A Arena

Reference

Portable proof format.

A portable proof is an immutable envelope around semantic evidence, its canonical payload hash, an Ed25519 attestation, and a key-discovery trust root.

Envelope

{
  "kind": "arena.portable_hosted_audit_proof",
  "version": 1,
  "auditId": "…",
  "approvalExpiresAt": "…",
  "retentionUntil": "…",
  "evidence": { "kind": "arena.hosted_boundary_evidence", "version": 2 },
  "payloadHash": "…",
  "attestation": { "algorithm": "Ed25519", "keyId": "…", "signature": "…" },
  "trustRoot": "https://…/.well-known/arena-signing-keys.json"
}

Invocation receipt

Evidence version 2 includes the callback channel, page origin, session commitment, tool-definition hash, argument hash, single-use lease commitment, request hash, result hash, backend trace root, and invocation/settlement timestamps.

Verification order

  1. Reject unknown or missing fields.
  2. Recompute exact-intent and callback commitments.
  3. Verify boundary event hashes, chronology, coverage, and settlement.
  4. Fetch the key-ID-addressed trust set.
  5. Verify the Ed25519 signature over canonical evidence.
  6. Apply the required verdict policy.

Machine schema: arena-proof-v1.schema.json.