Submission · SignedReceipts badge program

Submit your implementation.

Has your product passed every mandatory conformance suite? Fill in this form and CloakAPI will review your conformance report and JWKS manually, then add your listing to /implementations/. There is no automated validation. No account, no GitHub.

Product name

As it should appear in the listing.

Vendor / organisation

Implementation language

Licence

Conformance report URL

Public, stable URL to your latest signed conformance JSON. Example: https://your-product.com/.well-known/signedreceipts-conformance.json

JWKS URL

Public-key endpoint that verifiers can use to check your receipts.

x-product-id

A short, stable, kebab-case identifier you control. Becomes part of your jti namespace.

Contact email

For follow-up questions and the result email.

Notes (optional)

Your submission is emailed to badges@cloakapi.io for manual review.

What happens after submit

The form posts to api.cloakapi.io/api/v1/signedreceipts/submit, which records your submission.
CloakAPI reviews it manually: your conformance report and JWKS are checked by hand — there is no automated fetching or validation.
To qualify, each mandatory conformance suite must show a pass verdict and the JWKS must list at least one kty=EC, crv=P-256 key.
The submission is emailed to CloakAPI at badges@cloakapi.io with the form contents.
You receive a confirmation copy at the email you provided. Approved listings are added to /implementations/ once reviewed; there is no fixed turnaround.

Anything else?

Questions about the process: badges@cloakapi.io.
Questions about the spec: see /spec/ and /governance/.