# title
MandateShield Terminal Execution Receipt JWT Claims v1

# description
Strict decoded claims for an ES256 compact JWT whose protected header is alg=ES256, typ=MSE+JWT and contains a retained MandateShield JWKS kid. The receipt proves the terminal transition and recorded evidence classification, not more independent provider or settlement assurance than its evidence fields state.

# $comment
Conforming validators additionally recompute the documented SHA-256 cross-field bindings and enforce timestamp chronology. JSON Schema cannot express every cryptographic or cross-field invariant.

# properties.aud.description
One exact PROCESSOR audience. JWT audience arrays are not accepted.

# properties.execution_authorized.description
A historical execution receipt never grants a new provider submission.

# properties.outcome_occurred_at.description
Provider outcome time as a whole-second Unix timestamp when supplied by the processor adapter.

# properties.transitioned_at.description
Authoritative MandateShield transition time as a whole-second Unix timestamp.

# properties.independent_verification.description
True only when MandateShield independently validated facilitator-signed, provider-API or canonical-chain evidence. Caller assertions, unresolved outcomes and ledger-only evidence are always false.

# $defs.payee.properties.destination_digest.description
SHA-256 of the exact UTF-8 destination string; validators must recompute it.