Alpha Covenant Holdings LLC — reference desk · one page for the reviewer

How to verify this receipt without us

  1. Read the receipt's own header. Every receipt prints the name or key as given, the time of the read (UTC), the sources read, and for each source whether it answered or did not answer. A source that did not answer is named; it is never counted as 'no record'. The receipt does not say whether a test is met.
  2. Recompute the hash. The receipt's SHA-256 is computed over its canonical JSON (the body as served at https://alphacovenantholdings.com/api/receipts/{receipt_id} when published, or the JSON copy delivered with the cover). Any SHA-256 tool reproduces it: `sha256sum receipt.json`. If one character changed since issue, the hash does not match.
  3. Replay the hash against the registry. https://alphacovenantholdings.com/api/receipts/verify/{sha256} answers whether that hash is in our append-only registry, with the receipt id and the time it was recorded. https://alphacovenantholdings.com/verify does the same in a browser. Neither needs an account.
  4. Check the day's digest and its timestamp. Each day's receipt hashes are listed at https://alphacovenantholdings.com/api/public-record/archive-hash/{YYYY-MM-DD}/members and digested into one SHA-256. That digest is timestamped through public OpenTimestamps calendars (https://alphacovenantholdings.com/api/public-record/archive-hash/{YYYY-MM-DD}.ots); any OpenTimestamps client verifies the proof against the Bitcoin blockchain without contacting us.
  5. Check the signature. Receipts and daily digests are signed with our Ed25519 key, published at https://alphacovenantholdings.com/.well-known/verification-info and in our DID document. The public key verifies the signature offline.
  6. Check the source yourself. Each source row names the official file read (SAM.gov Exclusions with its file date, HHS-OIG LEIE, OFAC SDN, the Consolidated Screening List, the Federal Audit Clearinghouse, state lists) with the official URL. The receipt records what the file printed on the date; the file itself is the authority.
  7. Cite the duty, not us. Duty sheets at https://alphacovenantholdings.com/api/public-record/duty-sheets map each receipt row to the rule that asks for the check (FAR 52.209-6, 2 CFR 180.300 / 200.214, 2 CFR 200.332, Compliance Supplement Part 3 §I). The workpaper cites the rule and the dated read; the conclusion is the auditor's.
This page explains how to check a record. It is not a certification, not a statement that any audit standard, DCAA requirement or compliance test is satisfied, and not legal advice. A matching hash proves the record is unchanged since issue; it does not prove identity from a name match and does not prove the official file was correct.

Algorithms, post-quantum plan and AI use: https://alphacovenantholdings.com/api/public/durability · Method: https://alphacovenantholdings.com/methodology · Known limits: https://alphacovenantholdings.com/source-availability · Corrections desk: https://alphacovenantholdings.com/corrections · Entity: Pennsylvania LLC 0016032097.