# description
A portable execution record binding the capability version, quote, request commitment, result commitment and payment state. Evidence of a transaction state — not proof that the buyer liked the output. Verifiable without forcing private inputs or outputs into a public database: commitments are salted-or-plain sha256 hashes; raw artifacts are referenced only where the privacy policy allows.

# properties.quote.description
The exact, expiring terms the buyer accepted. Required except when the invocation was rejected before terms were issued.

# properties.result.properties.status.description
Terminal states: rejected, succeeded, failed, cancelled. Non-terminal: quoted, authorized, running, unknown (unknown must resolve — never silently retry or double charge).

# properties.payment.properties.evidence_ref.description
Rail-specific settlement evidence: processor id, tx hash, ledger entry, entitlement reference.

# properties.evidence.description
Inspectable observations that bind the promise, payment and outcome. Open-ended by design.

# properties.operator.properties.signature.description
Detached signature over the canonical receipt body. Optional until gateway keys exist; required for federation.