Every /admit decision emits a signed receipt. The entropy class is derived from evidence, never self-declared — so a receipt cannot lie about being quantum. Paste one below and this page recomputes it in your browser: it re-derives the nonce from the job's own measured bitstrings and reclassifies the entropy itself. Nothing here is taken on our word.
Paste a quantum_receipt envelope — or load a real sample. Envelopes are emitted by the proof system today; live /admit attachment is the release gate.
A hardware receipt embeds the quantum job's measured bitstrings. The entropy nonce is their hash — so the nonce is the evidence, not a claim about it.
A receipt says quantum_hardware only if evidence reproduces its nonce. No matching evidence → it reclassifies classical_fallback, whatever the label claimed.
Verifying a receipt proves what was decided and how — it never authorizes anything. authority_effect = 0, always. The decision was a human's boundary, made elsewhere.