Skip to content
JouleOS Docs

Receipts (JCR-1)

A receipt is the durable, verifiable record that an operation happened and what it cost. JouleOS seals receipts in JCR-1 — the Transaction Science family’s shared format — so a JouleOS receipt is byte-compatible with every sibling verifier.

The format

Section titled “The format”

JCR-1 is canonical det-CBOR + COSE_Sign1 / EdDSA:

  • Deterministic CBOR so the same logical receipt always serializes to the same bytes (and the same content address).
  • COSE_Sign1 with an Ed25519 signature, so authenticity is a signature check, not a trust relationship.

What it carries

Section titled “What it carries”
{
  "kind":   "jouleos.<op>",
  "joules": { "measured": <µJ>, "estimated": <µJ> },
  "prov":   "AmuAgx | Rapl | Estimator",
  "class":  "W_render | W_infer | W_storage | …",
  "sig":    "ed25519:…"
}

The two-part measured + estimated cost with its provenance tag is the same honesty rule as the energy oracle: the receipt never serializes an estimate as if it were measured (Estimator can never claim to be AmuAgx).

Why it matters

Section titled “Why it matters”

Because the receipt is content-addressed and signed, re-verification is resolution-free — you can check it offline, forever, without contacting the issuer. Audit becomes a property of the log, not a separate process run against it.