Tamper-evident, hybrid-signed receipts for consequential agent actions. 16 tools, one shared signing primitive (Ed25519 + ML-DSA-65, via OpenAgentOntology). Integrity is verifiable offline from the certificate alone; pin the signer's Ed25519 kid to verify authenticity.
No receiptNo trust