SkillGuard receipt verification

This service cryptographically verifies SkillGuard assessment receipts issued under the production signing domain nomos.skillguard.receipt.production.v1.

What a valid receipt means: the receipt was signed by the published SkillGuard production key and its recorded bindings are intact.

What it does not mean: it is not a certification, a legal opinion, or a guarantee that the assessed software is safe. Valid ≠ safe.

To verify a receipt, open /verify/<receipt_id>, fetch /api/v1/receipts/<receipt_id>, or POST a full signed receipt to /api/v1/verify.

Public keys: /.well-known/jwks.json · verification policy: /.well-known/skillguard-verification.json