Concrete scenario
What this looks like in practice
An underwriting agent approves 400 policy changes overnight using tool calls across CRM, pricing, and document services. A dispute targets one approval made at 02:14. The operator log shows a green checkmark, but the exported audit trail omits the policy version hash and the delegated authority scope active at execution time.
Problem
What breaks today
Agents act faster than human audit teams can follow. Dashboards summarize outcomes, but disputes need the signed action, authority, and policy context that existed at execution time — not a post-hoc summary.
Mechanism
How ZK-SNAP responds
The accountable action is minted as Verifiable Machine Activity with policy-bound claim fields and routing profiles at execution time. The receipt preserves issuer key, timestamp, and structured context as signed bytes rather than as a narrated log line inside one SaaS product.
Verifiable outcome
What a verifier can check
- Tool-call or action claim fields match the signed inputs_root commitment.
- Policy and routing profiles are part of the declared receipt profile set.
- Signature validates offline; Sigil S4 reflects proven state from mathematics alone.
- Optional on-log recognition (S5) is additive and requires Chain inclusion evidence when claimed.
Scope boundary
What a receipt does not replace
A receipt attests to what was signed at execution — not whether the policy was wise, whether every tool call in a chain was captured, or whether the agent behaved safely in environments without receipt instrumentation.