{"name":"XGuard ProofRail","version":"1.0.0","role":"signed execution proof layer for XGuard Secretless Egress","proof_header":"x-xguard-proof","key_id_header":"x-xguard-proof-kid","algorithm":"ES256","public_key":"https://api.xguardgate.com/.well-known/xguard-proof-key.json","verify":"https://api.xguardgate.com/v1/proofs/verify","generated_when":"an authorized Secretless Egress attempt has committed billing and reaches an upstream response, or returns a post-billing ambiguous network outcome","signed_fields":["proof_id","capability_id","target_origin","target_path","method","outcome","upstream_status","billed_credits","issued_at"],"security_boundary":"The proof does not contain the reusable upstream credential, the XGuard Usage Credit key, request headers, query parameters or request body."}