Read the trust receipt reference for an invocation

GET

/v1/invocations/{id}/receipt

curl --request GET \
  --url https://example.com/v1/invocations/example/receipt \
  --header 'Authorization: Bearer <token>'

• The gateway serves this contract at its own root; no fixed host is baked in (self-hostable).

Reports which Treeship artifact this gateway signed for one invocation, and the command that verifies it.

It deliberately returns no verdict. The gateway signed the artifact; a gateway that also reported it as valid would be asserting exactly what invariant #6 forbids. Verification is performed against the artifact by the party relying on it.

attested: false is not proof that no receipt exists. Emission is fail-open and runs off the request path, so an artifact can be signed and its reference lost; reason distinguishes receipts_disabled from not_recorded.

Authorizations

• oidcBearer

Parameters

Path Parameters

id

required

string

The inv_<uuidv7> invocation ID.

Responses

200

The receipt reference, or an explicit statement that none is recorded.

Media typeapplication/json

Which Treeship artifact was signed for an invocation, and how to verify it. Carries no verdict: the gateway signed this artifact and does not also vouch for it (invariant #6).

object

invocation_id

required

string

attested

required

Whether an artifact reference is recorded. False is not proof that no receipt exists — emission is fail-open and off the request path.

boolean

reason

Why no reference is recorded. Absent when attested is true.

string

Allowed values: receipts_disabled not_recorded

artifact_id

The Treeship artifact identifier.

string

actor

The actor URI the artifact was signed as.

string

signed_at

string format: date-time

verify

The command that verifies the artifact against its signing key.

string

Example

{
  "reason": "receipts_disabled"
}

400

The invocation id is missing.

Media typeapplication/json

The uniform error body for all 4xx responses that carry one.

object

error

required

A coarse, caller-safe message. Never contains internal state (invariant

string

Example^generated

{
  "error": "example"
}

401

Missing or invalid bearer token, or the token’s tenant/user claims are absent. No body.

404

No resource with this ID exists in the caller’s tenant.

Media typeapplication/json

The uniform error body for all 4xx responses that carry one.

object

error

required

A coarse, caller-safe message. Never contains internal state (invariant

string

Example^generated

{
  "error": "example"
}

500

An unexpected server-side error. No body (internal detail is never returned to callers, invariant