Local-first blinded attestation primitive. Proves an AI agent parsed a confidential network operation profile or procurement solicitation locally, identified mandatory policy obligations and missing artifacts, and obtained a cryptographic human credential signature — with no plaintext network egress observed under enforced CSP.
Human approval is a signed credential event bound to document_commitment, obligations_merkle_root,
missing_artifacts_merkle_root, mandate_policy_hash, nonce, and expires_at_utc.
Verify any copied receipt offline via:
python ops/tools/zkcp_blind_attestor.py verify receipt.json