{
  "receipt_version": 1,
  "subject": "https://quox.ai/evidence/bundles/index.json",
  "index_sha256": "794dabc8f22e51bd27c74febfb6979c9ae20e43e5916e81c125a9d7ade17e094",
  "ward_entry": {
    "ward_version": "0.2",
    "ward_entry_id": "f5c51aef-ae75-462d-a8e9-49b99032ce5f",
    "chain_id": "ward:quox.ai/journey-bundles",
    "seq": 2,
    "witnessed_at": "2026-11-05T02:33:10.167Z",
    "source_kind": "EXTERNAL",
    "source_id": "https://quox.ai/evidence/bundles/index.json#sha256:794dabc8f22e51bd27c74febfb6979c9ae20e43e5916e81c125a9d7ade17e094",
    "payload_hash": "794dabc8f22e51bd27c74febfb6979c9ae20e43e5916e81c125a9d7ade17e094",
    "prev_chain_hash": "93b41d465a4aaf6d4d0b7f6e359103f71d21258fcea456774ee2292de8c9c384",
    "chain_hash": "322b07fcceeb83c6c64c69e17c801845d5f65bea47aaafbda0d9cced029fa5cd",
    "issuer_id": "quox.ai#journey-bundles-signer"
  },
  "ward_tip": {
    "tip_id": "5a7f5180-038a-47c8-a0ad-49f1414f7bac",
    "chain_id": "ward:quox.ai/journey-bundles",
    "tip_seq": 2,
    "tip_chain_hash": "322b07fcceeb83c6c64c69e17c801845d5f65bea47aaafbda0d9cced029fa5cd",
    "entry_count": 2,
    "created_at": "2026-11-05T02:33:10.175Z",
    "sig": "gsYPpXMtGNARpMq4DIaJ4JeAGrRXapJnVNDUQwxGz3GGN7I55ucFuOj36eJK6EA8y3P6KTSepxcAz+1VlBULAA==",
    "key_id": "81f9e622c6376149"
  },
  "public_key": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAgfnmIsY3YUmLAIlQ1fwDd4SxaPHRx8+xZhpckkk1gsI=\n-----END PUBLIC KEY-----\n",
  "verify": {
    "steps": [
      "Download /evidence/bundles/index.json and compute its SHA-256 hex digest.",
      "Confirm the digest equals both index_sha256 and ward_entry.payload_hash below.",
      "Recompute ward_entry.chain_hash per WARD SPEC.md section 4.4 (canonical-JSON hash of the entry's ten required fields, excluding chain_hash itself) and confirm it matches the value below.",
      "Verify ward_tip.sig is a valid Ed25519 signature, made by public_key, over the raw UTF-8 bytes of ward_tip.tip_chain_hash (WARD SPEC.md section 12.2).",
      "A match on every step proves index.json has not changed since this receipt was issued, and that the receipt itself was issued by the holder of public_key.",
      "Then each bundle listed in index.json is checked by its own sha256; verify-journey-bundle.mjs in the same folder runs every step offline."
    ],
    "spec": "https://quox.ai/docs/ward"
  }
}