MailioReceipt v1

Cryptographically verifiable, append-only event records for human-agent and agent-agent workflows.

Installation

pip install mailio-receipt

Quick Start

from cryptography.hazmat.primitives.asymmetric import ec
from cryptography.hazmat.backends import default_backend

from mailio_receipt import (
    create_receipt,
    create_event,
    Actors,
    Intent,
    IntentKind,
)

# Generate a signing key (P-256 or Ed25519)
private_key = ec.generate_private_key(ec.SECP256R1(), default_backend())

# Create an event
event = create_event(
    flow_id="660f9400-f39c-51e5-b827-557766551111",
    actors=Actors(
        issuer="did:web:agent.example.com",
        subject="did:web:user.example.com",
    ),
    intent=Intent(
        kind=IntentKind.ACTION_PLANNED,
        action="invoice.send",
        category="financial",
        scope={"invoiceId": "INV-2026-001"},
    ),
)

# Sign and create receipt
receipt = create_receipt(
    event=event,
    private_key=private_key,
    signer_did="did:web:agent.example.com",
)

print(f"Receipt created: {receipt.digest[:16]}...")

License

MIT

Metadata

Release files for mailio-receipt 0.0.23

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for mailio-receipt 0.0.23
File	Size	Uploaded	Provenance
mailio_receipt-0.0.23.tar.gz	93.9 kB	Feb 16, 2026	With provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for mailio-receipt 0.0.23
File	Interpreter	ABI	Platform	Reset
mailio_receipt-0.0.23-py3-none-any.whl 21.6 kB Feb 16, 2026 With provenance	Python 3	none	any	Details

Total release size: 115.5 kB

Release files / mailio_receipt-0.0.23.tar.gz

Download URL	mailio_receipt-0.0.23.tar.gz
Size	93.9 kB
Tags	Source
SHA-256 checksum How to use checksums	`2bf837d384971ddad1219fff0e8eb73871c1a34161ef279c82e29b11dc948606`
BLAKE2b-256 checksum How to use checksums	`bbc7867836ede0ef3a5af5b73bf4d2d610ecb885ad01c80d95e19900f5f6c6bb`
Upload date	Feb 16, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.13.7`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/mailio/mailio-receipts-python
Publishing commit: github.com/mailio/mailio-receipts-python/tree/6a3b46f6f770fdc70c9a44eb15102c45773175a2

Workflow

Publishing configuration: github.com/mailio/mailio-receipts-python/blob/6a3b46f6f770fdc70c9a44eb15102c45773175a2/.github/workflows/publish-pypi.yml
Publishing logs: github.com/mailio/mailio-receipts-python/actions/runs/22078439772/attempts/1

Artifact

Subject: mailio_receipt-0.0.23.tar.gz
SHA-256 checksum: 2bf837d384971ddad1219fff0e8eb73871c1a34161ef279c82e29b11dc948606 Verifying attestations

Release files / mailio_receipt-0.0.23-py3-none-any.whl

Download URL	mailio_receipt-0.0.23-py3-none-any.whl
Size	21.6 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`6028d65a1ab7d248222e11d5209a617c4f1f3644ddd7c2206f2f778d0202232a`
BLAKE2b-256 checksum How to use checksums	`cfa605da18624bd16692c98cc6b6ef51eaf144945d237a78eb95f6a504bdff63`
Upload date	Feb 16, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.13.7`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/mailio/mailio-receipts-python
Publishing commit: github.com/mailio/mailio-receipts-python/tree/6a3b46f6f770fdc70c9a44eb15102c45773175a2

Workflow

Publishing configuration: github.com/mailio/mailio-receipts-python/blob/6a3b46f6f770fdc70c9a44eb15102c45773175a2/.github/workflows/publish-pypi.yml
Publishing logs: github.com/mailio/mailio-receipts-python/actions/runs/22078439772/attempts/1

Artifact

Subject: mailio_receipt-0.0.23-py3-none-any.whl
SHA-256 checksum: 6028d65a1ab7d248222e11d5209a617c4f1f3644ddd7c2206f2f778d0202232a Verifying attestations

Security for mailio-receipt 0.0.23

Report project as malware

Provenance

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Attestation for mailio_receipt-0.0.23.tar.gz

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/mailio/mailio-receipts-python
Publishing commit: github.com/mailio/mailio-receipts-python/tree/6a3b46f6f770fdc70c9a44eb15102c45773175a2

Workflow

Publishing configuration: github.com/mailio/mailio-receipts-python/blob/6a3b46f6f770fdc70c9a44eb15102c45773175a2/.github/workflows/publish-pypi.yml
Publishing logs: github.com/mailio/mailio-receipts-python/actions/runs/22078439772/attempts/1

Artifact

Subject: mailio_receipt-0.0.23.tar.gz
SHA-256 checksum: 2bf837d384971ddad1219fff0e8eb73871c1a34161ef279c82e29b11dc948606 Verifying attestations

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.