✓ Intent receipt — signed
Full signature
demo signature — SHA-256 of the receipt JSON, not a cryptographic key signature
Dispute-ready: keep this receipt. If the charge turns out wrong, it shows exactly what you authorised and what the agent bought.