Evidence for governed software decisions

Decision Receipt records policy evaluation results and evidence for software-change decisions. The production ledger currently contains PR-derived records; a receipt records an evaluation and does not itself prove that a merge, deployment, or autonomous execution occurred.

Get API Key — Free API Reference Deploy Guide
3598
Production records
3588
Accepted
10
Blocked
0
Escalated

Production-scoped ledger snapshot measured 2026-08-14T12:46:46.190Z. Counts are receipt records, not autonomous executions, merges, or deployments.

Public audit: degraded. Chain continuity: valid; artifact integrity: degraded; 7 reported error(s). Checked 2026-08-14T12:46:46.188Z. Historical signature verification is outside this public audit because the historical signing-key registry is unavailable.

Software-change decisions need durable evidence

Automated and human-associated repository events can create provenance gaps when evaluation inputs, policy results, and identifiers are not retained together. Decision Receipt creates a reviewable record; enforcement remains the responsibility of the integrating system.

Cognition (Devin) optimizes for autonomous capability.
Summit optimizes for admissible authority.
Those are not the same market.

Three steps to admissibility

For submitted evaluations, the service records supplied evidence, applies configured policy checks, and returns a receipt disposition.

01
Submit Evidence
Submit a claim and supporting evidence such as CI results or code review metadata. Provenance fields reflect what the caller supplied or an integration captured.
02
Evaluate Policy
The configured policy checks the submitted record and produces an evaluation result. Which checks run depends on the endpoint and policy version.
03
Receive Receipt
The response records evidence hashes, policy results, identifiers, and an ACCEPTED, BLOCKED, or ESCALATED disposition. Integrators decide how that result affects their workflow.

Where Decision Receipt sits

Above, beside, underneath, or between autonomous agents and production systems.

GitHub PR Records
Webhook integrations can derive receipt records from pull-request events. The current public production ledger is primarily this kind of record.
CI/CD Integration
A workflow can consume an evaluation result and retain the receipt beside test results. Blocking behavior must be configured and verified in that workflow.
Orchestration Records
Callers can submit evidence about handoffs or tool activity. A receipt reflects the submitted evaluation, not independent observation of every action.
Runtime Integration
Applications may consult a receipt disposition before an operation. This site does not claim that current production records enforce infrastructure or deployment changes.
Audit Review
The public audit checks ledger-chain continuity and canonical receipt-content hashes. Historical signature verification is not included in that audit.
Regulated Environments
Defense, finance, healthcare, and critical infrastructure. NIST-aligned policy rules. Sovereign deployment ready. Air-gapped fixture mode.

Try a synthetic, non-production evaluation

The public demo endpoint accepts fictional sample input and returns a non-production demo receipt. It does not authorize, merge, deploy, or attest that the described action occurred.

curl -X POST https://decrec.summitcognitive.ai/v1/demo/evaluate \
  -H "Content-Type: application/json" \
  -d '{
    "claim_id": "my-first-receipt",
    "entity": "my-org/my-repo",
    "claim": "AI agent requests merge authority for PR #42",
    "sources": [
      {"id": "ci", "type": "ci", "uri": "https://ci/run/1",
       "confidence": 0.9, "content": "All tests pass"},
      {"id": "review", "type": "code_review", "uri": "https://pr/1",
       "confidence": 0.85, "content": "Approved by maintainer"}
    ]
  }'

The response is explicitly marked environment: nonproduction and demo: true. Production evaluation requires authentication. See full API docs →

How enforcement works

A bot-authored PR triggers a deterministic pipeline — every step is recorded, signed, and independently verifiable.

01
PR Opened
Agent opens a pull request on GitHub
02
Webhook Fires
GitHub sends the event to Decision Receipt
03
Evidence Collected
CI status, review state, labels, PR metadata gathered as sources
04
9 Rules Evaluated
Deny-by-default policy engine runs all 9 rules
05
Receipt Signed
Ed25519 signature + hash chain entry
06
Verdict Posted
GitHub status check + PR comment with full policy breakdown
✕ Blocked Agent sees specific rule failures. Improves evidence. Resubmits.
✓ Allowed PR is authorized to merge. Receipt is independently verifiable.

Start free. Scale when you're ready.

Try the API, break it, watch it prove out. Then get us in the room.

Free
$0
per month
→ 100 receipts / month
→ Full API access
→ Signed receipts
→ Replay verification
→ Community support
Get API Key
Pilot
$99
per month
→ 10,000 receipts / month
→ GitHub webhook integration
→ Trust Pack exports
→ Custom policy configs
→ Priority support
→ Receipt ledger dashboard
Enterprise
Custom
annual contract
→ Unlimited receipts
→ Sovereign deployment
→ Air-gapped mode
→ Custom policy engine
→ NIST / CMMC alignment
→ Dedicated support + SLA
Contact Us

What makes this different

Most AI governance tools are retrospective dashboards. Decision Receipt is an enforcement primitive.

Not observability
We don't watch AI act and report afterward. Every action is evaluated before it receives authority. No receipt, no production.
Not another model
We don't compete with Devin, Codex, or Copilot. We verify whether their output is admissible. The more autonomous they get, the more we matter.
Not compliance theater
Receipts are cryptographically signed, chain-linked, and independently verifiable. Replay the decision path. Audit the evidence. Revoke if needed.
30-second setup
One webhook URL. First receipt in under a minute. No agents to install, no config files to manage, no infrastructure to provision.
Protocol, not product
Decision Receipt is a verifiable standard. Receipts travel. Third parties can verify. The spec is public. We're building infrastructure, not a dashboard.
Real production data
Not a demo. 3598 receipts issued from real GitHub PRs. 100% acceptance rate. Agents tracked: dependabot, Devin, Codex, Jules, human.

Get your API key

Enter your email to receive an API key instantly. No credit card required.

Recent receipts

repo badge sparkline Summit-Cognitive/summit — 14-day acceptance trend
ReceiptVerdictAgentRepositoryPR
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37776
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37775
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37775
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37775
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37774
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37774
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37774
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37773
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37773
rcpt_gh-Summit-Cognitive-sum... ALLOWED BrianCLong Summit-Cognitive/summit #37772

View full ledger (JSON) →  |  Timeline →

Repository and actor inventories are available to authenticated operational reviewers.