Evidence row 120835

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://saylorinnovations.com/api/vuln/audit"
    ]
  ],
  "name": "Saylor Innovations Dependency Se",
  "owner_address": "0xa2a8df0f7caabea4e120a2568118f141569fc8aa",
  "raw": {
    "accepts": [
      {
        "amount": "10000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "assetTransferMethod": "eip3009",
          "facilitatorOnly": true,
          "memo": "saylor:vuln:audit",
          "name": "USD Coin",
          "note": "Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa",
        "scheme": "exact"
      },
      {
        "amount": "10000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
          "memo": "saylor:vuln:audit",
          "reference": "3KZsfjDvozeYQ5hw2VoJ8uTzZDpmbNufwfaP6AcZgACK",
          "session": "eyJhcnRpY2xlSWQiOiJ2dWxuOmF1ZGl0IiwicmVmZXJlbmNlIjoiM0tac2ZqRHZvemVZUTVodzJWb0o4dVR6WkRwbWJOdWZ3ZmFQNkFjWmdBQ0siLCJyZWNpcGllbnQiOiI3TFNqZnJKZjhmTnNCOFZBOXU3TjNXRW4yNXNtUUxwb2IzU3Z5VXZYYWN5NyIsIm1pbnQiOiJFUGpGV2RkNUF1ZnFTU3FlTTJxTjF4enliYXBDOEc0d0VHR2tad3lURHQxdiIsIm1pbkFtb3VudCI6MTAwMDAsImV4cCI6MTc5MjMyMTI5MzQ3MH0.epxSktGAwkKESUjuPitzh-6P6nXo-j1J-7dFXMqSRhY"
        },
        "maxTimeoutSeconds": 120,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7",
        "scheme": "exact"
      }
    ],
    "description": "Audit up to 50 dependencies against OSV in one call - vulnerable count, severity and needed upgrades",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "packages": "npm:lodash@4.17.15,pypi:requests@2.19.0"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "by_severity": {
                "HIGH": 1
              },
              "packages": 2,
              "results": [],
              "upgrades": [
                {
                  "package": "npm:lodash@4.17.15",
                  "severity": "HIGH",
                  "upgrade_to": "4.17.21"
                }
              ],
              "vulnerable": 1
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET",
                    "POST",
                    "PUT",
                    "PATCH",
                    "DELETE",
                    "HEAD"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "packages": {
                      "description": "comma list of ecosystem:name@version, e.g. npm:lodash@4.17.15,pypi:requests@2.19.0 (query)",
                      "type": "string"
                    }
                  },
                  "required": [
                    "packages"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "by_severity": {
                      "description": "By severity"
                    },
                    "checked_at": {
                      "description": "Time the check was run (UTC)",
                      "type": [
                        "string",
                        "null"
                      ]
                    },
                    "packages": {
                      "description": "Packages",
                      "type": "number"
                    },
                    "results": {
                      "description": "List of matching results",
                      "items": {
                        "type": "object"
                      },
                      "type": "array"
                    },
                    "source": {
                      "description": "Data source the values come from",
                      "type": [
                        "string",
                        "null"
                      ]
                    },
                    "upgrades": {
                      "items": {
                        "type": "object"
                      },
                      "type": "array"
                    },
                    "vulnerable": {
                      "description": "True when known vulnerabilities apply",
                      "type": "number"
                    }
                  },
                  "required": [
                    "packages",
                    "vulnerable",
                    "results"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "json",
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg",
    "lastUpdated": "2026-10-18T10:59:33.513Z",
    "quality": {
      "l30DaysTotalCalls": 3,
      "l30DaysUniquePayers": 3,
      "lastCalledAt": "2026-10-18T10:59:33.319Z"
    },
    "resource": "https://saylorinnovations.com/api/vuln/audit",
    "serviceName": "Saylor Innovations Dependency Se",
    "tags": [
      "security",
      "vulnerabilities",
      "dependencies",
      "osv",
      "cve"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Audit up to 50 dependencies against OSV in one call - vulnerable count, severity and needed upgrades"
}

What the leaf hashes

{"body":"d5bc83d7016dc53f65f4e34cdd405aaf8040d861eb5bd306bf0d7767e1383ef8","id":120835,"kind":"listing","method":"baseline/1","observed_us":1793025618877920,"prev":null,"subject":"x402_bazaar:https://saylorinnovations.com/api/vuln/audit","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x8629cb05a061495e521fa3eee2497d4303f045a4c80bfa600253ce911e22c5b1
2. 0x2fb0c5c3aef6495d3c0c836f3759a5a04aad7fe1f5b845bf186973eab0596b23
3. 0xa740133f6e78319dfdb1e68d49fe8c23d5900d3ca9399198d2a4e51df4b701c3
4. 0x9b39a82823b23ed77446acbc534711bd4bc43175c4d4e9b886a49bc2b155e29a
5. 0x8859c94bc3667ead8a677ca42bc8c1b9ba294b1677b288181c9536a8eb7b1386
6. 0xca74312c7d2e5c78b2075b81900939378bff0a0d2f11aa4dda8541262ac4ed42
7. 0xb1d8603c87c404d362872cf2200ba1c1c8f6f56c411815d82f531b343e864246
8. 0xaa644cdc7aae2538f9860d131147da59759cd9ff92cd8fb1a2d8177445e5633e
9. 0xd5e7fe5e22d0f721add84c87198cf47b769770c1756b2a9721525c366e108dbc
10. 0x0d847b9eb30e194e701d2d4f8af4f34ef43f6c033fe5e001b93f122bdbea7c80
11. 0xd6d2fb435c815b0341c19086a636cc9a706a6129405e2030054a243942b686fe
12. 0x146f43471a3bde6d8a04e87b6afd3ee6860c6e38a009f86aee705ce722b67748
13. 0x91c2ae93ec20c7fed5088112fe3941ca622dfb3f8f1022c4844726c361244bd4
14. 0x0eff463856b0992d53ab7d8c0b97c71541413358bdd445710c1e4b6aeb4d8f78
15. 0x7eb603d37f0f22dae1ea013e391889906ffc0139ff26e25b044bee38eec8f9b2
16. 0x2b6e23e3624a1b66e1d2298cfbce99a93ce6b13d24a58112a71802d79c5f7a76
17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae