Optionaloptions: { signal?: AbortSignal }Optionaloptions: { signal?: AbortSignal }OptionalsyncOptionaloptions: { signal?: AbortSignal }OptionalgetExact-revision read, the only way a buyer can earn a received
statement.
observed_revision_content_sha256 is defined as the binding digest
"independently recomputed from the exact consumed Core revision binding".
Copying the seller's own revision_content_sha256 out of the ledger would
hand that digest back unverified and turn buyer-attributed arrival evidence
into an echo. So the reconciler pages reporting_rows for the exact
revision, concatenates them in cursor order, and recomputes
SHA-256(JCS({reporting_revision_id,row_count,control_totals,reporting_rows}))
itself.
Optional: without it the reconciler still plans received and
content_mismatch, but marks them suppressed: 'consumption_unavailable'
and posts neither. Attesting consumption we did not perform is the one
outcome worse than staying silent.
Optionaloptions: { signal?: AbortSignal }
rc.3 consumer-status loop. Optional so existing adopters keep working: when it is absent the reconciler still plans every status and reports it on the result, it just cannot post. Supply it only against a seller that advertises
consumer_status_task.