Receipts are organized in two layers. The envelope is the wrapper: a summary identifier, a hash, and a timestamp. The payload is the receipt itself: the sealed record. Every field inside the payload is included in the cryptographic hash and signature.
Any change to any payload field breaks the seal.
Receipt Summary1
receipt.claim_id Unique identifier for this sealed record.
receipt.hash Hash of the sealed receipt payload.
receipt.timestamp ISO 8601 timestamp when the receipt was sealed.
Core2
claim_id Unique identifier for this sealed record.
node_type Identifies which node produced this receipt.
received_at When the request reached Axiom-Infra servers.
sealed_at When the cryptographic seal was computed.
performed_at When the capture was executed.
verify_url Public address where anyone can confirm this receipt.
tier Service tier under which the receipt was created
Capture Node Details3
submitted_url The URL submitted for capture.
final_url The resolved URL after any redirects.
page_title Title of the page at time of capture.
screenshot_url URL of the captured screenshot.
html_url URL of the HTML snapshot.
links_extracted Links found on the page, grouped by domain with count.
Network Layer4
http_headers HTTP response headers returned by the captured URL.
tls_certificate TLS certificate details: issuer, subject, protocol, validity dates.
dns_records DNS A records resolved at time of capture.
Hashes5
receipt_hash Hash of the full sealed payload.
content_hash Hash of the captured page content.
screenshot_hash Hash of the screenshot image.
policy_hash Hash of the capture policy applied.
Quantum Seal6
rfc3161_token Trusted timestamp token from an independent third-party authority (DigiCert). Binds the receipt to a specific point in time. Verifiable without Axiom-Infra.
sig_algorithm Post-quantum signature algorithm (ML-DSA-87, FIPS 204). Signs the receipt against future quantum-computer attacks on classical signature schemes. The implementation passes the published FIPS 204 ML-DSA-87 test vectors.
sig_value The signature bytes. Proves the receipt was sealed by Axiom-Infra.
sig_public_key The public key corresponding to the signing key. Allows independent verification of the signature without Axiom-Infra.
sig_key_version Version of the signing key used.
sig_status Result of signature verification. The value "ok" indicates the signature passed verification.
Beyond the single signature above, every receipt also carries a four-layer cascading seal: each signature covers the one before it, so altering any one layer breaks every layer signed after it.
sig1 Evidence seal. Signs the captured content's core hash.
sig2 Witness seal. Signs sig1 together with the witness evidence (world_state_block -- the exact time-anchor and world-state witness bytes described in "Witnesses" below).
sig3 Timestamp seal. Signs sig2 together with the trusted timestamp (timestamp_block -- the exact RFC 3161 bytes described in "Hashes" below).
sig4 Final seal. Signs a small metadata summary, receipt_metadata_block.
chain_hash The combined hash of sig1, sig2, and sig3, cross-checked by sig4's own layer -- this is what binds all four seals into one chain rather than four independent signatures.
Witnesses7
Time Anchor: A signed cryptographic pulse from a public beacon source. Anchors the receipt to a specific point in time. Independently verifiable against the beacon source's own archive.
Witnesses: Physical world-state witnesses from independent public scientific and observational sources. Each entry carries a source identifier and a SHA-256 hash of the bytes returned at issuance. Independently verifiable against the source's public records.
Capture Node receipt structure. Placeholder values shown.
{
"receipt": {
"claim_id": "<unique identifier>",
"hash": "<hash value>",
"timestamp": "<ISO 8601 UTC timestamp>"
},
"payload": {
"claim_id": "<unique identifier>",
"node_type": "axiom_capture",
"received_at": "<ISO 8601 UTC timestamp>",
"sealed_at": "<ISO 8601 UTC timestamp>",
"performed_at": "<ISO 8601 UTC timestamp>",
"submitted_url": "<URL submitted by caller>",
"final_url": "<URL after redirects>",
"content_hash": "<hash value>",
"screenshot_hash": "<hash value>",
"policy_hash": "<hash value>",
"rfc3161_token": "<timestamp token>",
"screenshot_url": "<URL to retrieve screenshot>",
"html_url": "<URL to retrieve captured HTML>",
"verify_url": "https://axiominfra.io/verify/<claim_id>",
"links_extracted": {
"count": "<number>",
"by_domain": { "<domain>": ["<URL>"] }
},
"page_title": "<HTML page title>",
"http_headers": { "<header name>": "<header value>" },
"tls_certificate": {
"issuer": "<issuer>",
"subject": "<subject>",
"valid_from": "<unix timestamp>",
"valid_to": "<unix timestamp>",
"protocol": "<TLS version>"
},
"dns_records": ["<IP address>"],
"time_anchor_witness": { "source_id": "<source>", "output_value": "<value>", "raw_hash": "<hash>" },
"world_state_witnesses": [
{ "source_id": "<source_a>", "raw_hash": "<hash>" },
{ "source_id": "<source_b>", "raw_hash": "<hash>" },
{ "source_id": "<source_c>", "raw_hash": "<hash>" }
],
"tier": "<tier identifier>",
"receipt_hash": "<hash value>",
"sig_algorithm": "<algorithm identifier>",
"sig_value": "<signature bytes>",
"sig_public_key": "<public key bytes>",
"sig_key_version": "<integer>",
"sig_status": "<verification result>",
"sig1": "<evidence seal>",
"sig2": "<witness seal>",
"sig3": "<timestamp seal>",
"sig4": "<final seal>",
"chain_hash": "<combined hash of sig1, sig2, sig3>"
}
}Definitions
- Receipt Summary: The envelope. Carries the receipt's identifier, hash, and timestamp. ↩
- Core: Identifiers and timestamps that locate the receipt. Which node produced it, when each stage happened, and where to verify it. ↩
- Capture Node Details: What was captured about the page. URLs, title, extracted links, and references to the screenshot and HTML. ↩
- Network Layer: Infrastructure observed at the moment of capture. HTTP headers, TLS certificate, and DNS records. ↩
- Hashes: Cryptographic fingerprints of the captured content, screenshot, applied policy, and full sealed payload. ↩
- Quantum Seal: Post-quantum signature and trusted timestamp that bind the receipt to a point in time and to Axiom-Infra's identity. Independently verifiable. ↩
- Witnesses: A time anchor plus a set of world-state witnesses selected per receipt from independent public sources, failures recorded and independently verifiable. Sealed into the receipt hash. ↩