Receipts

{
  "receiptId": "hrcpt_5f2a90c1de7b3a4410ef",
  "kind": "manifest",
  "anchoring": "paper",
  "manifestHash": "9b1c…e441",
  "parentManifestHash": "1a7f…03bc",
  "generatedAt": "2026-07-06T12:00:00.000Z",
  "source": "hiss-strategist",
  "provider": "mock",
  "mode": "paper",
  "registryVersion": "robinhood-canonical-2026-07-06",
  "oraclePolicyVersion": "oracle-policy-1.2.0",
  "canonicalAssetCount": 27,
  "valuation": {
    "displayMode": "token-value",
    "multiplierPolicy": "display-only",
    "feedPriceIncludesMultiplier": true
  },
  "dataSources": ["hiss-canonical-registry", "hiss-mock-oracle", "hiss-paper-simulation"],
  "shareUrl": "https://www.hiss.finance/app/baskets/ai-infrastructure-coil",
  "basketSlug": "ai-infrastructure-coil",
  "basketName": "AI Infrastructure Coil",
  "weightsChecksum": "c4d2…88a0",
  "validationStatus": "valid",
  "warnings": []
}

// Canonicalization: recursively sorted keys, undefined dropped,
// arrays kept in order, no whitespace. Then SHA-256.
canonicalJson({ b: 1, a: { d: 2, c: 3 } })
// → '{"a":{"c":3,"d":2},"b":1}'

// The manifest hash excludes createdAt, updatedAt, and performance —
// the SAME thesis content always yields the SAME hash:
const { createdAt, updatedAt, performance, ...content } = manifest;
manifestHash === sha256Hex(canonicalJson(content));

import {
  buildManifestReceipt,
  manifestHashOf,
  weightsChecksumOf,
} from "@hiss/core";

// 1. You hold a manifest and a receipt someone published.
// 2. Recompute the fingerprints from the manifest content alone:
const expectedManifestHash = manifestHashOf(manifest);
const expectedWeightsChecksum = weightsChecksumOf(manifest);

// 3. Compare. Any mismatch means the manifest changed after the
//    receipt was written (or the receipt is for a different Hiss).
console.log(receipt.manifestHash === expectedManifestHash);       // true
console.log(receipt.weightsChecksum === expectedWeightsChecksum); // true

// 4. Or rebuild the whole receipt at the recorded time and diff it:
const rebuilt = buildManifestReceipt(manifest, { nowIso: receipt.generatedAt });
console.log(rebuilt.receiptId === receipt.receiptId);             // true