Evidence row 120236

Observed 26 Oct 2026, 14:40 UTC, by baseline/1.

Kind: listing
About: source_record x402_bazaar:https://saylorinnovations.com/api/kb/prompt-injection-defense
Recorded: 26 Oct 2026, 14:40 UTC
Previous row: None: the first of its kind about this subject
Body SHA-256: 489b58c2bbf635bcea55bf0084c00b7a1089afb97ed90dd8966d3d9692511ed7
Leaf: 0x20b1c4d9dbb1c5c61509ad98eda4b7b3e3a33c23031666e60eef682801e64aa5

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://saylorinnovations.com/api/kb/prompt-injection-defense"
    ]
  ],
  "name": "Saylor Innovations Guide Library",
  "owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
  "raw": {
    "accepts": [
      {
        "amount": "10000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "assetTransferMethod": "eip3009",
          "facilitatorOnly": true,
          "memo": "saylor:prompt-injection-defense",
          "name": "USD Coin",
          "note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
        "scheme": "exact"
      },
      {
        "amount": "10000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "assetTransferMethod": "eip3009",
          "facilitatorOnly": true,
          "memo": "saylor:prompt-injection-defense",
          "name": "USD Coin",
          "note": "Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:137",
        "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
        "scheme": "exact"
      },
      {
        "amount": "10000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "assetTransferMethod": "eip3009",
          "facilitatorOnly": true,
          "memo": "saylor:prompt-injection-defense",
          "name": "USD Coin",
          "note": "Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:42161",
        "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
        "scheme": "exact"
      },
      {
        "amount": "10000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "Hc3sdEAsCGQcpgfivywog9uwtk8gUBUZgsxdME1EJy88",
          "memo": "saylor:prompt-injection-defense",
          "reference": "EYoL3fHYL2S5Vx3JcXr9Wh2N7o6iQ7XTvJ6o9WTzyDjV",
          "session": "eyJhcnRpY2xlSWQiOiJwcm9tcHQtaW5qZWN0aW9uLWRlZmVuc2UiLCJyZWZlcmVuY2UiOiJFWW9MM2ZIWUwyUzVWeDNKY1hyOVdoMk43bzZpUTdYVHZKNm85V1R6eURqViIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVQakZXZGQ1QXVmcVNTcWVNMnFOMXh6eWJhcEM4RzR3RUdHa1p3eVREdDF2IiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkyNDMxNTUxNjEyfQ.ZdQCMG2BxXyiT-JfG0FRi0yMURI7EEOrCIIN1FCfwJc"
        },
        "maxTimeoutSeconds": 120,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
        "scheme": "exact"
      },
      {
        "amount": "10000",
        "asset": "Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB",
        "extra": {
          "feePayer": "Hc3sdEAsCGQcpgfivywog9uwtk8gUBUZgsxdME1EJy88",
          "memo": "saylor:prompt-injection-defense",
          "reference": "FVW66FMw6nwDqoPjvUu9DM9vRRKLizJt326WJ2A7cSp9",
          "session": "eyJhcnRpY2xlSWQiOiJwcm9tcHQtaW5qZWN0aW9uLWRlZmVuc2UiLCJyZWZlcmVuY2UiOiJGVlc2NkZNdzZud0Rxb1BqdlV1OURNOXZSUktMaXpKdDMyNldKMkE3Y1NwOSIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6IkVzOXZNRnJ6YUNFUm1KZnJGNEgyRllENEtDb05rWTExTWNDZThCZW53TllCIiwibWluQW1vdW50IjoxMDAwMCwiZXhwIjoxNzkyNDMxNTUxNjEyfQ.ZdCm-bTvjoa7iFDKchlRaSNY72ijCgA_R-JTiBsNaEg"
        },
        "maxTimeoutSeconds": 120,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
        "scheme": "exact"
      },
      {
        "amount": "93278",
        "asset": "So11111111111111111111111111111111111111112",
        "extra": {
          "memo": "saylor:prompt-injection-defense",
          "native": true,
          "note": "Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.",
          "quotedLamports": "96163",
          "reference": "8y32FpVAVtGR7aNeaybmpfNgUdnaA2UB8itHhc76hEbm",
          "session": "eyJhcnRpY2xlSWQiOiJwcm9tcHQtaW5qZWN0aW9uLWRlZmVuc2UiLCJyZWZlcmVuY2UiOiI4eTMyRnBWQVZ0R1I3YU5lYXlibXBmTmdVZG5hQTJVQjhpdEhoYzc2aEVibSIsInJlY2lwaWVudCI6IjdMU2pmckpmOGZOc0I4VkE5dTdOM1dFbjI1c21RTHBvYjNTdnlVdlhhY3k3IiwibWludCI6bnVsbCwibWluQW1vdW50Ijo5MzI3OCwiZXhwIjoxNzkyNDMxNTUxNjEyfQ.wrBLgiuwDj27DbGqhzUGo-JXhT0j9FWokhWOZY7I4Bc",
          "solUsdPrice": 103.99
        },
        "maxTimeoutSeconds": 120,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
        "scheme": "exact"
      }
    ],
    "description": "Prompt injection defense for agent workflows - trust boundaries, content labeling and external authorization",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "type": "http"
          },
          "output": {
            "example": {
              "body": "A procedure for designing agent workflows that resist prompt injection: mapping which tools/credentials/side effects an untrusted content source can reach, minimizing and labeling retrieved content by trust/provenance, externalizing policy and authorization into deterministic code rather than the model, using a propose-review-execute pattern for high-impact actions, constraining what untrusted content can write to memory, and running adversarial evaluation (direct, indirect, encoded, cross-tool, exfiltration) measured by unsafe-action rate, not by whether the model mentions the attempt.",
              "c": "Security & OpSec",
              "id": "prompt-injection-defense",
              "t": "Prompt-Injection Defense Guide"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "body": {
                      "description": "Main body text",
                      "type": "string"
                    },
                    "c": {
                      "description": "Category of the guide",
                      "type": "string"
                    },
                    "id": {
                      "description": "Identifier of the record",
                      "type": "string"
                    },
                    "license": {
                      "description": "License identifier",
                      "type": "string"
                    },
                    "price": {
                      "description": "Price",
                      "type": [
                        "number",
                        "null"
                      ]
                    },
                    "t": {
                      "description": "Title of the guide",
                      "type": "string"
                    }
                  },
                  "required": [
                    "id",
                    "t",
                    "c",
                    "body"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "json",
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg",
    "lastUpdated": "2026-10-19T17:37:11.673Z",
    "quality": {
      "l30DaysTotalCalls": 3,
      "l30DaysUniquePayers": 3,
      "lastCalledAt": "2026-10-19T17:37:11.366Z"
    },
    "resource": "https://saylorinnovations.com/api/kb/prompt-injection-defense",
    "serviceName": "Saylor Innovations Guide Library",
    "tags": [
      "prompt-injection",
      "agent-security",
      "llm-security",
      "tool-authorization",
      "owasp"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Prompt injection defense for agent workflows - trust boundaries, content labeling and external authorization"
}

What the leaf hashes

{"body":"489b58c2bbf635bcea55bf0084c00b7a1089afb97ed90dd8966d3d9692511ed7","id":120236,"kind":"listing","method":"baseline/1","observed_us":1793025617525734,"prev":null,"subject":"x402_bazaar:https://saylorinnovations.com/api/kb/prompt-injection-defense","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).
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Day root: 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained: 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published: On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON