32-byte SHA-256(get_hashable_part(packet)).
16-byte destination the proved packet was sent to; used to recall the verifying identity.
Optionalcallbacks: {Optionaldelivered?: (arg0: PacketReceipt) => void | Promise<void>Fired once when the PROOF validates.
Optionalfailed?: (arg0: PacketReceipt) => void | Promise<void>Fired once if the PROOF fails validation.
Proof-wait timeout timer (cleared on delivery/failure).
Transport core owning this receipt's registry (work doc #37). Set by
TransportCore.trackReceipt; routes registry removal and identity
recall through the instance-scoped caches. A receipt without an owner
is not registered anywhere and cannot verify proofs.
Cancels any pending proof-wait timeout. Idempotent.
Marks the receipt delivered, removes it from the registry, and fires the
delivered callback once. Idempotent.
Marks the receipt failed and fires the failed callback once. Does not
remove from the registry (the caller decides whether to retry or cull).
Starts the proof-wait timeout: on expiry the receipt is removed from the
registry and marked failed (firing the failed callback, which a
transport wires to markPathUnresponsive). No-op if already resolved.
Validates an inbound proof body (§6.5.1 / §6.5.5), dispatching purely on length. The verifying identity is recalled by destinationHash — the destination the original packet was addressed to — so receipt creation never needs to thread the recipient identity through.
true if the signature verifies over the
packet hash (and, for explicit proofs, the embedded hash matches).
Resolves once the receipt reaches a terminal state, yielding the final
ReceiptStatus (DELIVERED or FAILED). Awaiting this is how a
caller learns whether the receiver actually proved the packet — the
transport's startTimeout guarantees settlement even when no PROOF ever
arrives. Resolves immediately for an already-settled receipt.
Tracks a single outbound packet's delivery receipt.