v1.1
Receipt v3, dual signatures live
Every receipt now binds the outcome contract, the lifecycle decision, and safe_to_claim_complete into the signed body. Relay-backed verifications carry two signatures: the relay signs what it observed in your environment, Postcept signs the evaluation, and each verifies independently.
- NewReceipt v3: contract digest, lifecycle, safe_to_claim_complete, and the signature metadata are inside the signed body, so none of it can be altered after issuance.
- Newpostcept-relay audit: score your recent refunds from your own machine. The provider key never leaves your environment.
- NewTypeScript SDK: guard(), signed-webhook verification, OpenTelemetry span attributes, and idempotency keys derived from the request body.
- SecurityReleases publish through GitHub Actions with npm and PyPI trusted publishing, signed provenance, and a CycloneDX SBOM on every release.
- SecurityEvery CI action across all repositories is pinned to an immutable commit SHA, with CodeQL and Dependabot on each repo.
v1.0
Verified outcomes, end to end
A high-risk agent action is verified against the system of record and sealed in a receipt anyone can check. The API contract is versioned and stable.
- NewSigned completion receipts (Ed25519), verifiable against a published key.
- NewOpen reference verifier published as @postcept/receipt.
- NewPublic transparency log with Merkle inclusion proofs (RFC 6962).
- NewConsistency proofs, verify the transparency log only ever appended, never rewrote history.
- APIVersioned /v1 API with scoped keys and idempotency.
v0.9
Billing and the workspace
Everything around the verification: plans, the app shell, and day-to-day operation.
- NewFree 500-action trial, then one flat monthly subscription.
- NewRedesigned app shell: left sidebar, ⌘K command palette, light and dark themes.
- NewSettings and a paginated verifications history.
- SecurityConnector credentials are validated on connect, an invalid key is rejected, not stored as “connected.”
v0.8
Payments and accounting connectors
Verification reaches the systems where refunds and credits actually settle.
- NewSquare, PayPal, and Braintree refund verification.
- NewQuickBooks refund-receipt verification.
- NewAdyen, backed by HMAC-verified refund webhooks.
v0.7
Receipts and transparency
Every result becomes independent, tamper-evident evidence, not a dashboard you have to trust.
- NewEd25519-signed receipts covering the full evidence, tenant, and live/sandbox flag.
- NewMerkle transparency log with signed tree heads.
- NewEvidence export with a signed content digest.
v0.6
The first connectors
Verification against the systems support and operations teams already run.
- NewStripe, Zendesk, Gorgias, Intercom, Shopify, HubSpot, Front, ServiceNow, Salesforce, and NetSuite.
- SecurityRead-only, least-privilege access with credentials encrypted at rest.
v0.5
The verification engine
The core: turning an agent's “done” into a checked, classified outcome.
- NewPostcondition checks, existence, amount and customer match, duplicates, end state, and policy.
- NewOutcome classification: verified, incomplete, duplicated, mismatched, or policy-failed.
- NewVerified Completion Rate, and recovery routing for failures.