Receipts are mandatory for protected actions. They create an append-only audit trail. If receipts cannot be written, the action fails (fail-closed).