when a valid Apple chain certifies the receipt-signing key.

Parameters

uri string at-uri Required

The receipt record URI to verify.

Output

Encodingapplication/json
findings array Required

No description available.

ok boolean Required

No description available.

trustLevel string Required

No description available.

Errors

InvalidRequest The `uri` parameter is missing.
NotFound The receipt, or its referenced job/attestation, is not indexed.
Try It

Requests are sent directly from your browser. Some servers may block requests due to CORS.

Base URL for XRPC calls (e.g., https://api.bsky.social)
Parameters
The receipt record URI to verify.
View raw schema 
{
  "description": "Verify an indexed receipt offline-equivalently: structural checks against its job + attestation, a P-256 ECDSA signature check of `enclaveSignature` against the attestation public key, lexicon-schema validation, and — when an MDA cert chain is present — a hardware-attestation check bound to the signing key. `trustLevel` rises to `hardware-attested` only when a valid Apple chain certifies the receipt-signing key.",
  "errors": [
    {
      "description": "The `uri` parameter is missing.",
      "name": "InvalidRequest"
    },
    {
      "description": "The receipt, or its referenced job/attestation, is not indexed.",
      "name": "NotFound"
    }
  ],
  "output": {
    "encoding": "application/json",
    "schema": {
      "properties": {
        "findings": {
          "items": {
            "ref": "dev.cocore.defs#verifyFinding",
            "type": "ref"
          },
          "type": "array"
        },
        "ok": {
          "type": "boolean"
        },
        "trustLevel": {
          "enum": [
            "self-attested",
            "hardware-attested"
          ],
          "type": "string"
        }
      },
      "required": [
        "ok",
        "trustLevel",
        "findings"
      ],
      "type": "object"
    }
  },
  "parameters": {
    "properties": {
      "uri": {
        "description": "The receipt record URI to verify.",
        "format": "at-uri",
        "type": "string"
      }
    },
    "required": [
      "uri"
    ],
    "type": "params"
  },
  "type": "query"
}

Lexicon Garden

@