← The evidence ledger
Evidence row 1507931
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://verdict.kechlab.com/v1/instruction-guard
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- b9771e44c43b456c16d39a00ac780dc3de33c4acff9a1274f37c7b683b1934ed
- Leaf
- 0x6032cdfc01985e112f66aaa6b8ebdf48141bd3559c5f3633a7b0a3c690e8142d
What was observed
{
"endpoints": [
[
"x402",
"https://verdict.kechlab.com/v1/instruction-guard"
]
],
"name": "Verdict 402",
"owner_address": "0xb36c56a749f81ffeb44a134082dd4744e1d254eb",
"raw": {
"accepts": [
{
"amount": "8800",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xb36c56A749f81FFeb44a134082DD4744E1d254Eb",
"scheme": "exact"
}
],
"description": "Before handing a user message to an assistant: does it try to push the assistant off its task or to pull out its hidden setup text? Code spots known phrases, encoded blocks and invisible characters; the engine reads disguised requests (role-play, fiction, rewordings). Returns allow, review or block.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"assistant_role": "customer support assistant",
"prompt": "What are your opening hours on Saturdays?"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"mode": "instruction-guard",
"paid_sats": 10,
"payment_hash": "x402:<sha256 hex>",
"receipt": {
"payload": {
"at": "<ISO 8601 time>",
"kid": "<signing key id>",
"mode": "instruction-guard",
"payment_hash": "x402:<sha256 hex>",
"v": 1,
"verdict_sha256": "<sha256 hex of the verdict>"
},
"signature": "<base64url Ed25519 signature>"
},
"verdict": {
"decision": "allow",
"reasons": [],
"rule": "block if 2 or more signals, or bypass >= 0.8, or extraction >= 0.8 ; review if one signal or a score >= 0.4 ; otherwise allow",
"scores": {
"bypass": 0.01,
"disguised": 0.02,
"extraction": 0.01
},
"signals": []
}
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"assistant_role": {
"description": "(optional) the role of the assistant, for example customer support for a bank",
"type": "string"
},
"prompt": {
"description": "the user message to check before passing it to the assistant",
"type": "string"
}
},
"required": [
"prompt"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-31T12:32:15.369Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-10-31T12:32:14.762Z"
},
"resource": "https://verdict.kechlab.com/v1/instruction-guard",
"serviceName": "Verdict 402",
"tags": [
"prompt-injection",
"guardrail",
"ai-agents"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Before handing a user message to an assistant: does it try to push the assistant off its task or to pull out its hidden setup text? Code spots known phrases, encoded blocks and invisible characters; the engine reads disguised requests (role-play, fiction, rewordings). Returns allow, review or block."
}What the leaf hashes
{"body":"b9771e44c43b456c16d39a00ac780dc3de33c4acff9a1274f37c7b683b1934ed","id":1507931,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793472705841074,"prev":null,"subject":"x402_bazaar:https://verdict.kechlab.com/v1/instruction-guard","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (246033 rows).
- 0x60324dec5e1173e051aaeee5ef48d182beec0837030a88b7ee646f6e01d74f14
- 0x17edee5525047d5e54d17826b4b01eeaa1e1ac2a079fb6d037cd777c2d6e3718
- 0x654d61565b739290998db41ff88ed8a7b2bec3bb4450975e1adc9fc3ef1b7138
- 0x516a8a9af59b6e1b4c7ca936a4d33d046425c8d2c7e26826b158182a460b5e45
- 0x6f4db1423fca69dd69d1fbc147d96d5fc546ba2930045aa63cc561db5dffc30b
- 0xa7ba1d46c553b7e3ec15f407cab995a486cca14e547a588c9b44bf28deb06696
- 0xe5258c29b5e904beca6b6d328c8d8bf5d2d3b8e6d3b1a9afa877212aee684fa5
- 0x094e94aa6eba2a458f838565485eeeb09ae8a0ec98ee679af47ab06d0f4ac215
- 0x69cc40bddf1179236f5cb4b24b989e7a59276fe9183ca92e1219aad95ee88426
- 0xf9a4dda2c11159aa9a812bff372d0b37096e7d57f1b1d868f5df504ac17d4275
- 0x35dd700307c7b96fcdc54dce42117e1dc30c97fbfe046cdd000d4db21d017fa2
- 0xb050fb959229ce2d2752a2e58057828b1a49fa3aa1ed7ec678a5298072e25c59
- 0x238075122bf391de34d3a894036bb855e1137942648f00143f9a686a726fcddd
- 0xe765fc7bdfb534be348bf6984775b8261507431e58900f7a1ab269c53c5b1e8b
- 0xb9a00c724331b305deaa876d5d2baf53b847ff3c7ce37abb0ae1653b2534aad5
- 0xad4540f06e3fdfe46524d8592f8d854d4849e16217bc047eaf024f0abebe34b0
- 0xa00a931d72706fa2402bfc9b441a12eb7c6a61ff42a542916106e3637177f101
- 0x59f83f7228f07febe2780660e422e171b0359b8aa031ee3be07e991118130c15
- Day root
- 0x24463725d1c0d9894bd6123691d532547aaa79f0762c0e45aa6a68acf1fd71ab
- Chained
- 0x7d4824ff313dee7252a46f9d5c37b452851deb6c9f24a40c2f74ee0e53c82980
- Published
- On Arc Testnet, block 70093156: 0xedb7b832f4ebf6781b5ecd2ed241c435b862f4d3761541fa31adc1831b8c44a0