Receipts

Every verification produces a durable receipt: GET /api/v1/receipts/{id} or GET /api/v1/receipts for history/search.

A receipt includes: receipt ID, tenant, timestamp, engine/contract version, correlation ID, commercial verdict, safe evidence metadata (hashes, never raw evidence text), a tamper-evident receipt hash, and its supersession chain if the underlying claim was later corrected. It never includes secrets, API tokens, or proprietary algorithm details.

Deleting an organization's data (retention/deletion request, see Settings) revokes rather than physically destroys receipts where legally/architecturally appropriate, preserving audit integrity while marking the record as revoked.