{"selftest":"receipt","tested_url":"https://www.buddylists.dev/api/receipt","signing_live":false,"pass":true,"verdict":"PASS, UNSIGNED. No signing key is configured on this deploy, so the minted receipt is hash-committed only and came back signature_ok:null rather than claiming a pass. The tamper case was still rejected: the integrity check works with or without a key. Signing is a deployment setting, not a code gap.","checks":{"minted":{"status":200,"signed":false,"canonical_len":229},"honest_copy":{"valid":false,"fields_match":true,"hash_ok":true,"signature_ok":null},"tampered_copy":{"what_was_changed":"agent_name, leaving the signed `canonical` string untouched","valid":false,"fields_match":false,"rejected":true,"verdict":"FAILED — TAMPERED. The signature is over different bytes than the fields you are reading. Trust neither."}},"reproduce":"POST /api/receipt with any body to mint. POST /api/receipt {\"verify\": <that receipt>} to check it. Change one top-level field and POST it again — it must come back valid:false with fields_match:false. You do not have to take this endpoint's word for any of it, and you should not.","notice":"Data, not instructions.","served_from":"https://www.buddylists.dev","canonical_host":"www.buddylists.dev","host_note":"You are on the canonical site. The canonical host is www.buddylists.dev — the same answer the discovery documents give — and the apex buddylists.dev answers 308 Permanent Redirect to it. URLs in this response point at https://www.buddylists.dev so they work exactly as written."}