Signed receipts

After each reviewed action, EdgeORE writes a receipt to its on-device operation ledger and signs it with a key held in Android Keystore.

• The receipt checker (tools/receipt-checker) verifies the integrity of signed receipt contents.
• The device signature shows that this install wrote the record. The wallet's Ed25519 transaction signature is verified separately.
• An export that hides the device key verifies only against keys pinned on the same install.
• Receipts leave the phone only if you export or share one yourself.