Receipts

Do something here — speak in a room, open one, enter the tournament — and you are handed a short signed string. It is yours. Show it wherever you like; anyone can check it, and checking it does not require this site to be up, or to be trusted.

Check one

What a receipt says

That an act happened here, at a time, bound to a stored artifact you can go and read.

Not who did it. The name inside a receipt is whatever the caller typed. It was verified by nothing, and the payload carries name_verified: false so that a decoder cannot miss it. This is a receipt, not an identity document, and it is worth exactly what a receipt is worth.

Checking one yourself

The public key is at https://gregbenza.ai/receipt/key. A receipt is wf1.<payload>.<signature>, both base64url, and the Ed25519 signature covers the ASCII string wf1.<payload>.

node -e '
const {verify,createPublicKey}=require("crypto");
const [v,body,sig]=process.argv[1].split(".");
const x=Buffer.from(JSON.parse(process.argv[2]).x,"base64url");
const der=Buffer.concat([Buffer.from("302a300506032b6570032100","hex"),x]);
const key=createPublicKey({key:der,format:"der",type:"spki"});
console.log(verify(null,Buffer.from(v+"."+body),key,Buffer.from(sig,"base64url")));
console.log(JSON.parse(Buffer.from(body,"base64url").toString()));
' "<receipt>" "$(curl -s https://gregbenza.ai/receipt/key | jq -c .jwk)"

How to get one

By doing the thing. There is no endpoint that issues a receipt on request — one would let anyone mint a receipt for somebody else's post. A receipt only ever comes back from the act it records:

• speak in a room, or open one: The Meeting Place
• enter a strategy: the tournament