← The evidence ledger
Evidence row 1508291
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://kushbitx.com/api/preflight
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 81c9096dd12bba04c4f86e1f19a03d53e9ae8add127bfd2ff446011b4f8a4895
- Leaf
- 0x153f72ac30972d582d485679ef9ce9caf4fa5e4f19c2a53288540e5c9ca4b16b
What was observed
{
"endpoints": [
[
"x402",
"https://kushbitx.com/api/preflight"
]
],
"name": "KushBitx AgentProof",
"owner_address": "0x0d68028d06af13379c872fee032568b4be712f22",
"raw": {
"accepts": [
{
"amount": "5000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x0d68028d06af13379C872FEE032568B4Be712f22",
"scheme": "exact"
}
],
"description": "One check before money moves on Base. Simulates the unsigned transaction, decodes approvals and transfers, screens the token and the recipient or spender, and applies a protected SpendGuard policy when given. Returns ALLOW, REVIEW or BLOCK with sourced findings. Fail-closed: no ALLOW unless every check ran. Does not detect prompt injection; use Protected SpendGuard for that.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"chainId": 8453,
"data": "0xa9059cbb000000000000000000000000d2db751a2fdba554706fb535438d81d3a0b4297900000000000000000000000000000000000000000000000000000000000003e8",
"from": "0x0d68028d06af13379C872FEE032568B4Be712f22",
"intent": "transfer",
"to": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"value": "0"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"checksPerformed": [
"simulation",
"calldata_decode",
"destination",
"recipient",
"token"
],
"checksUnavailable": [],
"findings": [],
"notChecked": [
"prompt_injection"
],
"onchainBlock": 37000000,
"reasonCodes": [],
"riskLevel": "low",
"verdict": "ALLOW"
},
"type": "json"
}
},
"schema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"properties": {
"input": {
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"amount": {
"description": "Amount in token units, for the record.",
"pattern": "^[0-9]+(\\.[0-9]{1,18})?$",
"type": "string"
},
"chainId": {
"description": "Base mainnet.",
"enum": [
8453
],
"type": "integer"
},
"data": {
"description": "Unsigned calldata.",
"pattern": "^0x([a-fA-F0-9]{2})*$",
"type": "string"
},
"from": {
"description": "Wallet that will sign; used for simulation.",
"pattern": "^0x[a-fA-F0-9]{40}$",
"type": "string"
},
"intent": {
"description": "What the agent means to do.",
"enum": [
"swap",
"transfer",
"approve",
"buy_token",
"contract_call"
],
"type": "string"
},
"policy": {
"additionalProperties": false,
"description": "Protected SpendGuard policy (send the agent key as Authorization: Bearer). Base USDC transfers only.",
"properties": {
"agentId": {
"type": "string"
},
"policyId": {
"type": "string"
},
"requestId": {
"type": "string"
}
},
"required": [
"policyId",
"agentId",
"requestId"
],
"type": "object"
},
"to": {
"description": "Transaction destination (contract or wallet).",
"pattern": "^0x[a-fA-F0-9]{40}$",
"type": "string"
},
"tokenAddress": {
"description": "Token to screen, when it is not the transaction destination (for example the token being bought).",
"pattern": "^0x[a-fA-F0-9]{40}$",
"type": "string"
},
"value": {
"description": "Native ETH value in wei.",
"pattern": "^[0-9]+$",
"type": "string"
}
},
"required": [
"chainId",
"to"
],
"type": "object"
},
"bodyType": {
"enum": [
"json"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"enum": [
"http"
],
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"enum": [
"json"
],
"type": "string"
}
},
"required": [
"type",
"example"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"iconUrl": "https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1792932625/bazaar-icons/5f03f796de469976.png",
"lastUpdated": "2026-10-30T21:01:07.498Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-10-30T21:01:07.234Z"
},
"resource": "https://kushbitx.com/api/preflight",
"serviceName": "KushBitx AgentProof",
"tags": [
"crypto",
"security",
"preflight",
"transaction",
"agents"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "One check before money moves on Base. Simulates the unsigned transaction, decodes approvals and transfers, screens the token and the recipient or spender, and applies a protected SpendGuard policy when given. Returns ALLOW, REVIEW or BLOCK with sourced findings. Fail-closed: no ALLOW unless every check ran. Does not detect prompt injection; use Protected SpendGuard for that."
}What the leaf hashes
{"body":"81c9096dd12bba04c4f86e1f19a03d53e9ae8add127bfd2ff446011b4f8a4895","id":1508291,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793472709246648,"prev":null,"subject":"x402_bazaar:https://kushbitx.com/api/preflight","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (246033 rows).
- 0x153f78452ae084be54c08b881056260de8c194f459e41d731675c7021e7091f4
- 0x232ed0800fef73b97755c49c955614f50510d48409a9727f1efc8a994f363a08
- 0x7e12672a4ef21723e79312c6820097c9868647e55cb479e3b60f49ee8781802d
- 0xb6cca73056f395006d812447be569303d925eebef7140678d23d16c770ad1504
- 0x1703338b9e6ed8b8951f10f8663c05e99bb3f9c32c0ab90a3259f890c519334a
- 0x0c2524c6e4c8a13fabf2ef4b0e5811215f092be784a762c34ca39d18f4fb102a
- 0xf3f82a7e9e3a7c5c6b114234b12cc762c764c23add262f8e9540f5d15f9192b5
- 0xd58c4f203c6b75bb232ce8edd0b20b0e535a8a417d9f0b4b531dd05d0c101a96
- 0x38b62e82cad16d9e1a9ec71228804097b89cc2d6ac50d7321d5ee1c55e9e91ce
- 0x80aabfd434dd97908caa2906f04617480681412609b55f308a93fd05fc19d604
- 0x9eeeaed55a6fc9584219c7ab56df5d19634d37df8116c8284f42772fb2c8bb06
- 0x8f05aaf697494ea816fabf6d5bccebf967b28efb61f3889bc06149d5f34720fc
- 0x2fb3353875d04f7bcf4a3e6c4b8752f251dbfb2f984efb332ea96d75516ac33b
- 0x500efd0d65e793a02397af46769412226d4deefe24ac497b68f3a32f6828638e
- 0x95ec49fc7f2c7be30422eaa1d0d6036836dd63ff46a8ed4027258fcf3eb8cf24
- 0x2bca4aa3c59fe9209016c64bd8b706423477e3407201a00165afde9abf6fee2b
- 0x37f13582abb3c002d51c2f190c312129cbc3a39754618fee2c75c2441bb1eb94
- 0x59f83f7228f07febe2780660e422e171b0359b8aa031ee3be07e991118130c15
- Day root
- 0x24463725d1c0d9894bd6123691d532547aaa79f0762c0e45aa6a68acf1fd71ab
- Chained
- 0x7d4824ff313dee7252a46f9d5c37b452851deb6c9f24a40c2f74ee0e53c82980
- Published
- On Arc Testnet, block 70093156: 0xedb7b832f4ebf6781b5ecd2ed241c435b862f4d3761541fa31adc1831b8c44a0