Skip to content

Publish scoped execution + settlement docs and execution receipt demo #384

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
GsCommand merged 1 commit into from
Jun 13, 2026
Merged

Publish scoped execution + settlement docs and execution receipt demo #384

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions public/docs.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@
<nav>
<div class="container nav-inner">
<a href="/" class="brand"><img src="/commandlayer-logo.png" alt="CommandLayer" /><span>CommandLayer</span></a>
<ul class="nav-links"><li><a href="/">Home</a></li><li><a href="/protocol.html">Protocol</a></li><li><a href="/capabilities.html">Capabilities</a></li><li><a href="/receipts.html">Receipts</a></li><li><a href="/proof.html">Live Proof</a></li><li><a href="/sdk-records.html">SDK</a></li><li class="nav-drop"><a href="/docs.html" class="active" aria-haspopup="true">Docs ▾</a><div class="nav-drop-menu"><a href="/docs.html">Docs Home</a><a href="/docs/wrap-your-agent.html">Wrap Your Agent</a><a href="/runtime.html">Runtime</a><a href="/mcp.html">MCP Bridge</a><a href="/schemas.html">Schemas</a><a href="/api.html">API Reference</a><a href="/integrations.html">Integrations</a><a href="/verify.html">Verifier</a><a href="/playground.html">Playground</a><a href="/webhook-auto-verify.html">Webhook Demo</a></div></li><li><a href="/claim.html">Claim</a></li><li><a href="https://github.com/commandlayer" target="_blank" rel="noopener">GitHub</a></li></ul>
<ul class="nav-links"><li><a href="/">Home</a></li><li><a href="/protocol.html">Protocol</a></li><li><a href="/capabilities.html">Capabilities</a></li><li><a href="/receipts.html">Receipts</a></li><li><a href="/proof.html">Live Proof</a></li><li><a href="/sdk-records.html">SDK</a></li><li class="nav-drop"><a href="/docs.html" class="active" aria-haspopup="true">Docs ▾</a><div class="nav-drop-menu"><a href="/docs.html">Docs Home</a><a href="/docs/wrap-your-agent.html">Wrap Your Agent</a><a href="/docs/scoped-execution-settlement.html">Scoped Execution + Settlement</a><a href="/execution-receipt-demo.html">Execution Receipt Demo</a><a href="/runtime.html">Runtime</a><a href="/mcp.html">MCP Bridge</a><a href="/schemas.html">Schemas</a><a href="/api.html">API Reference</a><a href="/integrations.html">Integrations</a><a href="/verify.html">Verifier</a><a href="/playground.html">Playground</a><a href="/webhook-auto-verify.html">Webhook Demo</a></div></li><li><a href="/claim.html">Claim</a></li><li><a href="https://github.com/commandlayer" target="_blank" rel="noopener">GitHub</a></li></ul>
</div>
</nav>

Expand All @@ -68,6 +68,7 @@ <h2>Start building</h2>
<div class="grid">
<a class="card" href="/docs/wrap-your-agent.html"><h3>Wrap Your Agent</h3><p>Use the SDK to wrap actions and emit canonical receipts.</p></a>
<a class="card" href="/sdk-records.html"><h3>SDK Records</h3><p>Install the SDK and emit canonical action records and receipts.</p></a>
<a class="card" href="/execution-receipt-demo.html"><h3>Execution Receipt Demo</h3><p>Compare execution-only, private settlement, and invalid scoped receipt examples.</p></a>
<a class="card" href="/api.html"><h3>API Reference</h3><p>Inspect endpoints, payloads, and validation behavior.</p></a>
</div>
</section>
Expand All @@ -78,6 +79,7 @@ <h2>Understand the protocol</h2>
<a class="card" href="/protocol.html"><h3>Protocol</h3><p>Core architecture, CLAS model, and trust boundaries.</p></a>
<a class="card" href="/capabilities.html"><h3>Capabilities</h3><p>Understand the CLAS action surface and capability families.</p></a>
<a class="card" href="/receipts.html"><h3>Receipts</h3><p>See canonical receipt structure and verifier expectations.</p></a>
<a class="card" href="/docs/scoped-execution-settlement.html"><h3>Scoped Execution + Settlement</h3><p>Learn clas.execution.receipt.v1: one receipt, two attestations, and private settlement commitments.</p></a>
<a class="card" href="/proof.html"><h3>Live Proof</h3><p>Walk through proof flow and tamper-invalid verification outcomes.</p></a>
<a class="card" href="/genesis-proof.html"><h3>Genesis Receipt Verification</h3><p>Retrieve and cryptographically verify a stored genesis receipt by receipt ID.</p></a>
</div>
Expand Down Expand Up @@ -120,6 +122,6 @@ <h2>Legacy and discovery docs</h2>
</section>
</main>

<footer><div class="container footer-grid"><div><h4>Product</h4><a href="/protocol.html">Protocol</a><a href="/capabilities.html">Capabilities</a><a href="/receipts.html">Receipts</a><a href="/proof.html">Live Proof</a><a href="/integrations.html">Integrations</a><a href="/sdk-records.html">SDK</a><a href="/claim.html">Claim</a></div><div><h4>Developers</h4><a href="/docs.html">Docs</a><a href="/docs/wrap-your-agent.html">Wrap Your Agent</a><a href="/runtime.html">Runtime</a><a href="/mcp.html">MCP Bridge</a><a href="/schemas.html">Schemas</a><a href="/api.html">API Reference</a><a href="https://github.com/commandlayer" target="_blank" rel="noopener">GitHub</a></div><div><h4>Proof</h4><a href="/verify.html">Verifier</a><a href="/stack-proof-demo.html">Production Proof</a><a href="/receipts.html">Receipts</a><a href="/proof.html">Live Proof</a></div></div></footer>
<footer><div class="container footer-grid"><div><h4>Product</h4><a href="/protocol.html">Protocol</a><a href="/capabilities.html">Capabilities</a><a href="/receipts.html">Receipts</a><a href="/execution-receipt-demo.html">Execution Receipt Demo</a><a href="/proof.html">Live Proof</a><a href="/integrations.html">Integrations</a><a href="/sdk-records.html">SDK</a><a href="/claim.html">Claim</a></div><div><h4>Developers</h4><a href="/docs.html">Docs</a><a href="/docs/wrap-your-agent.html">Wrap Your Agent</a><a href="/docs/scoped-execution-settlement.html">Scoped Execution + Settlement</a><a href="/runtime.html">Runtime</a><a href="/mcp.html">MCP Bridge</a><a href="/schemas.html">Schemas</a><a href="/api.html">API Reference</a><a href="https://github.com/commandlayer" target="_blank" rel="noopener">GitHub</a></div><div><h4>Proof</h4><a href="/verify.html">Verifier</a><a href="/stack-proof-demo.html">Production Proof</a><a href="/receipts.html">Receipts</a><a href="/proof.html">Live Proof</a></div></div></footer>
</body>
</html>
54 changes: 54 additions & 0 deletions public/docs/scoped-execution-settlement.html
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,54 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>Scoped Execution + Settlement Receipts | CommandLayer Docs</title>
<meta name="description" content="Public docs for clas.execution.receipt.v1 scoped execution and private settlement receipts." />
<link rel="icon" href="/favicon.ico" />
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet" />
<link rel="stylesheet" href="/css/site.css" />
<style>
.hero{padding:80px 0 44px;background:radial-gradient(1000px 340px at 50% -10%,rgba(99,91,255,.16),transparent 70%),#fff}.hero h1{font-size:clamp(2.2rem,5vw,3.8rem);line-height:1.06;letter-spacing:-.04em;margin:0 0 14px}.lead{max-width:920px;color:var(--text-2);font-size:1.08rem;line-height:1.75}.section{padding:46px 0}.grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:14px}.card{background:#fff;border:1px solid var(--border);border-radius:16px;padding:18px;box-shadow:0 1px 2px rgba(15,23,42,.04),0 8px 22px rgba(99,91,255,.07)}.card h2,.card h3{margin:0 0 10px}.card p,.card li{color:var(--text-2);line-height:1.7}.list{padding-left:20px}.callout{background:#f2f6ff;border:1px solid #d9e6ff;border-radius:16px;padding:18px}.warn{background:#fff4eb;border:1px solid #ffd2ac;color:#7a3208}.code-block{background:#0E1322;color:#E2E8F0;border-radius:14px;padding:16px;overflow:auto;line-height:1.55;font-size:13px}.pill{display:inline-flex;padding:5px 10px;border-radius:999px;background:#eef2ff;color:#4338ca;font-weight:700;font-size:12px;margin-bottom:12px}.nav-links a:hover,.nav-drop:hover>a,.nav-drop:focus-within>a,.nav-drop>a.active{color:var(--text);background:var(--surface)}.nav-drop{position:relative}.nav-drop>a{display:inline-flex;align-items:center;gap:4px}.nav-drop-menu{position:absolute;top:calc(100% - 1px);left:0;background:#fff;border:1px solid var(--border);border-radius:12px;box-shadow:0 10px 34px rgba(15,23,42,.12);padding:8px;display:none;min-width:285px;z-index:200}.nav-drop-menu::before{content:"";position:absolute;left:0;right:0;top:-8px;height:8px}.nav-drop-menu a{display:block;white-space:nowrap}.nav-drop:hover .nav-drop-menu,.nav-drop:focus-within .nav-drop-menu{display:grid}footer{border-top:1px solid var(--border);background:#fff}.footer-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:24px;padding:36px 0}.footer-grid h4{font-size:14px;margin-bottom:10px}.footer-grid a{display:block;color:var(--text-2);margin:8px 0;font-size:14px}@media(max-width:900px){.grid,.footer-grid{grid-template-columns:1fr}.nav-drop{width:100%}.nav-drop-menu{position:static;display:grid;margin-top:2px;min-width:0;box-shadow:none}}
</style>
</head>
<body>
<nav><div class="container nav-inner"><a href="/" class="brand"><img src="/commandlayer-logo.png" alt="CommandLayer" /><span>CommandLayer</span></a><ul class="nav-links"><li><a href="/">Home</a></li><li><a href="/protocol.html">Protocol</a></li><li><a href="/capabilities.html">Capabilities</a></li><li><a href="/receipts.html">Receipts</a></li><li><a href="/proof.html">Live Proof</a></li><li><a href="/sdk-records.html">SDK</a></li><li class="nav-drop"><a href="/docs.html" class="active" aria-haspopup="true">Docs ▾</a><div class="nav-drop-menu"><a href="/docs.html">Docs Home</a><a href="/docs/wrap-your-agent.html">Wrap Your Agent</a><a href="/docs/scoped-execution-settlement.html">Scoped Execution + Settlement</a><a href="/execution-receipt-demo.html">Execution Receipt Demo</a><a href="/runtime.html">Runtime</a><a href="/mcp.html">MCP Bridge</a><a href="/schemas.html">Schemas</a><a href="/api.html">API Reference</a><a href="/integrations.html">Integrations</a><a href="/verify.html">Verifier</a></div></li><li><a href="/claim.html">Claim</a></li><li><a href="https://github.com/commandlayer" target="_blank" rel="noopener">GitHub</a></li></ul></div></nav>
<main>
<section class="hero"><div class="container"><span class="pill">clas.execution.receipt.v1</span><h1>Scoped execution and settlement receipts</h1><p class="lead"><strong>Private settlement, public accountability.</strong> CommandLayer receipts can prove what an agent executed while separately proving that a payment rail, payer, or settlement authority attested settlement without exposing private payment data.</p></div></section>
<section class="section"><div class="container"><div class="callout"><p><strong>Execution and settlement are independently attested.</strong><br />The ENS capability name is the durable proof identity.<br />Payment addresses can rotate, hide, or settle privately.</p></div></div></section>
<section class="section"><div class="container grid"><article class="card"><h2>What it is</h2><p><code>clas.execution.receipt.v1</code> is the scoped receipt schema for one receipt that can carry two attestations over the same <code>receipt_id</code>: an execution proof signed by the agent/runtime and a settlement proof signed by the rail, payer, or settlement authority.</p><ul class="list"><li><strong>One receipt:</strong> one public proof artifact and one durable identifier.</li><li><strong>Two attestations:</strong> execution and settlement each cover only their own fields.</li><li><strong>Same receipt_id:</strong> ties the execution and settlement statements without collapsing trust boundaries.</li></ul></article><article class="card"><h2>Why proofs are separate</h2><p>The agent knows what it executed; it does not authoritatively know final private settlement state. Keeping proof scopes separate prevents an agent signature from being misread as a payment guarantee.</p><ul class="list"><li>The agent signs execution only.</li><li>The rail, payer, or settlement authority signs settlement only.</li><li>The public receipt commits to private settlement data without revealing it.</li></ul></article></div></section>
<section class="section"><div class="container grid"><article class="card"><h2>Settlement authority</h2><p>Settlement proof belongs to the system that can attest payment acceptance, settlement, or payer authorization. That may be a payment rail, payer wallet, checkout service, or internal settlement authority. The signer is accountable for the settlement claim and covers only <code>receipt_id</code> and <code>settlement</code>.</p></article><article class="card"><h2>Opaque references and commitments</h2><p><code>payment_ref</code> must be opaque so a public receipt does not leak a raw transaction hash, wallet graph, processor id, or private invoice linkage. <code>payee_commitment</code> is a <code>sha256:</code> hash commitment that lets a verifier later check disclosed payee data without publishing the payee address up front.</p></article></div></section>
<section class="section"><div class="container"><article class="card"><h2>Example scoped receipt</h2><pre class="code-block"><code>{
"schema": "clas.execution.receipt.v1",
"receipt_id": "rcpt_scoped_01JZ8Q7EXAMPLE",
"verb": "clas.agent.execute",
"agent": "research-agent.example.eth",
"action": { "name": "summarize", "input_hash": "sha256:4d8c...9a1e" },
"settlement": {
"status": "settled",
"payment_ref": "settle_ref_8VqT9n_private",
"amount": "2.50",
"currency": "USDC",
"payee_commitment": "sha256:7ad3...c091"
},
"proofs": [
{
"type": "execution",
"covers": ["receipt_id", "verb", "agent", "action"]
},
{
"type": "settlement",
"covers": ["receipt_id", "settlement"]
}
]
}</code></pre></article></div></section>
<section class="section"><div class="container grid"><article class="card"><h2>Selective disclosure</h2><p>The public receipt contains opaque references and commitments. A verifier that is authorized to see private payment details receives a disclosure package with the original payee data, private settlement metadata, and nonce/salt. VerifyAgent or another verifier hashes the disclosed data and compares it to the public <code>sha256:</code> commitment while checking the settlement attestation signature.</p></article><article class="card"><h2>VerifyAgent display</h2><p>VerifyAgent displays separate proof cards: <strong>Execution proof</strong> for the agent/runtime signature and <strong>Settlement proof</strong> for the rail/payer/settlement authority signature. A receipt can be execution-only, execution plus settlement, or invalid when a signer tries to cover fields outside its scope.</p><p style="margin-top:12px"><a class="btn btn-primary" href="/execution-receipt-demo.html">Open demo</a> <a class="btn btn-secondary" href="/verify.html">Verify paste flow</a></p></article></div></section>
<section class="section"><div class="container"><article class="card warn"><h2>Privacy warning</h2><ul class="list"><li>Do not publish <code>settlement.stealth_address</code>.</li><li>Do not publish a raw <code>0x...</code> payment transaction hash as <code>payment_ref</code>.</li><li>Use an opaque settlement reference.</li><li>Use a <code>sha256:</code> payee commitment.</li><li>Private payment linkage is verified through selective disclosure, not by exposing payment addresses or raw transaction hashes in public receipts.</li></ul></article></div></section>
<section class="section"><div class="container"><article class="card"><h2>Schema publication</h2><p>The runtime schema name is <code>clas.execution.receipt.v1</code>. Public schema sync for <code>/schemas/execution/execution.receipt.schema.json</code> is not wired in this site yet, so schema publication needs a follow-up sync. Until then, treat this page and the demo as public documentation for the receipt model.</p></article></div></section>
</main>
<footer><div class="container footer-grid"><div><h4>Product</h4><a href="/protocol.html">Protocol</a><a href="/capabilities.html">Capabilities</a><a href="/receipts.html">Receipts</a><a href="/execution-receipt-demo.html">Execution Receipt Demo</a><a href="/proof.html">Live Proof</a><a href="/integrations.html">Integrations</a><a href="/sdk-records.html">SDK</a></div><div><h4>Developers</h4><a href="/docs.html">Docs</a><a href="/docs/wrap-your-agent.html">Wrap Your Agent</a><a href="/docs/scoped-execution-settlement.html">Scoped Execution + Settlement</a><a href="/runtime.html">Runtime</a><a href="/schemas.html">Schemas</a><a href="/api.html">API Reference</a></div><div><h4>Proof</h4><a href="/verify.html">Verifier</a><a href="/stack-proof-demo.html">Production Proof</a><a href="/receipts.html">Receipts</a><a href="/proof.html">Live Proof</a></div></div></footer>
</body>
</html>
Loading
Loading