---
type: email
from: Andrew Glaz <notifications@github.com>
subject: [openai/openai-agents-python] Feature: Verifiable action receipts for

 agent tool calls (AAR) (Issue #2643)
received: 2026-03-09 23:17:26
date_header: Mon, 09 Mar 2026 11:06:39 -0700
priority: normal
status: awaiting_approval
uid: 45220
---

## Email Content

**From:** Andrew Glaz <notifications@github.com>
**Subject:** [openai/openai-agents-python] Feature: Verifiable action receipts for

 agent tool calls (AAR) (Issue #2643)
**Date:** Mon, 09 Mar 2026 11:06:39 -0700

### Body (preview)

Cyberweasel777 created an issue (openai/openai-agents-python#2643)



## Problem



The Agents SDK executes tools via `@function_tool` decorators and handoffs between agents. Each execution produces results but no cryptographic evidence of:

- Which agent executed which tool

- What inputs the tool received

- What output the tool produced

- Whether outputs were modified between agent handoffs



For production deployments — especially agent commerce (payments, transactions) and enterprise compliance — verifiable action provenance is essential.



## Proposal



Wrap tool execution with [Agent Action Receipts (AAR)](https://github.com/Cyberweasel777/agent-action-receipt-spec):



```python

from agents import Agent, Runner, function_tool

from botindex_aar import create_receipt, generate_keypair



keys = generate_keypair()



@function_tool

def get_weather(city: str) -> str:

    result = fetch_weather(city)

    receipt = create_receipt(

        agent_id='weather-agent/v1',

        action={'tool': 'get_weather', 'city_hash': sha256(city)},

        output_hash=sha256(result),

        signing_key=keys.secret_key,

    )

    # receipt is independently verifiable

    return result

```



### For handoffs specifically



Each agent-to-agent handoff produces a receipt, creating a verifiable chain of custody across the agent graph. If Agent A hands off to Agent B, both sign receipts — proving the delegation and execution.



### Ecosystem alignment



- [Mastercard Verifiable Intent](https://www.mastercard.com/us/en/news-and-trends/stories/2026/verifiable-intent.html) (announced March 5, 2026) — same trust architecture

- [x402 (Coinbase)](https://github.com/coinbase/x402) — payment verification for agent transactions



### SDK



TypeScript: `npm install botindex-aar` (live, MIT, single dependency)

Python: in development



- Spec: https://github.com/Cyberweasel777/agent-action-receipt-spec

- Landing: https://aar.botindex.dev



-- 

Reply to this email dire

---

## Suggested Actions
- [ ] Reply
- [ ] Archive
- [ ] Escalate
