Expand description
Upstream-receipt POSTer.
Forwards an action payload to a Velo-style /v1/harness/receipt
endpoint, returning the upstream receipt id (rcp_…) and signed
receipt blob.
§WHY THIS LIVES BEHIND A FLAG
The harness daemon’s contract is local-evaluation-first. The
upstream POST is opt-in (--upstream-protect <URL>) for the
integration scenario where the daemon must mint a cryptographic
receipt against a trusted authority before the action is allowed to
fire. When the upstream is unreachable / 5xx, we DO NOT fake a
success — we surface upstream_error=true to both the caller and
the audit ledger and fall back to the daemon’s local decision.