Decode what a receipt hash points to.

A SHA-256 hash is not reversible. It is a fingerprint. You verify it by hashing the same canonical JSON and comparing the result. Our endpoint tells you whether a hash is well-formed and whether it maps to a known public receipt.

1. Check format

   Use /v1/hashes/sha256:{64_hex_chars} to validate a hash string.

2. Known receipt

   If the hash is a stored receipt root, the endpoint returns its receipt URL.

3. Independent verification

   Hash the released JSON locally with SHA-256 and compare the published root.

GET /v1/hashes/sha256:...