A receipt is the final durable result of a governed request. It binds the request, profile, authority decision, execution classification, verification outcome, evidence references, and integrity material.
Vendor receipts are deliberately minimized. They can report outcomes such as VERIFIED, DENIED, EXPIRED, or an uncertain effect without disclosing customer credentials or unrestricted target state.
Webhook delivery is signed and retryable. Stable event and request identifiers let the vendor process duplicate deliveries without duplicating business effects.