TECHNICAL ARCHITECTURE

A native Rust kernel with Ruby bindings performs signing, encoding and verification. Schema versions are explicit and are carried in the receipt itself, so an old receipt remains checkable against the schema it was issued under.

Each application is a standalone Rails deployment with its own database and its own receipt domain. There is no shared runtime data path between domains; the only shared component is the kernel and the brand system.

The verifier runs locally against the exported packet. Kernel test vectors and a verification report are attached as exhibits so that a reviewer can reproduce the result rather than accept it.