Evidence row 1261493

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://agentstall.nilesh-b54.workers.dev/v1/incident-reporting"
    ]
  ],
  "name": "AgentStall ZA",
  "owner_address": "0xa5b46001f5faafa9d7bb4efeea6c724d52567a02",
  "raw": {
    "accepts": [
      {
        "amount": "10000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 60,
        "network": "eip155:8453",
        "payTo": "0xA5b46001f5fAAfA9d7bB4efeEA6C724d52567a02",
        "scheme": "exact"
      }
    ],
    "description": "Data breach and cyber incident reporting obligations in South Africa, Nigeria, Kenya, Egypt, Ghana, Morocco, Rwanda, Uganda, Tanzania, Mauritius and Botswana: which regulators and people must be notified, the legal deadline (such as 72 hours) and the computed due time from discovery. Covers POPIA and FSCA/PA rules in South Africa, NDPA and ngCERT in Nigeria, and Kenya's Data Protection Act. Triage guidance, not legal advice.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "aware_at": "2026-10-22T08:15+02:00",
              "classified_at": "2026-10-22T11:00+02:00",
              "country": "ZA",
              "critical_infrastructure": "false",
              "jse_listed": "false",
              "material": "true",
              "personal_info": "true",
              "role": "responsible_party",
              "sector": "bank"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "notYetInForce": [
                {
                  "law": "Cybercrimes Act 19 of 2020, section 54"
                }
              ],
              "obligations": [
                {
                  "deadline": "within 24 hours of classifying the incident as material",
                  "dueAtSAST": "2026-10-23 11:00 SAST",
                  "law": "FSCA/PA Joint Standard 2 of 2024",
                  "notify": "Prudential Authority (PA)"
                },
                {
                  "deadline": "as soon as reasonably possible",
                  "law": "POPIA section 22",
                  "notify": "Information Regulator"
                }
              ]
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "aware_at": {
                      "description": "When you discovered the compromise (ISO 8601; no offset = UTC+2)",
                      "type": "string"
                    },
                    "classified_at": {
                      "description": "Financial institutions: when the incident was classified as material (ISO 8601)",
                      "type": "string"
                    },
                    "country": {
                      "description": "Country code: ZA (default), NG, KE, EG, GH, MA, RW, UG, TZ, MU or BW",
                      "type": "string"
                    },
                    "critical_infrastructure": {
                      "description": "Outside South Africa: are you a designated critical / vital infrastructure operator? Omit if unknown",
                      "type": "string"
                    },
                    "jse_listed": {
                      "description": "Is the organisation listed on the JSE? Default false",
                      "type": "string"
                    },
                    "material": {
                      "description": "Financial institutions: has the incident been classified as material? Omit if not yet assessed",
                      "type": "string"
                    },
                    "personal_info": {
                      "description": "Was personal information accessed or acquired by an unauthorised person? Omit if unknown",
                      "type": "string"
                    },
                    "role": {
                      "description": "responsible_party (default) or operator (you process the data for someone else)",
                      "type": "string"
                    },
                    "sector": {
                      "description": "South Africa only. Organisation type: general (any private business), bank, mutual_bank, insurer, financial_other (other FSCA-regulated institutions covered by Joint Standard 1 of 2023 or 2 of 2024, e.g. market infrastructures, certain FSPs, pension funds), public_body, ecsp (electronic communications service provider). Default general",
                      "type": "string"
                    }
                  },
                  "required": [],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1793382554/bazaar-icons/9978d6da98a52395.png",
    "lastUpdated": "2026-10-30T17:51:23.876Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-30T17:51:23.624Z"
    },
    "resource": "https://agentstall.nilesh-b54.workers.dev/v1/incident-reporting",
    "serviceName": "AgentStall ZA",
    "tags": [
      "south-africa",
      "africa",
      "tenders",
      "public-holidays",
      "cybersecurity"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Data breach and cyber incident reporting obligations in South Africa, Nigeria, Kenya, Egypt, Ghana, Morocco, Rwanda, Uganda, Tanzania, Mauritius and Botswana: which regulators and people must be notified, the legal deadline (such as 72 hours) and the computed due time from discovery. Covers POPIA and FSCA/PA rules in South Africa, NDPA and ngCERT in Nigeria, and Kenya's Data Protection Act. Triage guidance, not legal advice."
}

What the leaf hashes

{"body":"d93791ad0dfb2f583719e43e63cb1797424f466fe4507b266a42295d0940cb2f","id":1261493,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793385511948479,"prev":null,"subject":"x402_bazaar:https://agentstall.nilesh-b54.workers.dev/v1/incident-reporting","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-30 (243099 rows).

1. 0x06d21fa6f9a89b90aaa80be218aad8bf6aecd42bff4665768c89488ab29f31b9
2. 0x35b884dbc7370926ad3e463a52e408b010c0c4ed4bc186760c081c71b5e31644
3. 0x4d97e4ae507fbc8e3a8f80a9b260d25eb83583fbdf75909ef40ac35ee03242aa
4. 0xa88d5274d65283c1c66a353b752ffafed0fd98c993e03603868893331164d12b
5. 0x41880f63ca81bfead975004725d76eac99139a7b9d8f6b6cad9ecf5a36ceca4d
6. 0x93a5df573a42c8744b6179453c2b1fffb97466ab35ad2ae2a70e24caae42dd46
7. 0x94b39b833402cb7fb3c53ecf91a68ae27ef79d2f6869a45f58c22087a7ca939f
8. 0x4bfbbdbdd6f6416bc3203c45ec158ac3e9574b51654dda3a5b3f9ca6bbde156d
9. 0xdbed40d96a7c3c3fb703533616d8106aae9abcb8bbb9abc942b3ad600700bc16
10. 0xf5c6e2dd8db2705bf98acfbdf0a5125a8ed4aaa16f9301e1ccb9a8a456bf6855
11. 0x0d0f51a14a7f07d1c0d6abd92fc1a638238d6937dfd8e501999edc7ce624e6f8
12. 0x39658b3a41cfd54fe54a5c22facff2bff03e5a9589cbf560446200f0336fd0b5
13. 0x287d3fb38960cf3c4d3356b0e6240c982ffcd471f4e9b7f7d550363c3483d375
14. 0xa0c9900ba7512d3a576c15bf6cc53f55a0645d9bf9b4e2e4c1760d00af98e761
15. 0x2b7a05865245feaf40ea40b73e02d86357af2dcbac9c7b992f1420f5eaa15246
16. 0xe2a9872e1b6a01c55a7a8cc5c05c61f3933255db5c26b9c79be4011d28685b52
17. 0xb0c9ef42e725578748f3119c9dbebf2fc437266bda013df29f98ed3ebe621403
18. 0x30a81d8fcef4e8f9e2877c62796cfc5612fc1b251127d531dee28f8dbd5c5147

Day root

0x0826c7ad6039e06a2360ca0a4a3a4fe7f2626c6dc19f71a37599386f78b39875

Chained

0x36b4c8a1063758f0b8765fa1bdf75fa92fb543cc183add3e261880ee2bd1f822

Published

On Arc Testnet, block 69923247: 0x8704744146c6967c8abc9e9a99de4db7283b29e840922ea83a69b6fe776e6861