{"lexicon":1,"id":"money.atmosphere.payment.proof","defs":{"main":{"type":"record","key":"any","description":"EXPERIMENTAL DRAFT — not published. An immutable attestation in its authenticated author's own repository. Broker-role keys are exact canonical 13-character AT Protocol TIDs. A broker proof referenced by an identified receipt is written before that receipt and paired atomically with settled genesis in money.atmosphere.payment.lifecycle at the same key. Only explicit proofs whose URI authority and authenticated author equal the committed settlement authority are broker/lifecycle candidates; trust in that broker remains an explicit verifier policy. The distinct recipient's optional creator acknowledgment instead uses the full canonical 59-character commitment CID as its key and the exact minimal {$type,cid,profile} body. Its target is computed from the committed recipient and CID, never reserved or appended in the immutable receipt, and it may be published later without blocking the payer. It has no lifecycle chain and cannot substitute for required broker evidence. The common record key constraint does not admit arbitrary keys: COMMITMENT_PROFILE.md defines the role-specific semantic grammars, historical/standing policies and all derived-key bounds. If recipient and broker are the same DID, generic readers share the broker role rather than invent a second witness. A proof is never updated or assigned status. Repository authorship establishes an attester's assertion or creator acknowledgment, not independent human review or trustless proof of money movement.","record":{"type":"object","required":["cid","profile"],"properties":{"cid":{"type":"string","format":"cid","description":"Canonical payment commitment CID: lowercase unpadded base32 CIDv1, DAG-CBOR codec 0x71, SHA-256 with a 32-byte digest. This is the inner commitment, never the proof's outer repository-record CID. money-atmosphere-v1 commits the exact identified receipt minus only proofs plus $commit={profile,author}, with the authenticated payer author. money-atmosphere-guest-v1 commits the exact closed private guest facts plus the same metadata with broker B as statement author; it creates no payer record. The profile defines and validates the complete preimage before hashing. A computed creator acknowledgment binds those same facts and author, not a new settlement or subsequent claimant."},"profile":{"type":"string","maxLength":64,"knownValues":["money-atmosphere-v1","money-atmosphere-guest-v1"],"description":"Commitment-profile token identifying the exact byte-level commitment algorithm. Also committed inside the `$commit` metadata (domain separation: the same fields under a different profile produce a different CID). Verifiers MUST fail closed on unknown profiles."}}}}}}