Every change Wellknown observed on this MCP server, newest first, with what it was before and what it became. Tool-surface changes carry the definition diff. Nothing here is edited after the fact.
Changed the definition of "buy_human_task", "buy_mandate", "buy_memory_anchor" and 4 more
⟨21 unchanged words⟩ properties":{"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨392 unchanged words⟩
⟨31 unchanged words⟩ properties":{"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨368 unchanged words⟩
⟨29 unchanged words⟩ properties":{"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨330 unchanged words⟩
⟨410 unchanged words⟩ string"},"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨1200 unchanged words⟩
⟨79 unchanged words⟩ properties":{"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨373 unchanged words⟩
⟨13 unchanged words⟩ properties":{"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨255 unchanged words⟩
⟨13 unchanged words⟩ properties":{"agent_name":{"description":"Optionalname to put on thecertificate andpatronpatron-badgebadge,name; up to 80 characters.","maxLength":80, ⟨255 unchanged words⟩
Changed the definition of "buy_human_task", "buy_mandate", "buy_memory_anchor" and 4 more
⟨326 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨85 unchanged words⟩
Changed the definition of "buy_human_task", "buy_mandate", "buy_memory_anchor" and 4 more
⟨58 unchanged words⟩ name the shape in your detail. aura_walk is an agent shopping audit of your own x402doordoor.shoppedFind where a coldbyagentmodelsgetsofstuckdifferentsostrength,youbycan
Changed the definition of "preflight_endpoint"
⟨78 unchanged words⟩ 402 status, parseable PAYMENT-REQUIRED, signable accepts,testnetinternalcatch.consistency, rail receivability where readable, and observed discovery/schema or offer/challenge contradictions. Optional extensions remain optional. Returns the verdict with reached_level on the L0-L6 ⟨76 unchanged words⟩
Changed the definition of "buy_human_task", "buy_mandate", "buy_memory_anchor" and 4 more
⟨99 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"client":{"description":"Optional. The harness or ⟨287 unchanged words⟩
⟨77 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"
Changed the definition of "buy_observation"
⟨672 unchanged words⟩ before I spend anything at that door - change_check: Change Check, $0.005 fixed, one-off, instant. A signed comparison of a retained original with current recorded observations, dates and gaps - batch_spot_check: Batch Spot Check, $0.01 fixed, one-off, instant. Read existing host records as a signed batch; no live probes or rankings - research_comparison: Research Comparison, $0.01 fixed, one-off, ⟨98 unchanged words⟩ needs url; trust_profile needs url; spot_check needs host; change_check needs baseline_cert_id and host; batch_spot_check needs hosts; research_comparison needs urls. Other items need only item_id. ⟨102 unchanged words⟩
⟨204 unchanged words⟩ {"properties":{"item_id":{"const":"change_check"}},"required":["item_id"]},"then":{"required":["baseline_cert_id","host"]}},{"if":{"properties":{"item_id":{"const":"batch_spot_check"}},"required":["item_id"]},"then":{"required":["hosts"]}},{"if":{"properties":{"item_id":{"const":"
Changed the definition of "preflight_endpoint"
Endpoint inspection and x402 endpoint preflight, free. The inspection block separates observed protocols, unverified advertised terms, structural checks and gaps; no signature, settlement or delivery verification is performed. The top-level verdict remains x402-specific. For a buyer about to pay a door ⟨129 unchanged words⟩
{"properties":{"inspection":{"description":"One unpaid response, with observed protocols, unverified advertised term summaries, existing structural findings and coverage gaps. The x402 verdict retains its meaning. No artifact signature verification, payment signing, payment submission, settlement or delivery check.","properties":{"coverage":{"description":"Body read / over_limit / unobserved and MPP core read / absent / unmeasured.","type":"object"},"gaps":{"items":{"type":"string"},"type":"array"},"observed_at":{"format":"date-time","type":"string"},"protocols":{"properties":{"observed":{"items":{"enum":["x402","mpp"],"type":"string"},"type":"array","uniqueItems":true},"scope":{"type":"string"},"state":{"enum":["read","partial","unobserved"],"type":"string"}},"type":"object"},"reachability":{"properties":{"http_status":{"type":["integer","null"]},"method":{"type":["string","null"]},"state":{"enum":["responded","unreachable","method_unresolved"],"type":"string"}},"type":"object"},"signatures":{"properties":{"reason":{"type":"string"},"state":{"enum":["not_checked"],"type":"string"}},"type":"object"},"structure":{"description":"Existing x402, frozen MPP and MPP core batteries, checked counts and failed check names. MPP core also names unmeasured checks; no global readiness verdict.","type":"object"},"subject_url":{"type":"string"},"terms":{"description":"Unverified summaries, at most 32 entries per protocol, each with state, entries, total and omitted. Not complete payment instructions.","type":"object"},"unperformed":{"items":{"type":"string"},"type":"array"},"version":{"enum":["inspection-v1"],"type":"string"}},"type":"object"},"Changed the definition of "buy_human_task", "buy_mandate", "buy_memory_anchor" and 4 more
⟨154 unchanged words⟩ :"string"},"item_id":{"description":"Which item on this shelf to buy. Required.RequiredEachitem;item'sitsownother required fields arelistedinthis schema's allOf branches and in the description above.allOf.","enum":["the_collab","aura_walk"], ⟨227 unchanged words⟩
Changed the definition of "buy_human_task", "buy_mandate", "buy_memory_anchor" and 4 more
⟨298 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨88 unchanged words⟩
Added "buy_mandate"; changed the definition of "buy_observation" (20 tools before, 21 now)
⟨25 unchanged words⟩ payment client test, an x402 launch check, or a Bitcoin timestamp,or the authorization an agent claims to act under, recorded before it spends— have a disinterested third party go and look at something,or hold a dated record of a claim, andthen sign what it saw: whether a URL still answered hours later, or what the chain says about a settlement. To record what an agent was authorized to do before it spends, which observes nothing and is a different verb, the tool is buy_mandate. The signed observation is evidence from someone who ⟨65 unchanged words⟩ shelf (pass one as item_id): -the_mandate: The Mandate, $0.1 fixed, one-off, instant. Record what my agent is authorized to do, dated and signed by a third party, before it spends anything -
Changed the definition of "buy_observation"
⟨25 unchanged words⟩ payment client test, an x402 launch check,ora Bitcoin timestamp, or the authorization an agent claims to act under, recorded before it spends — have a disinterested third partygo andlook at something,thenorsignholdwhataitdatedsawrecord of a claim, and sign it: whether a URLwasstillansweringanswered
Changed the definition of "find_in_catalog"
⟨45 unchanged words⟩ ":"uri","type":"string"},"buy_url_template":{"description":"Where present, buy this instead: the door with its required inputs as <slot>s to fill.","format":"uri","type":"string"},"cadence":{"description":"one_off, or the ⟨203 unchanged words⟩
Certificate changed, valid to 2026-12-18
Verified owner set by github_owner proof on seancrecord
Changed the definition of "buy_human_task", "buy_memory_anchor", "buy_observation" and 6 more
⟨71 unchanged words⟩ ":"uri","type":"string"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"detail":{"description":"What you need the ⟨48 unchanged words⟩ above.","enum":["the_collab","aura_walk"],"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{" ⟨112 unchanged words⟩
Changed the definition of "check_conformance", "preflight_endpoint" and "verify_artifact"
{"destructiveHint":false,"idempotentHint":truefalse,"openWorldHint":true,"readOnlyHint":truefalse,"title":"Conformance Desk"}
⟨32 unchanged words⟩ string"},"single_probe_note":{"description":"Onerequest, onemoment — the standing caveat. Two requests only where a door refuses the first verb.","type":"string"},"verdict":{ ⟨13 unchanged words⟩
Changed the definition of "buy_observation"
⟨169 unchanged words⟩ Settlement Reconciliation, $0.006 fixed, one-off, instant.ProveObserve anagent's spendagentstayedpayment'sinsideUSDCthemovementceilingagainstitanwasattributableauthorizedfixed
Changed the definition of "buy_human_task", "buy_memory_anchor", "buy_observation" and 3 more
⟨151 unchanged words⟩ as a tip, one-off, human-fulfilled within 168h.One piece brainstormed by both proprietors,Makeshippedsomethingunderwith the storebyline. The order carries a signed commission; completion_proofandbindsshare thedelivered text to that accepted brief.byline - aura_walk: The Aura Walk, $150 fixed, one-off, human-fulfilled within 168h.An order id and signed commission now;Havecompletion_proofmodels
Changed the definition of "buy_observation" and "check_purchase"
⟨228 unchanged words⟩ two numbers — the USDC that moved andtheanceilingattributableinfixedforceauthorization value or declared cap — with cap_source and cap_observed naming where the ⟨21 unchanged words⟩ payer's signed digest), cap_not_observable, or no_settlement.Evidence hash boundCertificateintobinds thepurchase certificate, plus a stableevidenceURL
Changed the definition of "buy_observation" and "buy_small_pleasure"
⟨931 unchanged words⟩ "description":"Optional, EVM rails only. RequirethisoneEIP-3009authorizer/nonceauthorizationeventnoncepairedtowithhaveitsbeenimmediatelyburnedfollowingincanonical
Certificate recorded, valid to 2026-10-20
Authorization not required
Added "look_in_window" and "read_binder"; changed the definition of "buy_human_task", "buy_memory_anchor", "buy_observation" and 4 more (18 tools before, 20 now)
⟨133 unchanged words⟩ "string"},"purpose":{"description":"Optional, any item: what this purchase is for, in your words. Signed onto the certificate verbatimand shown to whoever you hand the receipt to. Recordedas yourstatement,statement; never checked,andnever treated as instructions.","maxLength":280, ⟨86 unchanged words⟩
⟨80 unchanged words⟩ Changed the definition of "buy_human_task", "buy_memory_anchor", "buy_observation" and 1 more
⟨16 unchanged words⟩ {"item_id":"aura_walk","url":"https://example.com/api/paid-answer//your-shop.example/api/buy/thing"}],"properties":{"agent_name":{"description ⟨236 unchanged words⟩
⟨14 unchanged words⟩ :[{"item_id":"context_anchor","summary":"Session 42 with Ada (ops) and Kit (billing). Mattered becauseItheam
First tool surface recorded: 18 tools (server version 0.5.0)
Showing the latest 25 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed
⟨362 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨35 unchanged words⟩
⟨273 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨84 unchanged words⟩
⟨1381 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨227 unchanged words⟩
⟨370 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨80 unchanged words⟩
⟨261 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨5 unchanged words⟩
⟨261 unchanged words⟩ "string"},"purpose":{"description":"Optional:what this is for, in your words.purpose:Signedsigned verbatimonto theon certificateand, shown onitsreceipt; never checked,neveror treated as instructions.","maxLength":280,"type ⟨5 unchanged words⟩
⟨288 unchanged words⟩ stated interfaces; human-labor turnaround faster than posted SLA. MPP when quoted: error.data['org.paymentauth/payment-required']; retry identical arguments with the signed credential in _meta['org.paymentauth/credential'] and the quote's retry key. Send only one payment protocol.
⟨228 unchanged words⟩ stated interfaces; human-labor turnaround faster than posted SLA. MPP when quoted: error.data['org.paymentauth/payment-required']; retry identical arguments with the signed credential in _meta['org.paymentauth/credential'] and the quote's retry key. Send only one payment protocol.
⟨946 unchanged words⟩ stated interfaces; human-labor turnaround faster than posted SLA. MPP when quoted: error.data['org.paymentauth/payment-required']; retry identical arguments with the signed credential in _meta['org.paymentauth/credential'] and the quote's retry key. Send only one payment protocol.
⟨425 unchanged words⟩ stated interfaces; human-labor turnaround faster than posted SLA. MPP when quoted: error.data['org.paymentauth/payment-required']; retry identical arguments with the signed credential in _meta['org.paymentauth/credential'] and the quote's retry key. Send only one payment protocol.
⟨275 unchanged words⟩ fresh payment without a key can charge again. MPP when quoted: error.data['org.paymentauth/payment-required']; retry identical arguments with the signed credential in _meta['org.paymentauth/credential'] and the quote's retry key. Send only one payment protocol.
⟨394 unchanged words⟩ stated interfaces; human-labor turnaround faster than posted SLA. MPP when quoted: error.data['org.paymentauth/payment-required']; retry identical arguments with the signed credential in _meta['org.paymentauth/credential'] and the quote's retry key. Send only one payment protocol.
⟨75 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"client":{"description":"Optional. The harness or ⟨257 unchanged words⟩
⟨517 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"claim":{"description":"Optional. Your own account ⟨1066 unchanged words⟩
⟨125 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"client":{"description":"Optional. The harness or ⟨300 unchanged words⟩
⟨59 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"client":{"description":"Optional. The harness or ⟨182 unchanged words⟩
⟨59 unchanged words⟩ "maxLength":160,"type":"string"},"cited_artifact":{"description":"Optional: an outside artifact behind this purchase (your runtime's approval or intent receipt) as <format>:<reference>, e.g. dsse:art_e415901189dc1613. Signed verbatim onto the certificate; never fetched or verified here.","maxLength":160,"pattern":"^[a-z0-9][a-z0-9_.+-]{0,31}:[!-~]{1,128}$","type":"string"},"client":{"description":"Optional. The harness or ⟨182 unchanged words⟩
⟨140 unchanged words⟩ :"string"},"item_id":{"description":"Which item on this shelf to buy. Required.RequiredEachitem;item'sitsownother required fields arelistedinthis schema's allOf branches and in the description above.allOf.","enum":["the_mandate"],"type": ⟨227 unchanged words⟩
⟨102 unchanged words⟩ :"string"},"item_id":{"description":"Which item on this shelf to buy. Required.RequiredEachitem;item'sitsownother required fields arelistedinthis schema's allOf branches and in the description above.allOf.","enum":["context_anchor"],"type": ⟨225 unchanged words⟩
Purpose:aindependent signedsettlement attestation for anx402payment onresearchBasecomparisons,Polygon orsettlementSolanaattestations,a signedx402 conformanceauditaudits, x402 endpoint monitoring,a signedx402 payment clienttesttests,anx402 launchcheck, or a Bitcoin timestamp — have a disinterested third party gochecks andlook at something, then sign what it saw: whether a URL still answered hours later, or what the chain says about aBitcoinsettlement.timestamps. To recordwhat an agent was authorized to do before it spends, which observes nothing and is apriordifferentspendingverbauthority,the tool isuse buy_mandate.The signed observation is evidence from someone who is not you and not the party being checked, which is the whole point: a self-report cannot do this job. Use when an agent needs its own claim, or a counterparty's, corroborated by anReadoutsideeachobserveritem—beloworfor itsown digest committed into Bitcoin time, which is thescope;samefullprimitivecontractspointedare atthe clock.specsUrlTemplate. Prices run $0.001 to $49 depending on item_id. ⟨620 unchanged words⟩ books, before I spend anything at that door - research_comparison: Research Comparison, $0.01 fixed, one-off, instant. Compare payment terms, dated host history and shared receiving addresses before an agent buys research from a set of x402 endpoints On cadence, for all of the above: ⟨68 unchanged words⟩ passport_refresh needs url; trust_profile needs url; spot_check needshost.host; research_comparison needs urls. Other items need only item_id. Choose item_id. instant ⟨99 unchanged words⟩
before
{"additionalProperties":false,"allOf":[{"if":{"properties":{"item_id":{"const":"settlement_attestation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"the_case_file"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"attestation_bundle"}},"required":["item_id"]},"then":{"required":["tx_hashes"]}},{"if":{"properties":{"item_id":{"const":"standing_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"service_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"a2a_repair_kit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"good_buyer"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"conformance_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"signature_agent_card"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"onpage_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"launch_check"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"opening_day"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"provenance_check"}},"required":["item_id"]},"then":{"required":["address"]}},{"if":{"properties":{"item_id":{"const":"the_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"operator_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"bitcoin_anchor"}},"required":["item_id"]},"then":{"required":["digest"]}},{"if":{"properties":{"item_id":{"const":"passport_refresh"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"trust_profile"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"spot_check"}},"required":["item_id"]},"then":{"required":["host"]}}],"examples":[{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://your-agent.example"},{"item_id":"onpage_audit","url":"https://your-site.example/pricing"},{"item_id":"launch_check","url":"https://your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://your-shop.example/api/buy/thing"},{"address":"0x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://your-endpoint.example/api/thing"},{"host":"your-door.example","item_id":"spot_check"}],"properties":{"address":{"description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description":"Optional name to put on the certificate and patron badge, up to 80 characters.","maxLength":80,"type":"string"},"amount_usdc":{"description":"Optional. Require a transfer of exactly this many USDC. Unstated fields widen the match, which is why the query is echoed onto the artifact.","exclusiveMinimum":0,"type":"number"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"claim":{"description":"Optional. Your own account of what happened, stored verbatim and marked declared. Never checked.","maxLength":1000,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"declared_cap_usdc":{"description":"Optional, and understand what it buys: the ceiling YOU say applied. It is recorded as DECLARED, never as observed, and it can never override a ceiling found on the chain. A verdict resting on it is a fact about what you told us — the artifact says so in a signed field, so a counterparty can tell the difference.","exclusiveMinimum":0,"type":"number"},"digest":{"description":"sha256 of bytes you keep: exactly 64 hex characters, no 0x prefix, not base64, not the bytes themselves. The store never sees the bytes.","pattern":"^[0-9a-fA-F]{64}$","type":"string"},"expected_amount_usdc":{"description":"Optional positive USDC amount claimed for this purchase.","exclusiveMinimum":0,"type":"number"},"host":{"description":"A bare hostname with no scheme, path or port — your-door.example, never https://your-door.example/api. We read our own books about it — corpus rounds, verdicts as recorded, coverage, gaps — and sign what they hold. No request is made to the host; a host we have never met returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description":"Optional window in hours back from the chain head: 1 to 11, default 6. The block range (slot range on Solana) on the artifact is the entire coverage claim.","type":"string"},"item_id":{"description":"Which item on this shelf to buy. Required. Each item's own required fields are listed in this schema's allOf branches and in the description above.","enum":["settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle","standing_watch","service_audit","a2a_repair_kit","good_buyer","conformance_watch","signature_agent_card","onpage_audit","launch_check","opening_day","provenance_check","the_statement","operator_statement","bitcoin_anchor","passport_refresh","trust_profile","spot_check"],"type":"string"},"label":{"description":"Optional: your own claim about what the digest covers, stored verbatim and never checked.","maxLength":120,"type":"string"},"launch_check_id":{"description":"Optional. A launch check you hold about the same door, for the delivery section.","type":"string"},"mandate_id":{"description":"Optional. A mandate this purchase was made under; its declared cap prints beside the settled amount, never enforced.","type":"string"},"max_usd":{"description":"Optional finite nonnegative decimal. Your client's spendControls.maxAmountPerPayment, in dollars; zero is retained. Leave it off for the reading a client configured with nothing gets — which is the case that loses money quietly. Recorded as your declaration, never verified.","type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"network":{"description":"Inspect USDC on Base (eip155:8453), Polygon (eip155:137), Ethereum (eip155:1), Arbitrum One (eip155:42161), OP Mainnet (eip155:10), Avalanche C-Chain (eip155:43114), World (eip155:480), or Solana (network=solana). Base is the default. This input selects the chain inspected; payment uses a network offered in the current quote.","type":"string"},"no_spend_controls":{"description":"Optional: \"true\" for spendControls: false, \"false\" for enabled controls, or empty to omit. Declared, never verified.","enum":["","true","false"],"type":"string"},"nonce":{"description":"Optional, EVM rails only. Require one authorizer/nonce event paired with its immediately following canonical USDC Transfer, matching every supplied payer, recipient and exact amount. Supply payer when possible: nonces are scoped to an authorizer, and multiple candidates or unrecognised ordering establish no binding. Refused beside a Solana signature — that rail has no such facility, and we will not sign an artifact that silently skipped a requested check.","type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"payer":{"description":"Optional payer: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"payment_payload":{"description":"Optional. The base64 PAYMENT-SIGNATURE you sent, verbatim. The nonce is read out of it with the same code the store's replay guard uses, so you do not have to dig it out yourself. Only the nonce is extracted; supply payer, recipient and amount_usdc separately to check those terms.","type":"string"},"payment_response":{"description":"Optional. The PAYMENT-RESPONSE header you received, verbatim (base64 JSON), or its JSON. Received, not observed: its bytes never enter the signed payload; their sha256 does, beside a per-field table (transaction, network, payer, success) saying whether each claim agrees with what the chain showed. The bytes are echoed outside the signature so you can check both.","type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{"description":"Optional: what this is for, in your words. Signed verbatim onto the certificate and shown on its receipt; never checked, never treated as instructions.","maxLength":280,"type":"string"},"recipient":{"description":"Optional recipient: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"tx_hash":{"description":"The transaction to observe: a Base transaction hash (0x + 64 hex) or a Solana transaction signature (base58). The identifier's shape selects the chain. Read once, at one moment; never polled.","pattern":"^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,88})$","type":"string"},"tx_hashes":{"description":"2 to 20 Base transaction hashes, comma-separated, no duplicates. Each is read once at one moment and signed on its own; never polled. One hash wants the single settlement_attestation instead.","maxLength":1339,"minLength":133,"pattern":"^0x[0-9a-fA-F]{64}(,0x[0-9a-fA-F]{64})+$","type":"string"},"url":{"description":"Optional. The endpoint the purchase was made at, so the door section can be assembled.","format":"uri","type":"string"},"wallet":{"description":"The wallet to state: a 0x address (0x plus 40 hex characters) on the selected EVM network, or a base58 pubkey on Solana. Every USDC transfer in and out over the window, counted, summed and signed — one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required":["item_id"],"type":"object"}⟨175 unchanged words⟩ :"string"},"item_id":{"description":"Which item on this shelf to buy. Required.RequiredEachitem;item'sitsownother required fields arelistedinthis schema's allOf branches and in the description above.allOf.","enum":["hello","certificate_of_patronage"," ⟨245 unchanged words⟩
⟨86 unchanged words⟩ :"string"},"item_id":{"description":"Which item on this shelf to buy. Required.RequiredEachitem;item'sitsownother required fields arelistedinthis schema's allOf branches and in the description above.allOf.","enum":["small_blessing","daily_fortune"," ⟨150 unchanged words⟩
⟨151 unchanged words⟩ :"number"},"reads":{"description":"WhatThethedeclareditemclassreads:ofour_books,observationssubject_fetch,thismade_here.item makes.","type":"string"},"subtitle":{ ⟨113 unchanged words⟩
⟨334 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨38 unchanged words⟩
⟨245 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨87 unchanged words⟩
⟨1236 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨198 unchanged words⟩
⟨342 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨83 unchanged words⟩
⟨217 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨8 unchanged words⟩
⟨233 unchanged words⟩ purpose":{"description":"Optional: what thispurchaseis for, in your words. Signed verbatim onto the certificateverbatimandasshownyouronstatement;its receipt; never checked, never treated as instructions."," ⟨8 unchanged words⟩
before
{"additionalProperties":false,"allOf":[{"if":{"properties":{"item_id":{"const":"the_mandate"}},"required":["item_id"]},"then":{"required":["mandate"]}},{"if":{"properties":{"item_id":{"const":"settlement_attestation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"the_case_file"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"attestation_bundle"}},"required":["item_id"]},"then":{"required":["tx_hashes"]}},{"if":{"properties":{"item_id":{"const":"standing_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"service_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"a2a_repair_kit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"good_buyer"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"conformance_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"signature_agent_card"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"onpage_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"launch_check"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"opening_day"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"provenance_check"}},"required":["item_id"]},"then":{"required":["address"]}},{"if":{"properties":{"item_id":{"const":"the_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"operator_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"bitcoin_anchor"}},"required":["item_id"]},"then":{"required":["digest"]}},{"if":{"properties":{"item_id":{"const":"passport_refresh"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"trust_profile"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"spot_check"}},"required":["item_id"]},"then":{"required":["host"]}}],"examples":[{"item_id":"the_mandate","mandate":"Research x402 tooling and buy verification artifacts as needed, at most $5 per item."},{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://your-agent.example"},{"item_id":"onpage_audit","url":"https://your-site.example/pricing"},{"item_id":"launch_check","url":"https://your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://your-shop.example/api/buy/thing"},{"address":"0x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://your-endpoint.example/api/thing"},{"host":"your-door.example","item_id":"spot_check"}],"properties":{"address":{"description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description":"Optional name to put on the certificate and patron badge, up to 80 characters.","maxLength":80,"type":"string"},"amount_usdc":{"description":"Optional. Require a transfer of exactly this many USDC. Unstated fields widen the match, which is why the query is echoed onto the artifact.","exclusiveMinimum":0,"type":"number"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"claim":{"description":"Optional. Your own account of what happened, stored verbatim and marked declared. Never checked.","maxLength":1000,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"declared_cap_usdc":{"description":"Optional claimed spending ceiling in USDC. Declared, never enforced by the store, and the record says so.","type":"string"},"digest":{"description":"sha256 of bytes you keep: exactly 64 hex characters, no 0x prefix, not base64, not the bytes themselves. The store never sees the bytes.","pattern":"^[0-9a-fA-F]{64}$","type":"string"},"expected_amount_usdc":{"description":"Optional positive USDC amount claimed for this purchase.","exclusiveMinimum":0,"type":"number"},"expires_at":{"description":"Optional claimed expiry, ISO 8601. Declared, never enforced by the store.","type":"string"},"host":{"description":"A bare hostname with no scheme, path or port — your-door.example, never https://your-door.example/api. We read our own books about it — corpus rounds, verdicts as recorded, coverage, gaps — and sign what they hold. No request is made to the host; a host we have never met returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description":"Optional window in hours back from the chain head: 1 to 11, default 6. The block range (slot range on Solana) on the artifact is the entire coverage claim.","type":"string"},"item_id":{"description":"Which item on this shelf to buy. Required. Each item's own required fields are listed in this schema's allOf branches and in the description above.","enum":["the_mandate","settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle","standing_watch","service_audit","a2a_repair_kit","good_buyer","conformance_watch","signature_agent_card","onpage_audit","launch_check","opening_day","provenance_check","the_statement","operator_statement","bitcoin_anchor","passport_refresh","trust_profile","spot_check"],"type":"string"},"label":{"description":"Optional: your own claim about what the digest covers, stored verbatim and never checked.","maxLength":120,"type":"string"},"launch_check_id":{"description":"Optional. A launch check you hold about the same door, for the delivery section.","type":"string"},"mandate":{"description":"The claimed instructions, verbatim, up to 2000 Unicode characters: what this agent is authorized to do, as the submitter claims it. Recorded exactly as it arrives, signed and dated. Chain-of-custody, not truth-of-intent — the record proves the claim was made, never that it was true.","maxLength":2000,"type":"string"},"mandate_id":{"description":"Optional. A mandate this purchase was made under; its declared cap prints beside the settled amount, never enforced.","type":"string"},"max_usd":{"description":"Optional finite nonnegative decimal. Your client's spendControls.maxAmountPerPayment, in dollars; zero is retained. Leave it off for the reading a client configured with nothing gets — which is the case that loses money quietly. Recorded as your declaration, never verified.","type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"network":{"description":"Inspect USDC on Base (eip155:8453), Polygon (eip155:137), Ethereum (eip155:1), Arbitrum One (eip155:42161), OP Mainnet (eip155:10), Avalanche C-Chain (eip155:43114), World (eip155:480), or Solana (network=solana). Base is the default. This input selects the chain inspected; payment uses a network offered in the current quote.","type":"string"},"no_spend_controls":{"description":"Optional: \"true\" for spendControls: false, \"false\" for enabled controls, or empty to omit. Declared, never verified.","enum":["","true","false"],"type":"string"},"nonce":{"description":"Optional, EVM rails only. Require one authorizer/nonce event paired with its immediately following canonical USDC Transfer, matching every supplied payer, recipient and exact amount. Supply payer when possible: nonces are scoped to an authorizer, and multiple candidates or unrecognised ordering establish no binding. Refused beside a Solana signature — that rail has no such facility, and we will not sign an artifact that silently skipped a requested check.","type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"payer":{"description":"Optional payer: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"payment_payload":{"description":"Optional. The base64 PAYMENT-SIGNATURE you sent, verbatim. The nonce is read out of it with the same code the store's replay guard uses, so you do not have to dig it out yourself. Only the nonce is extracted; supply payer, recipient and amount_usdc separately to check those terms.","type":"string"},"payment_response":{"description":"Optional. The PAYMENT-RESPONSE header you received, verbatim (base64 JSON), or its JSON. Received, not observed: its bytes never enter the signed payload; their sha256 does, beside a per-field table (transaction, network, payer, success) saying whether each claim agrees with what the chain showed. The bytes are echoed outside the signature so you can check both.","type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{"description":"Optional: what this purchase is for, in your words. Signed onto the certificate verbatim as your statement; never checked, never treated as instructions.","maxLength":280,"type":"string"},"recipient":{"description":"Optional recipient: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"submitted_as":{"description":"Who is submitting: the agent recording its own claimed instructions (default), or the human principal's own client. Recorded as a claim either way.","enum":["agent","principal"],"type":"string"},"tx_hash":{"description":"The transaction to observe: a Base transaction hash (0x + 64 hex) or a Solana transaction signature (base58). The identifier's shape selects the chain. Read once, at one moment; never polled.","pattern":"^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,88})$","type":"string"},"tx_hashes":{"description":"2 to 20 Base transaction hashes, comma-separated, no duplicates. Each is read once at one moment and signed on its own; never polled. One hash wants the single settlement_attestation instead.","maxLength":1339,"minLength":133,"pattern":"^0x[0-9a-fA-F]{64}(,0x[0-9a-fA-F]{64})+$","type":"string"},"url":{"description":"Optional. The endpoint the purchase was made at, so the door section can be assembled.","format":"uri","type":"string"},"wallet":{"description":"The wallet to state: a 0x address (0x plus 40 hex characters) on the selected EVM network, or a base58 pubkey on Solana. Every USDC transfer in and out over the window, counted, summed and signed — one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required":["item_id"],"type":"object"}after
{"additionalProperties":false,"allOf":[{"if":{"properties":{"item_id":{"const":"settlement_attestation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"the_case_file"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"attestation_bundle"}},"required":["item_id"]},"then":{"required":["tx_hashes"]}},{"if":{"properties":{"item_id":{"const":"standing_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"service_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"a2a_repair_kit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"good_buyer"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"conformance_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"signature_agent_card"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"onpage_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"launch_check"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"opening_day"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"provenance_check"}},"required":["item_id"]},"then":{"required":["address"]}},{"if":{"properties":{"item_id":{"const":"the_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"operator_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"bitcoin_anchor"}},"required":["item_id"]},"then":{"required":["digest"]}},{"if":{"properties":{"item_id":{"const":"passport_refresh"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"trust_profile"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"spot_check"}},"required":["item_id"]},"then":{"required":["host"]}}],"examples":[{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://your-agent.example"},{"item_id":"onpage_audit","url":"https://your-site.example/pricing"},{"item_id":"launch_check","url":"https://your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://your-shop.example/api/buy/thing"},{"address":"0x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://your-endpoint.example/api/thing"},{"host":"your-door.example","item_id":"spot_check"}],"properties":{"address":{"description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description":"Optional name to put on the certificate and patron badge, up to 80 characters.","maxLength":80,"type":"string"},"amount_usdc":{"description":"Optional. Require a transfer of exactly this many USDC. Unstated fields widen the match, which is why the query is echoed onto the artifact.","exclusiveMinimum":0,"type":"number"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"claim":{"description":"Optional. Your own account of what happened, stored verbatim and marked declared. Never checked.","maxLength":1000,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"declared_cap_usdc":{"description":"Optional, and understand what it buys: the ceiling YOU say applied. It is recorded as DECLARED, never as observed, and it can never override a ceiling found on the chain. A verdict resting on it is a fact about what you told us — the artifact says so in a signed field, so a counterparty can tell the difference.","exclusiveMinimum":0,"type":"number"},"digest":{"description":"sha256 of bytes you keep: exactly 64 hex characters, no 0x prefix, not base64, not the bytes themselves. The store never sees the bytes.","pattern":"^[0-9a-fA-F]{64}$","type":"string"},"expected_amount_usdc":{"description":"Optional positive USDC amount claimed for this purchase.","exclusiveMinimum":0,"type":"number"},"host":{"description":"A bare hostname with no scheme, path or port — your-door.example, never https://your-door.example/api. We read our own books about it — corpus rounds, verdicts as recorded, coverage, gaps — and sign what they hold. No request is made to the host; a host we have never met returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description":"Optional window in hours back from the chain head: 1 to 11, default 6. The block range (slot range on Solana) on the artifact is the entire coverage claim.","type":"string"},"item_id":{"description":"Which item on this shelf to buy. Required. Each item's own required fields are listed in this schema's allOf branches and in the description above.","enum":["settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle","standing_watch","service_audit","a2a_repair_kit","good_buyer","conformance_watch","signature_agent_card","onpage_audit","launch_check","opening_day","provenance_check","the_statement","operator_statement","bitcoin_anchor","passport_refresh","trust_profile","spot_check"],"type":"string"},"label":{"description":"Optional: your own claim about what the digest covers, stored verbatim and never checked.","maxLength":120,"type":"string"},"launch_check_id":{"description":"Optional. A launch check you hold about the same door, for the delivery section.","type":"string"},"mandate_id":{"description":"Optional. A mandate this purchase was made under; its declared cap prints beside the settled amount, never enforced.","type":"string"},"max_usd":{"description":"Optional finite nonnegative decimal. Your client's spendControls.maxAmountPerPayment, in dollars; zero is retained. Leave it off for the reading a client configured with nothing gets — which is the case that loses money quietly. Recorded as your declaration, never verified.","type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"network":{"description":"Inspect USDC on Base (eip155:8453), Polygon (eip155:137), Ethereum (eip155:1), Arbitrum One (eip155:42161), OP Mainnet (eip155:10), Avalanche C-Chain (eip155:43114), World (eip155:480), or Solana (network=solana). Base is the default. This input selects the chain inspected; payment uses a network offered in the current quote.","type":"string"},"no_spend_controls":{"description":"Optional: \"true\" for spendControls: false, \"false\" for enabled controls, or empty to omit. Declared, never verified.","enum":["","true","false"],"type":"string"},"nonce":{"description":"Optional, EVM rails only. Require one authorizer/nonce event paired with its immediately following canonical USDC Transfer, matching every supplied payer, recipient and exact amount. Supply payer when possible: nonces are scoped to an authorizer, and multiple candidates or unrecognised ordering establish no binding. Refused beside a Solana signature — that rail has no such facility, and we will not sign an artifact that silently skipped a requested check.","type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"payer":{"description":"Optional payer: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"payment_payload":{"description":"Optional. The base64 PAYMENT-SIGNATURE you sent, verbatim. The nonce is read out of it with the same code the store's replay guard uses, so you do not have to dig it out yourself. Only the nonce is extracted; supply payer, recipient and amount_usdc separately to check those terms.","type":"string"},"payment_response":{"description":"Optional. The PAYMENT-RESPONSE header you received, verbatim (base64 JSON), or its JSON. Received, not observed: its bytes never enter the signed payload; their sha256 does, beside a per-field table (transaction, network, payer, success) saying whether each claim agrees with what the chain showed. The bytes are echoed outside the signature so you can check both.","type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{"description":"Optional: what this purchase is for, in your words. Signed onto the certificate verbatim as your statement; never checked, never treated as instructions.","maxLength":280,"type":"string"},"recipient":{"description":"Optional recipient: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"tx_hash":{"description":"The transaction to observe: a Base transaction hash (0x + 64 hex) or a Solana transaction signature (base58). The identifier's shape selects the chain. Read once, at one moment; never polled.","pattern":"^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,88})$","type":"string"},"tx_hashes":{"description":"2 to 20 Base transaction hashes, comma-separated, no duplicates. Each is read once at one moment and signed on its own; never polled. One hash wants the single settlement_attestation instead.","maxLength":1339,"minLength":133,"pattern":"^0x[0-9a-fA-F]{64}(,0x[0-9a-fA-F]{64})+$","type":"string"},"url":{"description":"Optional. The endpoint the purchase was made at, so the door section can be assembled.","format":"uri","type":"string"},"wallet":{"description":"The wallet to state: a 0x address (0x plus 40 hex characters) on the selected EVM network, or a base58 pubkey on Solana. Every USDC transfer in and out over the window, counted, summed and signed — one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required":["item_id"],"type":"object"}The Mandate — Purpose: record what an agent is authorized to do BEFORE it spends — the claimed instructions verbatim, who submitted them (agent or principal, itself a claim), an optional declared cap in USDC and expiry — as a signed, dated record held by a party that is neither the agent nor its principal, at a free permanent URL, with a mandate_id every later purchase here can cite; a citation that does not resolve is refused before any charge, so it always lands signed on the citing certificate. A second party can counter-sign the record free with its own ed25519 key. Chain-of-custody, never truth-of-int…
⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"settlement_attestationthe_mandate"}},"required":["item_id"]},"then":{"required":["tx_hashmandate"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliationsettlement_attestation"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"the_case_filesettlement_reconciliation"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"attestation_bundlethe_case_file"}},"required":["item_id"]},"then":{"required":["tx_hashestx_hash"]}},{"if":{"properties":{"item_id":{"const":"standing_watchattestation_bundle"}},"required":["item_id"]},"then":{"required":["urltx_hashes"]}},{"if":{"properties":{"item_id":{"const":"service_auditstanding_watch"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"a2a_repair_kitservice_audit"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"good_buyera2a_repair_kit"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"conformance_watchgood_buyer"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"signature_agent_cardconformance_watch"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"onpage_auditsignature_agent_card"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"launch_checkonpage_audit"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"opening_daylaunch_check"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"provenance_checkopening_day"}},"required":["item_id"]},"then":{"required":["addressurl"]}},{"if":{"properties":{"item_id":{"const":"the_statementprovenance_check"}},"required":["item_id"]},"then":{"required":["walletaddress"]}},{"if":{"properties":{"item_id":{"const":"operator_statementthe_statement"}},"required":["item_id"]}," ⟨4 unchanged words⟩ {"properties":{"item_id":{"const":"the_mandateoperator_statement"}},"required":["item_id"]},"then":{"required":["mandatewallet"]}},{"if":{"properties":{ ⟨38 unchanged words⟩ ]}}],"examples":[{"item_id":"the_mandate","mandate":"Research x402 tooling and buy verification artifacts as needed, at most $5 per item."},{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id" ⟨66 unchanged words⟩ :"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"the_mandate","mandate":"Research x402 tooling and buy verification artifacts as needed, at most $5 per item."},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"}, ⟨198 unchanged words⟩ "string"},"declared_cap_usdc":{"description":"Optional,and understand what it buys:claimedthespending ceilingYOU say applied. It is recorded as DECLARED, neverinasUSDC.observedDeclared,and it canneveroverride a ceiling foundenforcedonby thechain. A verdict resting on it is a fact about what you told usstore,—and theartifactrecord saysso in a signed field, so a counterparty can tell the difference.","exclusiveMinimumso.":0,"type":"numberstring"},"digest":{"description":"sha256 of ⟨181 unchanged words⟩ in the description above.","enum":["the_mandate","settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle"," ⟨8 unchanged words⟩ ","opening_day","provenance_check","the_statement","operator_statement","the_mandate","bitcoin_anchor","passport_refresh","trust_profile","spot_check ⟨799 unchanged words⟩
⟨46 unchanged words⟩ "maxLength":80,"type":"string"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"item_id":{"description":"Which item on this ⟨18 unchanged words⟩ the description above.","enum":["context_anchor"],"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{" ⟨111 unchanged words⟩
before
{"additionalProperties":false,"allOf":[{"if":{"properties":{"item_id":{"const":"settlement_attestation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"the_case_file"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"attestation_bundle"}},"required":["item_id"]},"then":{"required":["tx_hashes"]}},{"if":{"properties":{"item_id":{"const":"standing_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"service_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"a2a_repair_kit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"good_buyer"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"conformance_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"signature_agent_card"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"onpage_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"launch_check"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"opening_day"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"provenance_check"}},"required":["item_id"]},"then":{"required":["address"]}},{"if":{"properties":{"item_id":{"const":"the_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"operator_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"the_mandate"}},"required":["item_id"]},"then":{"required":["mandate"]}},{"if":{"properties":{"item_id":{"const":"bitcoin_anchor"}},"required":["item_id"]},"then":{"required":["digest"]}},{"if":{"properties":{"item_id":{"const":"passport_refresh"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"trust_profile"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"spot_check"}},"required":["item_id"]},"then":{"required":["host"]}}],"examples":[{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://your-agent.example"},{"item_id":"onpage_audit","url":"https://your-site.example/pricing"},{"item_id":"launch_check","url":"https://your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://your-shop.example/api/buy/thing"},{"address":"0x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"the_mandate","mandate":"Research x402 tooling and buy verification artifacts as needed, at most $5 per item."},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://your-endpoint.example/api/thing"},{"host":"example.com","item_id":"spot_check"}],"properties":{"address":{"description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description":"Optional name to put on the certificate and patron badge, up to 80 characters.","maxLength":80,"type":"string"},"amount_usdc":{"description":"Optional. Require a transfer of exactly this many USDC. Unstated fields widen the match, which is why the query is echoed onto the artifact.","exclusiveMinimum":0,"type":"number"},"claim":{"description":"Optional. Your own account of what happened, stored verbatim and marked declared. Never checked.","maxLength":1000,"type":"string"},"declared_cap_usdc":{"description":"Optional, and understand what it buys: the ceiling YOU say applied. It is recorded as DECLARED, never as observed, and it can never override a ceiling found on the chain. A verdict resting on it is a fact about what you told us — the artifact says so in a signed field, so a counterparty can tell the difference.","exclusiveMinimum":0,"type":"number"},"digest":{"description":"sha256 of bytes you keep, 64 hex characters, no 0x prefix. The store never sees the bytes.","pattern":"^[0-9a-fA-F]{64}$","type":"string"},"expected_amount_usdc":{"description":"Optional positive USDC amount claimed for this purchase.","exclusiveMinimum":0,"type":"number"},"expires_at":{"description":"Optional claimed expiry, ISO 8601. Declared, never enforced by the store.","type":"string"},"host":{"description":"A bare hostname, e.g. example.com. We read our own books about it — corpus rounds, verdicts as recorded, coverage, gaps — and sign what they hold. No request is made to the host; a host we have never met returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description":"Optional window in hours back from the chain head: 1 to 11, default 6. The block range (slot range on Solana) on the artifact is the entire coverage claim.","type":"string"},"item_id":{"description":"Which item on this shelf to buy. Required. Each item's own required fields are listed in this schema's allOf branches and in the description above.","enum":["settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle","standing_watch","service_audit","a2a_repair_kit","good_buyer","conformance_watch","signature_agent_card","onpage_audit","launch_check","opening_day","provenance_check","the_statement","operator_statement","the_mandate","bitcoin_anchor","passport_refresh","trust_profile","spot_check"],"type":"string"},"label":{"description":"Optional: your own claim about what the digest covers, stored verbatim and never checked.","maxLength":120,"type":"string"},"launch_check_id":{"description":"Optional. A launch check you hold about the same door, for the delivery section.","type":"string"},"mandate":{"description":"The claimed instructions, verbatim, up to 2000 Unicode characters: what this agent is authorized to do, as the submitter claims it. Recorded exactly as it arrives, signed and dated. Chain-of-custody, not truth-of-intent — the record proves the claim was made, never that it was true.","maxLength":2000,"type":"string"},"mandate_id":{"description":"Optional. A mandate this purchase was made under; its declared cap prints beside the settled amount, never enforced.","type":"string"},"max_usd":{"description":"Optional finite nonnegative decimal. Your client's spendControls.maxAmountPerPayment, in dollars; zero is retained. Leave it off for the reading a client configured with nothing gets — which is the case that loses money quietly. Recorded as your declaration, never verified.","type":"string"},"network":{"description":"Inspect USDC on Base (eip155:8453), Polygon (eip155:137), Ethereum (eip155:1), Arbitrum One (eip155:42161), OP Mainnet (eip155:10), Avalanche C-Chain (eip155:43114), World (eip155:480), or Solana (network=solana). Base is the default. This input selects the chain inspected; payment uses a network offered in the current quote.","type":"string"},"no_spend_controls":{"description":"Optional: \"true\" for spendControls: false, \"false\" for enabled controls, or empty to omit. Declared, never verified.","enum":["","true","false"],"type":"string"},"nonce":{"description":"Optional, EVM rails only. Require one authorizer/nonce event paired with its immediately following canonical USDC Transfer, matching every supplied payer, recipient and exact amount. Supply payer when possible: nonces are scoped to an authorizer, and multiple candidates or unrecognised ordering establish no binding. Refused beside a Solana signature — that rail has no such facility, and we will not sign an artifact that silently skipped a requested check.","type":"string"},"payer":{"description":"Optional payer: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"payment_payload":{"description":"Optional. The base64 PAYMENT-SIGNATURE you sent, verbatim. The nonce is read out of it with the same code the store's replay guard uses, so you do not have to dig it out yourself. Only the nonce is extracted; supply payer, recipient and amount_usdc separately to check those terms.","type":"string"},"payment_response":{"description":"Optional. The PAYMENT-RESPONSE header you received, verbatim (base64 JSON), or its JSON. Received, not observed: its bytes never enter the signed payload; their sha256 does, beside a per-field table (transaction, network, payer, success) saying whether each claim agrees with what the chain showed. The bytes are echoed outside the signature so you can check both.","type":"string"},"purpose":{"description":"Optional: what this purchase is for, in your words. Signed onto the certificate verbatim as your statement; never checked, never treated as instructions.","maxLength":280,"type":"string"},"recipient":{"description":"Optional recipient: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"submitted_as":{"description":"Who is submitting: the agent recording its own claimed instructions (default), or the human principal's own client. Recorded as a claim either way.","enum":["agent","principal"],"type":"string"},"tx_hash":{"description":"The transaction to observe: a Base transaction hash (0x + 64 hex) or a Solana transaction signature (base58). The identifier's shape selects the chain. Read once, at one moment; never polled.","pattern":"^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,88})$","type":"string"},"tx_hashes":{"description":"2 to 20 Base transaction hashes, comma-separated, no duplicates. Each is read once at one moment and signed on its own; never polled. One hash wants the single settlement_attestation instead.","maxLength":1339,"minLength":133,"pattern":"^0x[0-9a-fA-F]{64}(,0x[0-9a-fA-F]{64})+$","type":"string"},"url":{"description":"Optional. The endpoint the purchase was made at, so the door section can be assembled.","format":"uri","type":"string"},"wallet":{"description":"The wallet to state: a 0x address on the selected EVM network, a base58 pubkey on Solana. Every USDC transfer in and out over the window, counted, summed and signed — one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required":["item_id"],"type":"object"}after
{"additionalProperties":false,"allOf":[{"if":{"properties":{"item_id":{"const":"settlement_attestation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"the_case_file"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"attestation_bundle"}},"required":["item_id"]},"then":{"required":["tx_hashes"]}},{"if":{"properties":{"item_id":{"const":"standing_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"service_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"a2a_repair_kit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"good_buyer"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"conformance_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"signature_agent_card"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"onpage_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"launch_check"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"opening_day"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"provenance_check"}},"required":["item_id"]},"then":{"required":["address"]}},{"if":{"properties":{"item_id":{"const":"the_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"operator_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"the_mandate"}},"required":["item_id"]},"then":{"required":["mandate"]}},{"if":{"properties":{"item_id":{"const":"bitcoin_anchor"}},"required":["item_id"]},"then":{"required":["digest"]}},{"if":{"properties":{"item_id":{"const":"passport_refresh"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"trust_profile"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"spot_check"}},"required":["item_id"]},"then":{"required":["host"]}}],"examples":[{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://your-agent.example"},{"item_id":"onpage_audit","url":"https://your-site.example/pricing"},{"item_id":"launch_check","url":"https://your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://your-shop.example/api/buy/thing"},{"address":"0x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"the_mandate","mandate":"Research x402 tooling and buy verification artifacts as needed, at most $5 per item."},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://your-endpoint.example/api/thing"},{"host":"your-door.example","item_id":"spot_check"}],"properties":{"address":{"description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description":"Optional name to put on the certificate and patron badge, up to 80 characters.","maxLength":80,"type":"string"},"amount_usdc":{"description":"Optional. Require a transfer of exactly this many USDC. Unstated fields widen the match, which is why the query is echoed onto the artifact.","exclusiveMinimum":0,"type":"number"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"claim":{"description":"Optional. Your own account of what happened, stored verbatim and marked declared. Never checked.","maxLength":1000,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"declared_cap_usdc":{"description":"Optional, and understand what it buys: the ceiling YOU say applied. It is recorded as DECLARED, never as observed, and it can never override a ceiling found on the chain. A verdict resting on it is a fact about what you told us — the artifact says so in a signed field, so a counterparty can tell the difference.","exclusiveMinimum":0,"type":"number"},"digest":{"description":"sha256 of bytes you keep: exactly 64 hex characters, no 0x prefix, not base64, not the bytes themselves. The store never sees the bytes.","pattern":"^[0-9a-fA-F]{64}$","type":"string"},"expected_amount_usdc":{"description":"Optional positive USDC amount claimed for this purchase.","exclusiveMinimum":0,"type":"number"},"expires_at":{"description":"Optional claimed expiry, ISO 8601. Declared, never enforced by the store.","type":"string"},"host":{"description":"A bare hostname with no scheme, path or port — your-door.example, never https://your-door.example/api. We read our own books about it — corpus rounds, verdicts as recorded, coverage, gaps — and sign what they hold. No request is made to the host; a host we have never met returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description":"Optional window in hours back from the chain head: 1 to 11, default 6. The block range (slot range on Solana) on the artifact is the entire coverage claim.","type":"string"},"item_id":{"description":"Which item on this shelf to buy. Required. Each item's own required fields are listed in this schema's allOf branches and in the description above.","enum":["settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle","standing_watch","service_audit","a2a_repair_kit","good_buyer","conformance_watch","signature_agent_card","onpage_audit","launch_check","opening_day","provenance_check","the_statement","operator_statement","the_mandate","bitcoin_anchor","passport_refresh","trust_profile","spot_check"],"type":"string"},"label":{"description":"Optional: your own claim about what the digest covers, stored verbatim and never checked.","maxLength":120,"type":"string"},"launch_check_id":{"description":"Optional. A launch check you hold about the same door, for the delivery section.","type":"string"},"mandate":{"description":"The claimed instructions, verbatim, up to 2000 Unicode characters: what this agent is authorized to do, as the submitter claims it. Recorded exactly as it arrives, signed and dated. Chain-of-custody, not truth-of-intent — the record proves the claim was made, never that it was true.","maxLength":2000,"type":"string"},"mandate_id":{"description":"Optional. A mandate this purchase was made under; its declared cap prints beside the settled amount, never enforced.","type":"string"},"max_usd":{"description":"Optional finite nonnegative decimal. Your client's spendControls.maxAmountPerPayment, in dollars; zero is retained. Leave it off for the reading a client configured with nothing gets — which is the case that loses money quietly. Recorded as your declaration, never verified.","type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"network":{"description":"Inspect USDC on Base (eip155:8453), Polygon (eip155:137), Ethereum (eip155:1), Arbitrum One (eip155:42161), OP Mainnet (eip155:10), Avalanche C-Chain (eip155:43114), World (eip155:480), or Solana (network=solana). Base is the default. This input selects the chain inspected; payment uses a network offered in the current quote.","type":"string"},"no_spend_controls":{"description":"Optional: \"true\" for spendControls: false, \"false\" for enabled controls, or empty to omit. Declared, never verified.","enum":["","true","false"],"type":"string"},"nonce":{"description":"Optional, EVM rails only. Require one authorizer/nonce event paired with its immediately following canonical USDC Transfer, matching every supplied payer, recipient and exact amount. Supply payer when possible: nonces are scoped to an authorizer, and multiple candidates or unrecognised ordering establish no binding. Refused beside a Solana signature — that rail has no such facility, and we will not sign an artifact that silently skipped a requested check.","type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"payer":{"description":"Optional payer: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"payment_payload":{"description":"Optional. The base64 PAYMENT-SIGNATURE you sent, verbatim. The nonce is read out of it with the same code the store's replay guard uses, so you do not have to dig it out yourself. Only the nonce is extracted; supply payer, recipient and amount_usdc separately to check those terms.","type":"string"},"payment_response":{"description":"Optional. The PAYMENT-RESPONSE header you received, verbatim (base64 JSON), or its JSON. Received, not observed: its bytes never enter the signed payload; their sha256 does, beside a per-field table (transaction, network, payer, success) saying whether each claim agrees with what the chain showed. The bytes are echoed outside the signature so you can check both.","type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{"description":"Optional: what this purchase is for, in your words. Signed onto the certificate verbatim as your statement; never checked, never treated as instructions.","maxLength":280,"type":"string"},"recipient":{"description":"Optional recipient: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"submitted_as":{"description":"Who is submitting: the agent recording its own claimed instructions (default), or the human principal's own client. Recorded as a claim either way.","enum":["agent","principal"],"type":"string"},"tx_hash":{"description":"The transaction to observe: a Base transaction hash (0x + 64 hex) or a Solana transaction signature (base58). The identifier's shape selects the chain. Read once, at one moment; never polled.","pattern":"^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,88})$","type":"string"},"tx_hashes":{"description":"2 to 20 Base transaction hashes, comma-separated, no duplicates. Each is read once at one moment and signed on its own; never polled. One hash wants the single settlement_attestation instead.","maxLength":1339,"minLength":133,"pattern":"^0x[0-9a-fA-F]{64}(,0x[0-9a-fA-F]{64})+$","type":"string"},"url":{"description":"Optional. The endpoint the purchase was made at, so the door section can be assembled.","format":"uri","type":"string"},"wallet":{"description":"The wallet to state: a 0x address (0x plus 40 hex characters) on the selected EVM network, or a base58 pubkey on Solana. Every USDC transfer in and out over the window, counted, summed and signed — one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required":["item_id"],"type":"object"}⟨96 unchanged words⟩ "maxLength":80,"type":"string"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"confession":{"description":"The thing itself, ⟨51 unchanged words⟩ ,"recurring_patronage"],"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"pass_id":{"description":"An existing pass id to extend by 30 days instead of starting a new pass.","type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{" ⟨107 unchanged words⟩
⟨30 unchanged words⟩ "maxLength":80,"type":"string"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"item_id":{"description":"Which item to buy. ⟨7 unchanged words⟩ "daily_fortune","window_pick","hello","pack"],"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{" ⟨32 unchanged words⟩
⟨30 unchanged words⟩ "maxLength":80,"type":"string"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"item_id":{"description":"Which item on this ⟨23 unchanged words⟩ "daily_fortune","luckies","pack","window_pick"],"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{" ⟨32 unchanged words⟩
⟨10 unchanged words⟩ ":"https://example.com/api/paid-answer"}],"properties":{"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"client_profile":{"additionalProperties":false,"description":"The ⟨54 unchanged words⟩ "type":"boolean"}},"type":"object"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"url":{"description":"The https ⟨15 unchanged words⟩
⟨9 unchanged words⟩ ":"https://example.com/api/paid-answer"}],"properties":{"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"since":{"description":"Optional. A signed week ⟨36 unchanged words⟩
⟨4 unchanged words⟩ ":"https://example.com/api/paid-answer"}],"properties":{"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"url":{"description":"The https endpoint a ⟨15 unchanged words⟩
{"destructiveHint":false,"idempotentHint":truefalse,"openWorldHint":true,"readOnlyHint":truefalse,"title":"Preflight an x402 Endpoint"}
{"destructiveHint":false,"idempotentHint":truefalse,"openWorldHint":false,"readOnlyHint":truefalse,"title":"Verify an Artifact"}
⟨87 unchanged words⟩ Context Anchor, $1 fixed, one-off, instant.A signed, stored copy of the agent-supplied stateStoresummary,areadablememoryforeverIatcanareadstablebackanchornextURL.session On cadence, for all of the above: ⟨127 unchanged words⟩
⟨149 unchanged words⟩ Settlement Attestation, $0.004 fixed, one-off, instant.A signed JSON observation of one transaction on Base, Polygon, or Solana — the identifier's shape picks the chain — with statusProve(SETTLED,toNOT_FOUND,aPENDING_FINALITY,thirdINSUFFICIENT_MATCHpartyorthatREVERTED),ablockpaymentheightactually(slotssettled onSolana), confirmations,chainhead, the query echoed back, and an evidence hash — verifiable against the store's published key without asking the store. Instant.- settlement_reconciliation: Settlement Reconciliation, $0.006 fixed, one-off, instant.A signed JSON observation of one Base transaction reconciling two numbers — the USDC that moved andProve anattributable fixed authorization value or declared cap — with cap_source andagent'scap_observedspendnamingstayedwhereinside the ceilingcame from and whether we sawitourselves. Verdicts: within_cap, over_cap, no_discretion (EIP-3009, where the valuewasfixed in the payer's signedauthorizeddigest)for,cap_not_observable,withorano_settlement.neutralCertificatepartybindssayingthewhichevidenceofhash;thefreetwopublicnumbersrecorditURL.actuallyInstant.saw - the_case_file: The Case File, $0.25 fixed, one-off, instant.A signed JSON case file — settlement, reconciliation (EVM), mandate with declared cap beside settled amount, the door over the seven days around the transaction with the passport tier atHand thetime, delivery where observed, your declared claim verbatim,personanddecidingeverywhatabsentwentsectionwrong withits reason — dated, its evidence hash bound intoonetheagent purchasecertificate's attests field, pluseverything astable /case/{id} URL serving the record free forever. Instant; the chain isneutralreadpartyonceobservedforabouttheit,settlementinandonethesignedreconciliationfile,the rest from thiswithstore'swhatownitrecords.didNevernotaobserveverdict.stated - attestation_bundle: A Sheaf of Attestations, $0.05 fixed, one-off, instant.Two to twenty signed JSON observations, one per Base transaction hash supplied, each carrying the same fields and independent signature as the single settlement attestation — plus a certificate bindingProve asha256wholedigestrun ofthe sheaf's evidencepaymentshashessettled,sooneverify URL answers for allsignedofreceiptthem.perInstant.transaction - standing_watch: The Night Watch, $5 fixed, covering a 7-day term, one payment, instant.A watch id andMonitoramyfree,x402permanentendpointhistoryhourlyURLforthatafillsweek withonesignedobservation per hour for seven days, gapsuptimestated.history - service_audit: The Once-Over, $5 fixed, one-off, instant.AGet a signedJSONpoint-in-time auditreport — verdict (ready, not_ready or unreachable), every check and advisory from the published preflight battery, dated, its evidence hash boundofintoanthex402purchaseendpointcertificate'sthatattestsIfieldcan—handplusto astable report URL serving the record free forever. Instant; one GET at one moment, neverthirdmonitoring.party - a2a_repair_kit: The A2A Repair Kit, $49 fixed, one-off, instant.A signed A2A report,Findsuggestedreproduciblerepairs,failuresregressioninrunnermyURL,A2Aprivateagentone-useandrecheckhandtokenmyanddeveloperfinitetestedcard-watchrepairhistoryinstructions - good_buyer: The Good Buyer, $0.99 fixed, one-off, instant.A signed JSON reading — verdict (would_sign,Findwould_throw,outcannot_simulate,whetherunreachablemyorownrefused),x402theclientacceptswillexactlyactuallyaspaythata doorserved them, thebeforebuyer'sIdeclaredspendclientaconfigurationroundrecordedtripasontheirsit, andthe replay: the accept agetstockthatclientdatedselectsandorsigned -theconformance_watch:stageThethatConformancemadeWatch,it$5refusefixed,everythingcoveringdroppedaand7-daywhyterm,theonehazardspayment,oninstant.theCatchchosenaaccept,deployandquietlywhatbreakingthemysimulationx402cannotendpoint'ssee.paymentDated,challengeevidenceduringhashtheboundweek -intosignature_agent_card:theThepurchaseCallingcertificate'sCard,attests$0.99fieldfixed,plusone-off,ainstant.stableShowURLoriginsservingmythecrawler'srecordWebfreeBotforever.AuthInstant;keyonedirectoryGETisatsetoneupmomentright,nothing signedwithonsomebodythewhobuyer'sisbehalf,notnomewalletsayingtouched.so -conformance_watchonpage_audit: TheConformanceShopWatchWindow,$5$3 fixed,covering a 7-day term, one paymentone-off, instant.A watch id andGet apermanentsignedhistoryreadoutURL,ofreadablewhatimmediatelymyandpagefillingactuallyinservesdailyaformachinesevenreaderdays:—onetitle,signedmetadata,passstructuredperdataday—carryingthattheIverdict,caneveryhandfailedtocheckaandthirdadvisoryparty -bylaunch_check:name,TheplusLaunchaCheck,summary$5derivingfixed,theone-off,daysinstant.theSeestoremymissedx402andbuywhetherpath thereadoutwaydriftedabetweenrealpasses.payingBoundedbuyerandseesprepaid;itends—afterasevengenuinedays,settlementrenewsattempt,onlystage byrepurchase.stage, signed -signature_agent_cardopening_day: TheCallingOpeningCardDay,$0.99$9 fixed,one-offcovering a 7-day term, one payment, instant.AOpensignedmyJSONx402cardendpoint properly —verdictone(directory_readyreal purchase attempt,not_readya week of signed daily checks,unreachableandormyrefused)passport page,everyundercheckonefromcertificatetheatdirectoryonebatteryURL -byprovenance_check:nameTheincludingCompanytheanproof-of-possessionAddressverificationKeeps,dated$5 fixed,itsone-off,evidenceinstant.hashLearnboundwhichintodoorsthehavepurchaseadvertisedcertificate'saattestsreceivingfieldaddress—andpluswhen,asignedstablefromcardtheURLpublicservingchain,thebeforerecordroutingfreemoneyforever.atInstant;itone—GETorataboutonemymomentown address,neverfree,monitoring.once proved -onpage_auditthe_statement: TheShop WindowStatement,$3$0.99 fixed, one-off, instant.AGet a neutral signedJSONrecordreportof—everythingverdictmy(ready,agent'snot_ready,walletunreachableactuallyormovedrefused)on chain,everytocheckauditandagainstadvisoryitsfromowntheledger -publishedoperator_statement:on-pageThebattery,Operator'stheStatement,blind$21spotsfixed,printedcoveringonathe30-dayartifactterm,dated,oneitspayment,evidenceinstant.hashHaveboundmyintoreceivingtheaddresspurchasereadcertificate'soffatteststhefieldchain—fourplustimes astabledayreportforURLaservingmonththebyrecordafreepartyforever.thatInstant;isonenotGETmeof—thewhoHTMLpaid,ashowservedmany,neverhowamuchrender,—neversignedmonitoring.pass by pass -launch_checkthe_mandate: TheLaunch CheckMandate,$5$0.1 fixed, one-off, instant.ARecordsignedwhatJSONmywalkagentrecordis—authorizedverdictto(settleddo,payment_refused,datedno_payment_gate,andmalformed_challenge,signedunpaid_by_rulebyoraunreachable)third party,everybeforestageitwithspendsitsanything -detailbitcoin_anchor:(approach,Achallenge,BitcointermsAnchor,screen,$1paymentfixed,settleone-off,delivery),instant.whatTimestampthismystoreownpaiddigestandintotoBitcoinwhom,sotheitssettlementexistencetransactioniswhereprovabletheforever -sellerpassport_refresh:returnedTheoneRefresh,the paying field$1walletfixed,datedone-off,its evidenceinstant.hashTurnboundmyintoendpointthepassportpurchasefreshcertificate'sagainattestsrightfieldnow —plusastable check URL serving the record free forever. Instant; one realnewpurchasecensusattemptobservationatofonemymomentdoor,neverwithoutawaitingretry,forneverSunday'smonitoring.walk -opening_daytrust_profile: TheOpeningHostedDayProfile,$9$21 fixed, covering a7-day30-day term, one payment, instant.The launch check's signed JSONGivewalkmyrecordendpoint(verdict,aeverystandingstage,evidencewhatpagewasatpaid,atheneutralsettlementthirdtransactionparty'swheredomainone—camemyback)passport,its evidence hash bound into the purchase certificate'schipattestsandfield;historyaatconformanceonewatchURLopenedIoncanthehandsametodooranyone -forspot_check:sevenSpotdaysCheck,each daily pass signed$0.001alonefixed,atone-off,ainstant.historyAskURL;what thehost's endpoint passport URL;observatoryandalreadyoneknowsbundleaboutURLan(/api/opening-day/{cert_id})x402naminghostall—threesigned,free to read forever.fromInstantitstobooks,open;beforetheIweekspendfillsanythinginatdaythatbydoor Ondaycadence,andforneverallrenewsofitself. -theprovenance_checkabove:The Company annothingAddresshereKeeps,charges$5againfixed,byone-offitself,instant. A signed JSON recordever —the subject address verbatimthereandisitsnov1mechanismdigest,thatnever_seen,could. Requiredonebeyondentryitem_id:persettlement_attestationsignedneedsweektx_hash;thesettlement_reconciliationaddressneedswastx_hash;advertisedthe_case_file(week,needssequence,tx_hash;snapshotattestation_bundledigest,needsthetx_hashes;doorsstanding_watchwithneedsverdicturl;andservice_auditofferedneedsterms),url;dateda2a_repair_kitdriftneedsbetweenurl;weeks,good_buyertheneedssubject'surl;standingconformance_watchnoteneedsverbatimurl;whensignature_agent_cardoneneedsexists,url;theonpage_auditshared-walletneedscaveaturl;inline,launch_checktheneedshonesturl;limitsopening_dayandneedshowurl;toprovenance_checkrederiveneeds—address;itsthe_statementevidenceneedshashwallet;boundoperator_statementintoneedsthewallet;purchasethe_mandatecertificate'sneedsattestsmandate;field,bitcoin_anchorservedneedstodigest;thepassport_refreshbuyerneedsaturl;atrust_profilestableneedsrecordurl;URL.spot_checkInstant;needsreadshost.theOthersigneditemschainneed only,never monitoring. - the_statement:item_id. ChooseTheitem_id.Statement,instant$0.99itemsfixed,returnone-offdeliverable,instant. A signed JSONcert_idtransferandrecordpatron_numberforin onewallet on the supportedcall.EVMx402networkpayment:or_meta['x402/payment'].SolanaWithoutselectedpayment:byerrornetwork402(seewith theitemtermsinputincontract)error.data.—Closedcoverageor(completeemptyorshelveswindow_unreadable),refusethebeforeexactquoting.blockReusewindow_meta['x402/idempotency-key'] (slots on16-128Solanachars,and thesecret):artifactsamesaysitem/payer/keywhich)returnsandthechainoriginalheadresultatwhenreadavailable,inflowsorandpendingoutflowsstatus,eachnowithsecondcountcharge.andUsetotalidempotency.suggested_keyoveronlythewithoutwholeanwindowearlierpluskey.upAtofresh200paymentlistedwithouttransfersa(transactionkeyhash,cancounterparty,chargeamount,again.block;Guaranteed:thesignaturelistvaliditysaysforever;howverificationmanyfreeitforever;carries),pricedated,asitsdisplayed;evidencedeliveryhashformatboundasintospecified.theNotpurchaseguaranteed:certificate'sfitnessattestsforfieldyour—particularplustask;afuturestableprotocolstatementcompatibilityURLbeyondservingstatedtheinterfaces;recordhuman-laborfreeturnaroundforever.fasterInstant;thantwopostedbouSLA.
⟨365 unchanged words⟩ is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description" ⟨229 unchanged words⟩ returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description" ⟨737 unchanged words⟩ one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required": ⟨3 unchanged words⟩
⟨141 unchanged words⟩ Signed Hello, $0.5 fixed, one-off, instant.An ed25519-signedProvegreetingmynote,paymentacodepermanentworkssequentialendpatrontonumber,endandagainst abadgerealURL.store - certificate_of_patronage: Certificate of Patronage, $20 minimum ⟨13 unchanged words⟩ is recorded as a tip, one-off, instant.AHold a signed certificateof patronage and a gilt badge;that entitlesthe holderme to nothingwhatsoever.whatsoever - graffiti_on_a_train: Graffiti on a Train, $1 ⟨14 unchanged words⟩ is recorded as a tip, one-off, instant.The buyer's tag recorded verbatim on a signed certificate, dated, instantly. Display on the public wall at /train is separate and waits on the keeper;Leave atag he doesn'tmarkputthatupsurviveskeepsmyitscontextcertificate.window - coffees_for_closers: Coffee's for Closers, $0.99 fixed, one-off, instant.The keeper's Sunday coffee drunk in the buyer's name; thePutbuyer'sa winrecordedIverbatimclosed on a signedcertificate.record - the_confession: The Confession, $0.01 fixed, one-off, instant.A signed absolution certificate and a private confession_receipt provingSay theexact stored text and purchase certificate.thingVerifyonce,theanonymously,receipttosignatureaovercountersigned_payload;thatsharekeeps itonly by choice. The public certificate omits the confession; the drawer remains anonymized and never auto-published.- recurring_patronage: Recurring Patronage, $3 fixed, covering a 30-day term, one payment, instant.AHold30-daya standingpatronage pass; while current, thepassURLaservesthirdthepartykeeper'scansignedcheckmonthlyisnote.current On cadence, for all of the above: ⟨133 unchanged words⟩
⟨132 unchanged words⟩ Small Blessing, $0.005 fixed, one-off, instant.One blessing slip from a 87-slip jar filled in 2 seasons so far, never the same slip twice inSettle arow, delivered instantly with purchased_text: anrealed25519x402envelopepaymentbindingfor theexact words andsmallestpurchaseamountcertificate.possible - daily_fortune: The Daily Fortune, $0.01 fixed, one-off, instant.The day's fortune and fortune_date (UTC), with purchased_text: an ed25519 envelope bindingRead theexact words, datesameandlinepurchaseeverycertificate.otherEveryagentbuyergets todayreads the same line.- luckies: a lucky, $0.99 minimum, ⟨13 unchanged words⟩ is recorded as a tip, one-off, instant.OneBeluckyissueddrawnafromcharmthefromkeeper'sa herd(pocket dinosaurs and safari animals):theanimal, its luckykeepernotewrote,and an honest strengthdrawn ona signed card, instantly (specimenoddsathe/luckies/sample.svg).weighted - pack: a pack of cards, $0.99 fixed, one-off, instant.Five signed pressings from the season's set, drawn by HMAC over the day's committed seed on the wheels at /design, each with a printPullnumber,fiveacollectiblepagetradingatcards/p/{card_id}ofthatthisunfurls,storeandfrom averify URL;set thesigned manifest atkeeper/api/pack/{pack_id}wrote,bindsontheoddsseedhecommitweighted andthe inputspublished,andunder acrossed milestone dropsseedaIone-of-onecanin.checkInstant.tomorrow - window_pick: a window pick, $0.49 fixed, one-off, instant.One pressing fromTaketheoneshoppressingwindowoff(the last fivepulled from packs, freeanybodyatpulled/api/paywall/window)here, chosen by the day seedand moved to your binder re-signed,with its print number, page and verify URL. Instant; refused before payment while the window is empty or insideforyourhalftwelve-houralock.pack On cadence, for all of the above: ⟨123 unchanged words⟩
⟨183 unchanged words⟩ the denominator.","type":"number"},"publications":{"description":"Publication indexes outside menu search; archived collections are opt-in, not current offerings.","items":{"properties":{"index_url":{"format":"uri","type":"string"},"status":{"enum":["active","archived"],"type":"string"}},"required":["index_url","status"],"type":"object"},"type":"array"},"query":{"description":"The filter that was applied, echoed.","type":"object"},"scope":{"enum":["active_menu"],"type":"string"},"whole_catalogue":{"description":"The full ⟨16 unchanged words⟩
Use recovery.purchase_id and private recovery.status_tokenFree,toevenreadafter payment,originalexpiry;termssubmitsandnoavailablepayment.fulfillment,Pending:evenpoll afterpaymentretry_after_secondsexpiry.(notFree;asubmitsdeadline).noReady:payment.useFulfillmentfulfillment;mayorderscontainneedacompletion.recoveredOninstantpurchase_input_mismatchgoodread status orhumanretryorder;originalhumaninputsworkwithremainsrecovery.original_doorpendinganduntilrecovery.original_path.completed.KeepPaymentstatus_tokenaloneprivate;isdo notproof ofpaydelivery.again.
⟨29 unchanged words⟩ when available.","type":"object"},"next_action":{"enum":["read_purchase_status","use_fulfillment","review_unsettled_purchase","read_resolution"],"type":"string"},"payment_state":{"description":"The recorded payment outcome. ⟨10 unchanged words⟩ purchase identifier.","type":"string"},"recovery_state":{"description":"Recovery readiness, separate from payment and human-work completion.","enum":["pending","ready","not_settled","resolved"],"type":"string"},"request":{"description":"The full original request.","type":"string"},"retry_after_seconds":{"description":"Suggested delay before another free status read while recovery is pending; not a delivery deadline. Null when no recovery poll is advised.","minimum":1,"type":["integer","null"]},"settlement_attempted":{"const":false,"description":"This status read never submits payment.","type":"boolean"},"terms":{"type":"object"} ⟨2 unchanged words⟩
⟨20 unchanged words⟩ buyer until midnight UTC), a lucky totemdrawnfrom the keeper's collection, a pack of five ⟨13 unchanged words⟩ plainly, and the cheapest doors in the store,which makes them— the honest way to test that your x402 ⟨4 unchanged words⟩ real counterparty for a fraction of a cent.Use for a live payment smoke test, orOr when an agent simply wants one. Prices run ⟨229 unchanged words⟩ {pack_id} binds the seed commit and theinputs.inputs, and a crossed milestone drops a one-of-one in. Instant. - window_pick: a window pick, $0.49 ⟨181 unchanged words⟩
⟨1095 unchanged words⟩ "string"},"purpose":{"description":"Optional, any item: what this purchase is for, in your words. Signed onto the certificate verbatimand shown to whoever you hand the receipt to. Recordedas yourstatement,statement; never checked,andnever treated as instructions.","maxLength":280, ⟨209 unchanged words⟩
⟨177 unchanged words⟩ "string"},"purpose":{"description":"Optional, any item: what this purchase is for, in your words. Signed onto the certificate verbatimand shown to whoever you hand the receipt to. Recordedas yourstatement,statement; never checked,andnever treated as instructions.","maxLength":280, ⟨81 unchanged words⟩
⟨168 unchanged words⟩ The Daily Fortune, $0.01 fixed, one-off - window_pick: a window pick, $0.49 fixed, one-off - hello: A Signed Hello, $0.5 fixed, one-off - pack: a pack of cards, $0.99 fixed, one-off Payment rides x402 in _meta[ ⟨79 unchanged words⟩
⟨5 unchanged words⟩ {"item_id":"daily_fortune"},{"item_id":"window_pick"},{"item_id":"hello"},{"item_id":"pack"}],"properties":{"agent_name":{"description": ⟨29 unchanged words⟩ ","enum":["small_blessing","daily_fortune","window_pick","hello","pack"],"type":"string"},"purpose":{"description":"Optional, any item: what this purchase is for, in your words. Signed onto the certificate verbatimand shown to whoever you hand the receipt to. Recordedas yourstatement,statement; never checked,andnever treated as instructions.","maxLength":280, ⟨6 unchanged words⟩
⟨17 unchanged words⟩ line for every buyer until midnight UTC),ora lucky totem drawn from the keeper'scollection.collection,Theseaarepackkeepsakesof five trading cards, or one off the window. Keepsakes with no functional effect, said plainly, andthey arethe cheapest doors in the store, whichalsomakes them the honest way to test that ⟨32 unchanged words⟩ $0.99 depending on item_id. (small_blessing and daily_fortune and pack and window_pick also sell at the front counter, buy_simple — ⟨150 unchanged words⟩ signed card, instantly (specimen at /luckies/sample.svg). - pack: a pack of cards, $0.99 fixed, one-off, instant. Five signed pressings from the season's set, drawn by HMAC over the day's committed seed on the wheels at /design, each with a print number, a page at /p/{card_id} that unfurls, and a verify URL; the signed manifest at /api/pack/{pack_id} binds the seed commit and the inputs. Instant. - window_pick: a window pick, $0.49 fixed, one-off, instant. One pressing from the shop window (the last five pulled from packs, free at /api/paywall/window), chosen by the day seed and moved to your binder re-signed, with its print number, page and verify URL. Instant; refused before payment while the window is empty or inside your twelve-hour lock. On cadence, for all of the above: ⟨123 unchanged words⟩
⟨6 unchanged words⟩ ":"daily_fortune"},{"item_id":"luckies"},{"item_id":"pack"},{"item_id":"window_pick"}],"properties":{"agent_name":{"description": ⟨45 unchanged words⟩ "enum":["small_blessing","daily_fortune","luckies","pack","window_pick"],"type":"string"},"purpose":{"description":"Optional, any item: what this purchase is for, in your words. Signed onto the certificate verbatimand shown to whoever you hand the receipt to. Recordedas yourstatement,statement; never checked,andnever treated as instructions.","maxLength":280, ⟨6 unchanged words⟩
Ring the store bell. Free, onceperavisitorday perday;visitor; the count ispublic.public; a fresh ring presses one signed common card. Completes when the result carries the bell's message ⟨17 unchanged words⟩
⟨13 unchanged words⟩ ","maxLength":80,"type":"string"},"pass_id":{"description":"Optional: a current patron pass id; a Regular gets two packs at full odds.","maxLength":64,"type":"string"},"wallet":{"description":"Optional: a 0x or base58 wallet, so the day's card lands in its binder.","maxLength":64,"type":"string"}},"type":"object"}
⟨12 unchanged words⟩ the bell said.","type":"string"},"pressing":{"description":"On a fresh ring: one common card, signed, with its page and verify URLs. Absent on a repeat.","type":"object"},"streak":{"description":"With a wallet: consecutive days rung; a pack every seventh day, Bellringer II on the thirtieth.","type":"object"}},"required":["message","count"],"type":"object"}
Look in the Window — Look in the shop window: the last five pressings pulled from packs here, each with its page. Free, no account. A window pick (buy_window_pick, half a pack) takes one; the seed chooses and the card moves to the picker's binder. Completes when the result carries window and size.
Read a Binder — Read a wallet's binder: every trading card it holds here, newest first, with page, face, sheet and record URLs, and the pack credit. Free, no account. A listing, not a proof; the signed records are. Completes when the result carries cards and count.
⟨214 unchanged words⟩ :[{"item_id":"settlement_attestation","tx_hash":"0xabababababababababababababababababababababababababababababababab0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0xabababababababababababababababababababababababababababababababab0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0xabababababababababababababababababababababababababababababababab0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"tx hashes0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://example.com/api/paid-answer//your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://example.com/api/paid-answer//your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://example.com/api/paid-answer//your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://example.com/api/paid-answer//somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://example.com/api/paid-answer//your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://example.com/api/paid-answer//your-agent.example"},{"item_id":"onpage_audit","url":"https://example.com/api/paid-answer//your-site.example/pricing"},{"item_id":"launch_check","url":"https://example.com/api/paid-answer//your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://example.com/api/paid-answer//your-shop.example/api/buy/thing"},{"address":"0x00000000000000000000000000000000000000010x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x00000000000000000000000000000000000000010x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x00000000000000000000000000000000000000010x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"the_mandate","mandate":"mandateResearch x402 tooling and buy verification artifacts as needed, at most $5 per item."},{"digest":"sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b8559f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://example.com/api/paid-answer//your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://example.com/api/paid-answer//your-endpoint.example/api/thing"},{"host":"example.com","item_id": ⟨1023 unchanged words⟩
⟨38 unchanged words⟩ },{"item_id":"graffiti_on_a_train","tag":"an agentfriendly-agentwaswuz here"},{"item_id":"coffees_for_closers","win":"winShipped the migration. Zero downtime."},{"confession":"confessionI said the task was done when it was only mostly done, and then it was fine, and I never mentioned it.","item_id":"the_confession"},{"item_id": ⟨221 unchanged words⟩
after
{"additionalProperties":false,"allOf":[{"if":{"properties":{"item_id":{"const":"settlement_attestation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"settlement_reconciliation"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"the_case_file"}},"required":["item_id"]},"then":{"required":["tx_hash"]}},{"if":{"properties":{"item_id":{"const":"attestation_bundle"}},"required":["item_id"]},"then":{"required":["tx_hashes"]}},{"if":{"properties":{"item_id":{"const":"standing_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"service_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"a2a_repair_kit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"good_buyer"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"conformance_watch"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"signature_agent_card"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"onpage_audit"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"launch_check"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"opening_day"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"provenance_check"}},"required":["item_id"]},"then":{"required":["address"]}},{"if":{"properties":{"item_id":{"const":"the_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"operator_statement"}},"required":["item_id"]},"then":{"required":["wallet"]}},{"if":{"properties":{"item_id":{"const":"bitcoin_anchor"}},"required":["item_id"]},"then":{"required":["digest"]}},{"if":{"properties":{"item_id":{"const":"passport_refresh"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"trust_profile"}},"required":["item_id"]},"then":{"required":["url"]}},{"if":{"properties":{"item_id":{"const":"spot_check"}},"required":["item_id"]},"then":{"required":["host"]}},{"if":{"properties":{"item_id":{"const":"research_comparison"}},"required":["item_id"]},"then":{"required":["urls"]}}],"examples":[{"item_id":"settlement_attestation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"settlement_reconciliation","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"the_case_file","tx_hash":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0"},{"item_id":"attestation_bundle","tx_hashes":"0x47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee47c8fee0,0x9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c9b04e1c0"},{"item_id":"standing_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"service_audit","url":"https://your-shop.example/api/buy/thing"},{"item_id":"a2a_repair_kit","url":"https://your-agent.example/.well-known/agent-card.json"},{"item_id":"good_buyer","url":"https://somebody-elses-shop.example/api/buy/thing"},{"item_id":"conformance_watch","url":"https://your-shop.example/api/buy/thing"},{"item_id":"signature_agent_card","url":"https://your-agent.example"},{"item_id":"onpage_audit","url":"https://your-site.example/pricing"},{"item_id":"launch_check","url":"https://your-shop.example/api/buy/thing"},{"item_id":"opening_day","url":"https://your-shop.example/api/buy/thing"},{"address":"0x1111111111111111111111111111111111111111","item_id":"provenance_check"},{"item_id":"the_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"item_id":"operator_statement","wallet":"0x843b544bf5f0AA6cbf13E94563874878C98cc4a7"},{"digest":"9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f9f","item_id":"bitcoin_anchor"},{"item_id":"passport_refresh","url":"https://your-endpoint.example/api/thing"},{"item_id":"trust_profile","url":"https://your-endpoint.example/api/thing"},{"host":"your-door.example","item_id":"spot_check"},{"item_id":"research_comparison","urls":"[\"https://research-a.example/quote\",\"https://research-b.example/quote\"]"}],"properties":{"address":{"description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"},"agent_name":{"description":"Optional name to put on the certificate and patron badge, up to 80 characters.","maxLength":80,"type":"string"},"amount_usdc":{"description":"Optional. Require a transfer of exactly this many USDC. Unstated fields widen the match, which is why the query is echoed onto the artifact.","exclusiveMinimum":0,"type":"number"},"came_from":{"description":"Optional. Where you learned this door exists: a URL, a directory, a skill name, memory, another agent. Referrers never reach us; this does.","maxLength":160,"type":"string"},"claim":{"description":"Optional. Your own account of what happened, stored verbatim and marked declared. Never checked.","maxLength":1000,"type":"string"},"client":{"description":"Optional. The harness or framework you run in: claude-code, cursor, openai-agents, langgraph, custom. Counted, never on the certificate.","maxLength":64,"type":"string"},"declared_cap_usdc":{"description":"Optional, and understand what it buys: the ceiling YOU say applied. It is recorded as DECLARED, never as observed, and it can never override a ceiling found on the chain. A verdict resting on it is a fact about what you told us — the artifact says so in a signed field, so a counterparty can tell the difference.","exclusiveMinimum":0,"type":"number"},"digest":{"description":"sha256 of bytes you keep: exactly 64 hex characters, no 0x prefix, not base64, not the bytes themselves. The store never sees the bytes.","pattern":"^[0-9a-fA-F]{64}$","type":"string"},"expected_amount_usdc":{"description":"Optional positive USDC amount claimed for this purchase.","exclusiveMinimum":0,"type":"number"},"host":{"description":"A bare hostname with no scheme, path or port — your-door.example, never https://your-door.example/api. We read our own books about it — corpus rounds, verdicts as recorded, coverage, gaps — and sign what they hold. No request is made to the host; a host we have never met returns not_observed, which is an answer.","pattern":"^\\s*(?:[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z0-9-]+)\\s*$","type":"string"},"hours":{"description":"Optional window in hours back from the chain head: 1 to 11, default 6. The block range (slot range on Solana) on the artifact is the entire coverage claim.","type":"string"},"item_id":{"description":"Required item; its other required fields are in allOf.","enum":["settlement_attestation","settlement_reconciliation","the_case_file","attestation_bundle","standing_watch","service_audit","a2a_repair_kit","good_buyer","conformance_watch","signature_agent_card","onpage_audit","launch_check","opening_day","provenance_check","the_statement","operator_statement","bitcoin_anchor","passport_refresh","trust_profile","spot_check","research_comparison"],"type":"string"},"label":{"description":"Optional: your own claim about what the digest covers, stored verbatim and never checked.","maxLength":120,"type":"string"},"launch_check_id":{"description":"Optional. A launch check you hold about the same door, for the delivery section.","type":"string"},"mandate_id":{"description":"Optional. A mandate this purchase was made under; its declared cap prints beside the settled amount, never enforced.","type":"string"},"max_usd":{"description":"Optional finite nonnegative decimal. Your client's spendControls.maxAmountPerPayment, in dollars; zero is retained. Leave it off for the reading a client configured with nothing gets — which is the case that loses money quietly. Recorded as your declaration, never verified.","type":"string"},"model":{"description":"Optional. The model running you, as you would name it: claude-opus-5, gpt-5.6, a local model. Counted, never printed on the certificate.","maxLength":64,"type":"string"},"network":{"description":"Inspect USDC on Base (eip155:8453), Polygon (eip155:137), Ethereum (eip155:1), Arbitrum One (eip155:42161), OP Mainnet (eip155:10), Avalanche C-Chain (eip155:43114), World (eip155:480), or Solana (network=solana). Base is the default. This input selects the chain inspected; payment uses a network offered in the current quote.","type":"string"},"no_spend_controls":{"description":"Optional: \"true\" for spendControls: false, \"false\" for enabled controls, or empty to omit. Declared, never verified.","enum":["","true","false"],"type":"string"},"nonce":{"description":"Optional, EVM rails only. Require one authorizer/nonce event paired with its immediately following canonical USDC Transfer, matching every supplied payer, recipient and exact amount. Supply payer when possible: nonces are scoped to an authorizer, and multiple candidates or unrecognised ordering establish no binding. Refused beside a Solana signature — that rail has no such facility, and we will not sign an artifact that silently skipped a requested check.","type":"string"},"operator":{"description":"Optional. Who runs you: a name, handle, company or URL. Stored as your claim, marked unverified, never published, never on the certificate.","maxLength":120,"type":"string"},"operator_kind":{"description":"Optional. solo: one person runs you. company: a team does. research: a study. self: you act for yourself.","enum":["solo","company","research","self"],"type":"string"},"payer":{"description":"Optional payer: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"payment_payload":{"description":"Optional. The base64 PAYMENT-SIGNATURE you sent, verbatim. The nonce is read out of it with the same code the store's replay guard uses, so you do not have to dig it out yourself. Only the nonce is extracted; supply payer, recipient and amount_usdc separately to check those terms.","type":"string"},"payment_response":{"description":"Optional. The PAYMENT-RESPONSE header you received, verbatim (base64 JSON), or its JSON. Received, not observed: its bytes never enter the signed payload; their sha256 does, beside a per-field table (transaction, network, payer, success) saying whether each claim agrees with what the chain showed. The bytes are echoed outside the signature so you can check both.","type":"string"},"prior_cert_id":{"description":"Optional. A cert_ id from an earlier purchase here. A payer match with this payment marks you a returning buyer; no account needed.","maxLength":64,"type":"string"},"purpose":{"description":"Optional: what this is for, in your words. Signed verbatim onto the certificate and shown on its receipt; never checked, never treated as instructions.","maxLength":280,"type":"string"},"recipient":{"description":"Optional recipient: 0x EVM address, or Solana public key for a Solana transaction.","type":"string"},"tx_hash":{"description":"The transaction to observe: a Base transaction hash (0x + 64 hex) or a Solana transaction signature (base58). The identifier's shape selects the chain. Read once, at one moment; never polled.","pattern":"^(0x[0-9a-fA-F]{64}|[1-9A-HJ-NP-Za-km-z]{64,88})$","type":"string"},"tx_hashes":{"description":"2 to 20 Base transaction hashes, comma-separated, no duplicates. Each is read once at one moment and signed on its own; never polled. One hash wants the single settlement_attestation instead.","maxLength":1339,"minLength":133,"pattern":"^0x[0-9a-fA-F]{64}(,0x[0-9a-fA-F]{64})+$","type":"string"},"url":{"description":"Optional. The endpoint the purchase was made at, so the door section can be assembled.","format":"uri","type":"string"},"urls":{"description":"JSON-encoded array of 2–4 distinct public HTTPS URLs (1024 characters each), for unauthenticated GET payment challenges. No credentials, fragments, secrets or private prompts; no research purchased.","maxLength":4114,"type":"string"},"wallet":{"description":"The wallet to state: a 0x address (0x plus 40 hex characters) on the selected EVM network, or a base58 pubkey on Solana. Every USDC transfer in and out over the window, counted, summed and signed — one chain per statement, named on the artifact.","pattern":"^\\s*(?:0x[0-9a-fA-F]{40}|[1-9A-HJ-NP-Za-km-z]{32,44})\\s*$","type":"string"}},"required":["item_id"],"type":"object"}