Skip to main content
After every successful MCP tool call, the gateway writes a Receipt row to the activity_log table. The append-only Postgres trigger (F4 IRON RULE) prevents tampering: UPDATE/DELETE/TRUNCATE rejected unless the admin DSAR session var is set.

​
Canonical URL

https://glide.co/schemas/agent-banking/v1/receipt.json

​
Required fields

FieldTypeMeaning
eventTypestringtool_call, step_up_completed, policy_change, kill_switch, etc.
timestampstring (ISO 8601)UTC instant.
agentIdstringActing agent (matches grant’s act.sub).
principalUserIdstringPrincipal user (matches grant’s sub).
vaultIdstringResource vault (matches grant’s aud.vault_id).
toolNamestringWhich tool was called (e.g. x402.pay, payments.initiate).
endpoint'read' | 'write' | 'treasury'Confused-deputy isolation tier.
inputDigeststring (hex)SHA-256 of the redacted input.
outputDigeststring (hex)SHA-256 of the redacted output.
riskVerdict'pass' | 'flag' | 'block'Anomaly detector verdict.
policyVersionnumberEnvelope version at call time.
grantIdstringThe grant’s jti.
latencyMsnumberEnd-to-end tool latency.

​
Optional fields

FieldTypeWhen populated
onChainTxHashstringMoney-movement tools after F1 RPC verify settles.
onChainAmountnumber (USD cents)Same. From serverFetchChainTx, never from facilitator receipt.
stepUpSigilstringStep-up tools after the principal’s biometric approval.
redactedFieldsBitmapnumberBit-flags for fields redacted via DSAR (F4).

​
F-rule enforcement points

RuleWhat’s enforced on the Receipt
F1onChainTxHash + onChainAmount come from RPC, not facilitator.
F4The row is append-only by Postgres trigger. Admin redaction requires session var + redactedFieldsBitmap match.
F5policyVersion mismatch with current envelope blocks the row write.

​
Replay rendering

DSAR redaction does NOT delete the row. It nulls specific fields + sets redactedFieldsBitmap. The replay UI renders the row with [REDACTED] watermark over redacted fields — historical existence preserved.

​
Example

{
  "eventType": "tool_call",
  "timestamp": "2026-04-25T18:23:45.123Z",
  "agentId": "agent_01H8...",
  "principalUserId": "user_01H7...",
  "vaultId": "vault_01HA...",
  "toolName": "x402.pay",
  "endpoint": "write",
  "inputDigest": "abc123...",
  "outputDigest": "def456...",
  "riskVerdict": "pass",
  "policyVersion": 7,
  "grantId": "grant_01HC...",
  "latencyMs": 142,
  "onChainTxHash": "0xdeadbeef...",
  "onChainAmount": 50
}

​
Reading list