Implementations
Known implementations that pass the SignedReceipt conformance test suite.
Reference implementations
Maintained by the SignedReceipt organisation. Apache-2.0 licence.
Rust crate
MSRV 1.75. Features: std, fips (aws-lc-rs), wasm. Published to crates.io with SLSA 3 provenance.
TypeScript package
Node 20+. Browser ESM build with SubtleCrypto. Zero runtime dependencies. Published to npm with provenance.
github.com/signedreceipt/reference-typescript →Verifier CLI
Binary signedreceipt. Commands: verify, verify-chain, show, canonicalise. Available via crates.io, Homebrew, Scoop, winget.
Product implementations
| Product | Vendor | Language | Licence | Status | Badge |
|---|---|---|---|---|---|
| CloakAPI Desktop | CloakAPI | Rust + Svelte | Proprietary | v1 compatible | SignedReceipt v1 |
| CloakAPI Gateway | CloakAPI | PHP (Laravel) | Proprietary | v1 compatible | SignedReceipt v1 |
| CloakAPI Browser Extension | CloakAPI | TypeScript | Proprietary | v1 compatible | SignedReceipt v1 |
| CloakAPI Browser Portal | CloakAPI | TypeScript | Proprietary | v1 compatible | SignedReceipt v1 |
Submit your implementation
Is your product compatible? Open a pull request against signedreceipt/badges with your CI results and signed conformance report. See the badge program for acceptance criteria.