Evidence row 123810

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://verdict.kechlab.com/v1/tool-output-guard"
    ]
  ],
  "name": "Verdict L402",
  "owner_address": "0xb36c56a749f81ffeb44a134082dd4744e1d254eb",
  "raw": {
    "accepts": [
      {
        "amount": "13200",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0xb36c56A749f81FFeb44a134082DD4744E1d254Eb",
        "scheme": "exact"
      }
    ],
    "description": "Tool results (MCP servers, APIs, search, file reads) are untrusted content the agent re-reads. Detects a result that gives orders to the agent, strays from what the tool should return or asks to send data (tool poisoning). Returns allow, review or block.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "output": "Paris: 14 C, light rain, wind 12 km/h.",
              "purpose": "Current weather for a city",
              "tool_name": "get_weather"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "mode": "tool-output-guard",
              "paid_sats": 20,
              "payment_hash": "x402:<sha256 hex>",
              "receipt": {
                "payload": {
                  "at": "<ISO 8601 time>",
                  "kid": "<signing key id>",
                  "mode": "tool-output-guard",
                  "payment_hash": "x402:<sha256 hex>",
                  "v": 1,
                  "verdict_sha256": "<sha256 hex of the verdict>"
                },
                "signature": "<base64url Ed25519 signature>"
              },
              "verdict": {
                "decision": "allow",
                "reasons": [],
                "rule": "block if data-sending request >= 0.7, or orders to the agent >= 0.7 with off-topic or sending >= 0.5 ; review if any score >= 0.4 ; otherwise allow",
                "scores": {
                  "addresses_agent": 0.01,
                  "exfiltration": 0.01,
                  "off_purpose": 0.02
                }
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "output": {
                      "description": "the result returned by the tool",
                      "type": "string"
                    },
                    "purpose": {
                      "description": "(optional) what the tool is supposed to return",
                      "type": "string"
                    },
                    "tool_name": {
                      "description": "(optional) tool name",
                      "type": "string"
                    }
                  },
                  "required": [
                    "output"
                  ],
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-20T13:33:10.057Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-20T13:33:09.454Z"
    },
    "resource": "https://verdict.kechlab.com/v1/tool-output-guard",
    "serviceName": "Verdict L402",
    "tags": [
      "tool-poisoning",
      "mcp",
      "ai-agents"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Tool results (MCP servers, APIs, search, file reads) are untrusted content the agent re-reads. Detects a result that gives orders to the agent, strays from what the tool should return or asks to send data (tool poisoning). Returns allow, review or block."
}

What the leaf hashes

{"body":"a5d80f6005a0a2f7c74931a3938da0db7238da009229c429c6dc39c12b69d687","id":123810,"kind":"listing","method":"baseline/1","observed_us":1793025623738949,"prev":null,"subject":"x402_bazaar:https://verdict.kechlab.com/v1/tool-output-guard","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x8111a86910a358433091195ab8e5d175f1046ec0e16b3d74a4faf03f077cf96a
2. 0xa66b8f51e9f11f4b8a9f4eb0ed336c5f69e22112afdd626f1022474c535e7c48
3. 0x806b9eb9126ece95407f7910efc556ed7d07560b4765992d137ceebf80187132
4. 0x4ae977f5200448d69253b03d741aa0ed5c73bf85b39303d9ea0a7af5725b0621
5. 0x1fe1f5186a5e0bf05bafbc535144fea79aba2cf4e2ed248ef75e0f1883f2514b
6. 0x086e70b1bc4376a83b3808f6070ae269e84d579be9bc933e27f8b5c7f6d0ff73
7. 0x84baafa15d8fe8a4beceab44e24a92ae0bca89a39db67c10f48051ac1088ece3
8. 0x1c7d5d667dbaf02817a5f42fc6c683a407834c8853e35fe9947ff62a365b5741
9. 0x947bf51fe747d6f31e2541b7a83a5299be25717c13b588d8ef64a531b5470529
10. 0xa6bf3e233d964bf47c35e307fb1e82a9db46b720ed0d1a887fab65896dbfda9a
11. 0xb998e012b473bde18346485cd0b7b8b31ab48d5f22ba9bc660bb2e523161e255
12. 0x08155d70132f82e370214fc5b72194dfa6f5e57670b7bcf74776e8418302897e
13. 0x4d2ee986a690e903126f449b4e9e62d5572b350357ab4496a83488949b131c29
14. 0x0eff463856b0992d53ab7d8c0b97c71541413358bdd445710c1e4b6aeb4d8f78
15. 0x7eb603d37f0f22dae1ea013e391889906ffc0139ff26e25b044bee38eec8f9b2
16. 0x2b6e23e3624a1b66e1d2298cfbce99a93ce6b13d24a58112a71802d79c5f7a76
17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae