Evidence row 122053

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://stormap.ai/x402/v1/vendor_trust_profile"
    ]
  ],
  "name": "Stormap",
  "owner_address": "0x1260d8d1fd47e22416156b72ee75e97986f8ba70",
  "raw": {
    "accepts": [
      {
        "amount": "250000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0x1260d8d1fd47e22416156b72ee75e97986f8ba70",
        "scheme": "exact"
      }
    ],
    "description": "Use when a software vendor needs a first-pass security and privacy review from its domain: claimed certifications (SOC 2, ISO 27001, HIPAA…), whether it trains AI on customer data (with quote and page), subprocessors, DPA, data residency, SSO/SCIM/MFA and other security features, status page, and a 0-100 transparency score. Certifications are vendor claims, not verified audits. Errors: 400 bad_input, 502 site unreachable. Failed calls are not charged.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "domain": "notion.com"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "ai_training": {
                "quote": "Customer data is never used to train AI models by Notion or its subprocessors.",
                "stance": "does_not_train",
                "url": "https://www.notion.com/security"
              },
              "certifications_claimed": [
                {
                  "name": "SOC 2",
                  "source": "https://www.notion.com/security"
                },
                {
                  "name": "ISO/IEC 27001",
                  "source": "https://www.notion.com/security"
                }
              ],
              "checks": [
                {
                  "label": "Subprocessor list",
                  "passed": false,
                  "points": 15
                }
              ],
              "domain": "notion.com",
              "pages": {
                "privacy_policy": "https://www.notion.com/trust/privacy-policy",
                "status_page": "https://www.notion-status.com/",
                "trust_center": "https://www.notion.com/security"
              },
              "security_features": {
                "bug_bounty": true,
                "encryption_at_rest": true,
                "mfa": true,
                "penetration_testing": true,
                "scim": true,
                "sso_saml": true
              },
              "subprocessors": {
                "count": 0,
                "names": [],
                "url": null
              },
              "summary": "Very transparent: most security-review questions can be answered from public pages.",
              "transparency_score": 80
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "domain": {
                      "description": "Vendor domain, e.g. \"notion.com\".",
                      "type": "string"
                    }
                  },
                  "required": [
                    "domain"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "ai_training": {
                      "type": "object"
                    },
                    "certifications_claimed": {
                      "type": "array"
                    },
                    "checks": {
                      "type": "array"
                    },
                    "domain": {
                      "type": "string"
                    },
                    "pages": {
                      "type": "object"
                    },
                    "security_features": {
                      "type": "object"
                    },
                    "subprocessors": {
                      "type": "object"
                    },
                    "summary": {
                      "type": "string"
                    },
                    "transparency_score": {
                      "type": [
                        "integer",
                        "number"
                      ]
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-17T17:16:43.475Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-17T17:16:43.179Z"
    },
    "resource": "https://stormap.ai/x402/v1/vendor_trust_profile",
    "serviceName": "Stormap",
    "tags": [
      "web",
      "security",
      "ai-agents"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Use when a software vendor needs a first-pass security and privacy review from its domain: claimed certifications (SOC 2, ISO 27001, HIPAA…), whether it trains AI on customer data (with quote and page), subprocessors, DPA, data residency, SSO/SCIM/MFA and other security features, status page, and a 0-100 transparency score. Certifications are vendor claims, not verified audits. Errors: 400 bad_input, 502 site unreachable. Failed calls are not charged."
}

What the leaf hashes

{"body":"8fdb644e0ac76e83d8f2cf1327390674dd5acb32034b6b27c2932c3f25abb94c","id":122053,"kind":"listing","method":"baseline/1","observed_us":1793025620849515,"prev":null,"subject":"x402_bazaar:https://stormap.ai/x402/v1/vendor_trust_profile","subject_kind":"source_record"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.