Sphere wins 2026 Global Recognition Award
Sphere Partners
Signed Decision Receipts: Letting Anyone Verify an AI Outcome Offline

Signed Decision Receipts: Letting Anyone Verify an AI Outcome Offline

A signed decision receipt is a portable, cryptographically verifiable record of what an AI decided and why. Anyone holding it can check it against a published key — offline, with no access to your systems and no need to trust you.

2 min read
In this article

When an AI makes a decision that affects someone, they — or a regulator — may need to verify what happened. A signed decision receipt makes that possible without trust: a compact, portable record of the decision and its basis, signed so that anyone can confirm it's genuine and unaltered, on their own, offline.

What a decision receipt contains

A receipt is a small, self-contained record of a single AI outcome: what was decided, the inputs it was based on, which controls applied, and when. It's the difference between 'trust us, the system handled it correctly' and 'here is the artifact, check it yourself.' The receipt travels with the decision rather than staying locked inside your infrastructure.

Why "signed" changes everything

A record you produce is only as trustworthy as you are — the recipient has to assume you didn't edit it. A signed record removes that assumption. The receipt is cryptographically signed, and the signing key is published at a well-known location. Anyone can take the receipt, fetch the public key, and verify the signature themselves. If a single character were altered, the signature would fail. Its authenticity is mathematical, not reputational.

The essential bit

A receipt lets a third party verify an AI outcome without trusting the vendor or taking the producing system's word for it — the proof is in the signature, not in anyone's word.

Verifying offline, with no access to your systems

The strongest property of a signed receipt is that verification needs nothing from you. The recipient doesn't log into your platform, doesn't query your database, doesn't file a request and wait. They hold the receipt and the published key, and they check. This is what makes a receipt suitable for the moments that matter — a dispute, an audit, a regulator's inquiry — where 'you'll have to take our word for it' is exactly the wrong answer.

Receipts and the ledger

Receipts and the hash-chained ledger are two faces of the same guarantee. The ledger is the complete, internal, tamper-evident record of everything that happened; a receipt is a portable, individually verifiable slice of it for a single decision. The ledger answers 'show me everything, in order, unaltered.' The receipt answers 'prove this one outcome, to someone who has no access to the rest.'

Where receipts matter most

In each case the receipt does the same job: it moves trust from the institution to the mathematics.

Frequently asked questions

A log entry lives in your system and requires access and trust to inspect. A receipt is portable and self-verifying — it travels with the decision and can be checked by anyone against a published key, offline. One is internal record-keeping; the other is external, trust-free proof.
Not without detection. It's cryptographically signed, so any change breaks the signature, and the signature is verified against a public key you publish. Producing a valid receipt requires the private signing key, which stays inside your boundary.
It's designed to prove an outcome without over-disclosing — sensitive inputs can be represented as redacted or referenced rather than included in full. The goal is verifiability of the decision, not publication of the underlying personal data.
The ledger is the complete, tamper-evident internal record; a receipt is a portable, individually verifiable slice of it for a single decision. They share the same signing foundation and serve internal audit and external proof respectively.

Move trust to the math. See how signed decision receipts let a user, an auditor, or a regulator verify an AI outcome offline — against a published key, with no access to your systems. Book a walkthrough.

We'd love to hear from you!

Please provide your contact details, and our team will get back to you promptly.