Consent Receipt Ledger
A tamper-evident consent ledger that records every grant and withdrawal as a content-hashed receipt — with carrier sealing for external verification — without being a CMP or blocking production processing.
The problem
/ 01When you need an auditable history of consent changes, you need a ledger that records each grant and withdrawal by subject reference, returns a content-hashed receipt, supports chronological lookup by subject or purpose, and optionally embeds the receipt into a carrier image — while being honest that this is a demo-grade ledger, not a consent management platform.
What it does
/ 05Records a consent receipt by subjectRef (a reference hash, not a real identity) with purpose, action (grant/withdraw), optional channel/actor/evidenceRef/meta.
Returns a receiptId, contentHash (SHA-256 over the receipt payload), and recordedAt timestamp.
Queries receipts by subjectRef OR purpose (at least one filter required), newest-first.
Fetches a full receipt record by receiptId and lists all receipts newest-first.
Optionally seals a receipt into a carrier PNG via imageBase64 + dimensions + optional key binding.
Private pilot adds
/ pilotPilot-ready: durable consent-receipt store available under NDA with a /v1 API for private pilots. The public studio card runs against /demo (ephemeral, grant/withdraw + sealing only).
Who it’s for
/ 03- Privacy engineers maintaining consent audit trails
- Compliance teams producing consent evidence
- Product auditors verifying grant/withdraw history
In context
/ 01Complements Consent Receipt Registry (consent issuance), Subject Access Export (data subject rights pipeline), and Stego Audit Carrier (carrier sealing).