Receipt Emission (ARIA Shield)

• Shield emits signed, hash‑chained receipts per route
• On permit: hold budgets; settle to actuals post‑call
• On exceed: return 402 with call_id; link the policy snapshot

See also: services/receipts/quickstart.md