A signed receipt binding the approval to the commit
"A human approved this" is an assertion. agI3R makes it a signed artifact: an in-toto statement, signed with a DSSE envelope, whose subject is the SHA-256 of the reviewed diff and whose predicate names the approver, the gate, the policy version, and the commit that shipped.
How it works
The diff a human actually looked at is hashed when the gate is decided, so the approval is bound to a specific artifact rather than to a proposal id that could later point elsewhere.
When the change lands, the merged diff is hashed and compared to the reviewed one; the statement records the commit sha, the branch, and whether the two hashes match.
The statement is canonicalised and signed into a DSSE envelope, so it is verifiable by anyone holding the public key — including someone who does not trust the database it came from.
Every field comes from a stored fact, with no clock reads — the same inputs always produce the same statement, so a re-run can be compared rather than merely repeated.
Human control
Issued only after a human approves the proposal gate; a reviewed-vs-merged hash mismatch is recorded on the statement rather than hidden.