Decision Assurance Infrastructure
Summit Cognitive Documentation
Summit Cognitive builds the assurance layer for consequential, increasingly automated decisions. These docs cover the Decision Receipt API — the live service that evaluates an autonomous agent's action for admissibility and returns a cryptographically signed, independently verifiable receipt.
An agent merges a pull request, changes infrastructure, grants access, ships a deployment. Each of those is a decision. The question this platform answers is not only was it authorized? but can it be shown to have been right? — reconstructed from its evidence, checked against policy, replayed deterministically, and contested by anyone who cares to. A Decision Receipt is the record that makes that possible.
The Decision Receipt API is running now at https://decrec.summitcognitive.ai. You can sign up for a free key and produce a verifiable receipt in about five minutes — start with the Quickstart, or try the interactive playground.
Start here
5 minutes
Quickstart
Sign up, submit a claim for evaluation, and verify the receipt that comes back — all against the live API.
Concept
Decision admissibility
The idea underneath everything: why an authorized decision still owes an account, and what makes one admissible.
Reference
Decision Receipt API
Every endpoint, field, header, status code, and rate limit — the complete contract.
Understand the model
Four short concept pages explain the receipt and the evidence model behind it. Read them in order, or jump to whatever you're wiring up.
Concept · 01
Decision admissibility
Authorized is not the same as admissible. The standard a decision must meet to count as real.
Concept · 02
Anatomy of a receipt
A field-by-field walk through a real receipt — evidence, policy, replay, attestation, and the hash chain.
Concept · 03
Evidence & provenance
Typed sources, confidence, and chain of custody — what makes a receipt defensible rather than merely produced.
Concept · 04
Policy & verdicts
How a claim is judged, and what ALLOWED ESCALATED BLOCKED mean for your caller.
Build something
Guide
Verifying receipts
Check a receipt online, or verify its Ed25519 signature offline against the published public key.
Guide
GitHub integration
Turn pull-request merges into receipts — via the webhook receiver or a CI step.
Guide
Custom policies
Tune thresholds, require human approval on risky changes, and dry-run a policy before you enforce it.
Reference
Surfaces & endpoints
A map of Summit's public technical surfaces — the API, the platform health check, and TAXII threat intel.
How a receipt is made
Every receipt comes out of the same four-part evaluation. The anatomy page covers each in detail; in brief:
- Evidence. You submit a claim with one or more typed, provenanced sources — CI results, code review, test output, human approval, model traces, and more.
- Policy. The claim is judged against a policy — minimum sources, distinct source types, confidence, provenance, replay, and risk scope — producing a verdict of ALLOWED, ESCALATED, or BLOCKED.
- Replay. The decision is checked for deterministic reproducibility; a non-deterministic result is recorded as such rather than quietly passed.
- Attestation. The result is sealed with an Ed25519 signature and chained to the previous receipt, so the record is tamper-evident and independently verifiable.
The Decision Receipt API is the developer-facing edge of a larger argument about accountable machine-mediated authority. The book Admissible Reality makes the long case; the Warrant podcast and Dispatches essays work it out in public; Research holds the papers.