fix: make receipt export bounded and evidence-honest

#7
by betterwithage - opened

W7-003: return a typed EMPTY 200 state when no receipt exists; report signed=true only after DSSE verification; reject out-of-range indexes; add five contract tests. No SDK, runtime, UI, or mobile behavior changes.

Validation: exact PR branch files match the reviewed local candidate; python -m unittest discover -s tests -v passes 5/5; python -m py_compile killinchu_receipt_export.py serve.py passes; one route binding and one helper import; no SDK/runtime/UI/mobile files changed.

Merged after exact branch validation: 5/5 contract tests and Python compilation green; scoped to W7-003 receipt export only.

betterwithage changed pull request status to merged

Sign up or log in to comment