{
  "kind": "ask-orders.origin-receipt.v1",
  "subject": {
    "request": {
      "withheld": "sha256:hUtdSYtvogT86boT1dsVVMKij1lo6apLLF1K_ORXSJg"
    },
    "response": {
      "at": "2026-10-02T02:56:44.760Z",
      "event": {
        "body": {
          "bytes": 20,
          "sha256": "sha256:R09VqOLbl_-lxlUr7Qu-RXfKYJ7stvLlon0wuM3WmaE"
        },
        "request_id": "r1",
        "status": 200,
        "type": "response"
      },
      "kind": "ask-orders.leaf.v1",
      "seq": 2,
      "session": "tpm-vector"
    }
  },
  "inclusion": {
    "request": {
      "leaf_index": 1,
      "tree_size": 3,
      "path": [
        "sha256:VZHW8Rf3aTC-RX-IrtIHybvHZ1L7coJM89_MhPUoVns",
        "sha256:ISFfH8GtEceTaw11dy1EeTgDle0BBnFpt6Qx6ZrXs2A"
      ]
    },
    "response": {
      "leaf_index": 2,
      "tree_size": 3,
      "path": [
        "sha256:M1HClFdQw2YmPa4_3PcsExA1jcag6DZaq6mQV8E5vRs"
      ]
    }
  },
  "checkpoint": {
    "body": {
      "kind": "ask-orders.checkpoint.v1",
      "log_id": "tpm-vector",
      "tree_size": 3,
      "root": "sha256:hckvklPel3aZMByVFeItShSm6zx_Bx3c8Fzddnkmz5Y",
      "at": "2026-10-02T02:56:42.763Z",
      "signer": {
        "kid": "box-vtpm-checkpoint-1",
        "binding": "tpm2-certified",
        "evidence": "sha256:6z7S5oT8xi-XooqNfdaPmeug3glQVVoUUVQzftUwELc"
      },
      "previous": null
    },
    "proofs": [
      {
        "suite": "rootz.sign-mcp.v1",
        "envelope": {
          "v": 1,
          "iss": "receipts-demo-1",
          "kid": "box-vtpm-checkpoint-1",
          "canon": "RFC8785",
          "payload": {
            "alg": "sha-256",
            "hash": "WSa9ufwegJ-dlH96FrzETKhRtA7lM6maRzFHktGoVzU"
          },
          "ts": "2026-10-02T02:56:42Z",
          "exp": "2026-10-02T03:01:42Z",
          "nonce": "-XLleSI1e1Ymzd5FP13RPw",
          "ctx": {
            "kind": "ask-orders.checkpoint.v1"
          },
          "algs": [
            "ecdsa-p256"
          ],
          "sigs": {
            "ecdsa-p256": "MEYCIQCNVGFSEOtMuv_8KJaj5-m9IFYzctM_0QlmYLkQs5vHOwIhAMDQrSnL7rZVqFAqPNRZIgkJnLFn_DjkwPzVCxyiz5Q4"
          }
        }
      }
    ]
  },
  "orders": [
    {
      "body": {
        "kind": "ask-orders.order.v1",
        "action": "policy.install",
        "change": "install",
        "issuer": {
          "account": "demo-officer-1",
          "authority_root": "eip155:1:0x00000000000000000000000000000000000000E1"
        },
        "target": {
          "gateway": "receipts-demo-1",
          "sandbox": "tpm-vector"
        },
        "policy": {
          "format": "openshell.policy.v1",
          "digest": "sha256:GmhzhWhREw2jVtv8zm2inQdEgVgSp7R0WV_UvgRE7L4"
        },
        "boundary": {
          "ref": "sha256:PiPoFgA5WUoziU9lZOGxNIu9egCI1CxKy3PurtWcAJ0",
          "prover": {
            "tool": "openshell-prover",
            "version": "0.1.2",
            "verdict": "contained",
            "output": "sha256:KpdRbDVLaISM29j1SiJqClWyHtE44getbFy7nACqWuo"
          }
        },
        "supersedes": null,
        "not_before": "2026-10-02T02:55:42.760Z",
        "expires": "2026-10-02T03:56:42.760Z",
        "nonce": "hz0t5Zi3UZ4Iw8USjuUuag"
      },
      "proofs": [
        {
          "suite": "rootz.sign-mcp.v1",
          "envelope": {
            "v": 1,
            "iss": "demo.rootz-receipts.example",
            "kid": "demo-officer-1",
            "canon": "RFC8785",
            "payload": {
              "alg": "sha-256",
              "hash": "ZZt4fa5JD5kQseiYy_dEBBnZPJYxunUM60NiqCek2Bk"
            },
            "ts": "2026-10-02T02:56:42Z",
            "exp": "2026-10-02T03:01:42Z",
            "nonce": "B8UuCbfH5FTzHx2i3Sr5wQ",
            "ctx": {
              "kind": "ask-orders.order.v1"
            },
            "algs": [
              "ecdsa-p256",
              "ed25519"
            ],
            "sigs": {
              "ecdsa-p256": "MEUCIQDjn4pRmnWyPwL8jq5G-TqB79xWUAQ-6xW6M01YcJ3vMAIgAYI-mxw36AFw7LzlsCA5226aQvcXnw4bZ4SquL4W62Q",
              "ed25519": "42NKE02w6tCGr94Q5K8RymSaD_e56W0wPgCIJWm_ZaLI_YftdBl1hd7TxvYyO3LomvmQK-ZzCSjdrHz-kcHpAw"
            }
          }
        }
      ]
    }
  ],
  "manifest": {
    "withheld": "sha256:0c_uxetq0dHJ1bvDN3SgdV0I_s3CTj1WfwqYEIOUP4I"
  },
  "authority": {
    "root": "eip155:1:0x00000000000000000000000000000000000000E1",
    "legal_anchor": {
      "jurisdiction": "SAMPLE",
      "registry_ids": []
    },
    "hops": [
      {
        "from": "eip155:1:0x00000000000000000000000000000000000000E1",
        "to": "demo-officer-1",
        "evidence": {
          "type": "safe-exec-transaction",
          "ref": "0x01",
          "message": "demo"
        },
        "valid_from": "2026-10-01T02:56:42.760Z",
        "valid_until": "2026-10-03T02:56:42.760Z"
      }
    ]
  },
  "genesis": {
    "leaf": {
      "at": "2026-10-02T02:56:42.760Z",
      "event": {
        "manifest": "sha256:0c_uxetq0dHJ1bvDN3SgdV0I_s3CTj1WfwqYEIOUP4I",
        "openshell_policy_hash": "h",
        "order": "sha256:ZZt4fa5JD5kQseiYy_dEBBnZPJYxunUM60NiqCek2Bk",
        "type": "genesis"
      },
      "kind": "ask-orders.leaf.v1",
      "seq": 0,
      "session": "tpm-vector"
    },
    "inclusion": {
      "leaf_index": 0,
      "tree_size": 3,
      "path": [
        "sha256:hUtdSYtvogT86boT1dsVVMKij1lo6apLLF1K_ORXSJg",
        "sha256:ISFfH8GtEceTaw11dy1EeTgDle0BBnFpt6Qx6ZrXs2A"
      ]
    }
  },
  "materials": [],
  "inputs": [],
  "keys": {
    "keys": [
      {
        "kid": "demo-officer-1",
        "alg": "ed25519",
        "use": "sig",
        "kty": "OKP",
        "crv": "Ed25519",
        "x": "frtej7xJElDm09tHNadYEHgD-rD4awdMo8vgdqXMDiU"
      },
      {
        "kid": "demo-officer-1",
        "alg": "ecdsa-p256",
        "use": "sig",
        "kty": "EC",
        "crv": "P-256",
        "x": "rk-E4XE-wnNX3nFal7TmpQUYUk3K19WcCv07pRzb1M8",
        "y": "PzZGIOpNGNNQ5RwPBEn5HCxx3krZF7gi1V5FY76mW7o"
      },
      {
        "kty": "EC",
        "crv": "P-256",
        "x": "odcd0STc-xZvmXkgdVIw1mF_dg6pyVpkc_43tdOhqz4",
        "y": "xaw1AeuhC9GB8OymKKxY18rnBz6k32l_dlwl78TFf84",
        "kid": "box-vtpm-checkpoint-1",
        "alg": "ecdsa-p256",
        "use": "sig"
      }
    ]
  },
  "checkpoint_key_binding": {
    "type": "tpm2-certify-quote",
    "tpm": {
      "manufacturer": "IBM",
      "vendor": "SW",
      "endorsement_certificate": null,
      "endorsement_note": "This vTPM (hypervisor-provided, software) carries no endorsement certificate in NV. The attestation key is trusted only if a relying party pins it."
    },
    "ak": {
      "jwk": {
        "kty": "EC",
        "crv": "P-256",
        "x": "NDPi40bsrzE71cLgk8u1w9HUEKBsEiiBpRNc93DLWe4",
        "y": "e82cbxGsJ0NNynrFKg8Sm1MzOh-EgoyiZisvOdmNZsw"
      }
    },
    "key": {
      "tpmt_public": "ACMACwAEAHIAAAAQABgACwADABAAIKHXHdEk3PsWb5l5IHVSMNZhf3YOqclaZHP+N7XToas+ACDFrDUB66EL0YHw7KYorFjXyucHPqTfaX92XCXvxMV/zg=="
    },
    "certify": {
      "attest": "/1RDR4AXACIAC9Tif4gdGfkAF8VCSpYgcbpU5Oyv3ps2LndOAuuCHIWCAAQA/1WqAAAAAABg9i4AAAADAAAAAAEgGRAjABY2NgAiAAu8fsOvIzedrN+yU7x3cmmTGv56lCs9yPKUnc2/hEUHdQAiAAvc9JLTlznPUdLvsuZoVhYWFoFs3AUnxr4rzaYOWHT/yw==",
      "signature": "MEQCIBDq/DXTH2gag0JcLXVLSpCGoXknA2QWR+PnXjfg/oCcAiBWxYwAKDRuOtzY8urIc7ZejpVBb+7/KliGqR7v2FMi7A=="
    },
    "quote": {
      "attest": "/1RDR4AYACIAC9Tif4gdGfkAF8VCSpYgcbpU5Oyv3ps2LndOAuuCHIWCACCvDCUDjtWsdxqD3B2GzEIzqHWLfV8ts96bThSiW4WwzwAAAAAAYPZqAAAAAwAAAAABIBkQIwAWNjYAAAABAAsDgQAAACAOWZkdALJzXey7byfSZ2oOZYztdm/9BbkH+420Py4cAg==",
      "signature": "MEUCIGSSPKFlIsKzozeBQwesGq4laT3+9vlyQLfyD4oGtw3eAiEAlGJPN/ek8HVuVP0jZ/i/aTDN1iw/wOFJBSLLYtgvraY=",
      "bank": "sha256",
      "pcrs": {
        "0": "fb5d2eab3902a3594d483020c45382b79c2857f0b2167802d552cc514d25a8dd",
        "7": "3871e64d63d489742c44abe29ef014039523413bd54ee5955b2ecf00fb7e3eef"
      }
    }
  }
}