EXPcalibur guide

What goes into one host-made receipt fingerprint.

One receipt fingerprint: four ingredients in orderOne receipt fingerprint: four ingredients in orderA binding identifies one accepted check for one run.HOST-OWNED INPUTS · JOIN THESE BYTES IN ORDER1 · Fixed label16 bytes2 · Run owner12-byte root3 · Check kind1 byte4 · Checked dataup to 128 bytesTAG_CERTowner_rootkind.as_u8()canonical_evidenceJoin in order; ignore unused buffer space.SHA-256Hash the joined message, then takeits first 16 bytes.Saved bindingA 16-byte fingerprint attached tothis receipt.The host makes this after the work check passes. A guest-made hash is not an accepted receipt.

The four input pieces are joined in this exact order. The host hashes them and keeps 16 bytes. This drawing shows the binding recipe, not a way for a bot to mint an accepted receipt.