What is a CROWN receipt?

A CROWN receipt is the record the Crux Daemon mints for every state mutation. Each receipt carries:

• Who: the passport that acted, and its trust tier at the time.
• What: the verb and content hashes of what changed.
• Under what authority: the grants in force for the call.
• Where in history: its position on the BLAKE3 append-only spine, committing to the receipt before it.

Receipts are signed with Ed25519 and verify offline. Refused actions produce receipts too: a signed RefusalReceipt with a reason code, so "policy said no" is as provable as "the agent did X".

In practice receipts are the debugging surface as much as the compliance surface. When something goes wrong you replay the signed trail rather than reconstructing events from logs, and when a bill or an auditor arrives, the same trail answers both.