← The evidence ledger
Evidence row 2200667
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/agent/capability-security-preflight
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- be5e4fb29d85ad5c0147bffde35f88b7422c730a642e1526c0ddd239eb1f9e68
- Leaf
- 0xafc688b1b826d32e9726d58d9d80d8e538d03eee77b55c99bc6e6cf6a2eb0b3c
What was observed
{
"endpoints": [
[
"x402",
"https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/agent/capability-security-preflight"
]
],
"name": "NO HANDS AI",
"owner_address": "0x94f751f04b98507d31b500b7ed50be68a1514873",
"raw": {
"accepts": [
{
"amount": "100000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x94F751f04b98507D31b500b7Ed50bE68A1514873",
"scheme": "exact"
}
],
"description": "Combine selected public agent-card, repository, package, domain, OpenAPI and unpaid x402 observations. Advisory report with explicit missing or unavailable checks; no target payment or enforcement is performed.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"domain": "github.com",
"github_owner": "cloudflare",
"github_repo": "workers-sdk",
"identifier": "https://nohands-coinbase-bazaar.bytoken2023.workers.dev",
"npm_package": "express",
"npm_version": "4.18.2",
"openapi_url": "https://nohands-coinbase-bazaar.bytoken2023.workers.dev/openapi.json",
"target_type": "api",
"x402_url": "https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/endpoint-preflight?url=https%3A%2F%2Fexample.com%2Fpaid-api"
},
"type": "http"
},
"output": {
"example": {
"checks": [
{
"check": "agent_card",
"evidence": {},
"provider_called": false,
"provider_failure": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"AGENT_CARD_URL_MISSING"
],
"status": "unavailable"
},
{
"check": "github_repository_health",
"evidence": {
"agent": null,
"domain": null,
"fingerprint_sha256": null,
"product": "github-repository-health",
"repository": {
"archived": null,
"full_name": null,
"pushed_at": null
},
"resolved_version": null,
"risk_level": "low",
"risk_score": 0,
"x402": null
},
"provider_called": true,
"provider_failure": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"GITHUB_REPOSITORY_HEALTH_PASS"
],
"status": "pass"
},
{
"check": "npm_package_preflight",
"evidence": {
"agent": null,
"domain": null,
"fingerprint_sha256": null,
"product": "npm-package-preflight",
"repository": null,
"resolved_version": "4.18.2",
"risk_level": "low",
"risk_score": 0,
"x402": null
},
"provider_called": true,
"provider_failure": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"NPM_PACKAGE_PREFLIGHT_PASS"
],
"status": "pass"
},
{
"check": "domain_trust",
"evidence": {
"agent": null,
"domain": "github.com",
"fingerprint_sha256": null,
"product": "domain-trust-preflight",
"repository": null,
"resolved_version": null,
"risk_level": "low",
"risk_score": 0,
"x402": null
},
"provider_called": true,
"provider_failure": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"DOMAIN_TRUST_PASS"
],
"status": "pass"
},
{
"check": "openapi_spec",
"evidence": {
"agent": null,
"domain": null,
"fingerprint_sha256": "4f519b6dffc2380806c3f6fb52a2a42dacdefca0cc24934172db580fc8cb5456",
"product": "openapi-spec-preflight",
"repository": null,
"resolved_version": null,
"risk_level": "low",
"risk_score": 5,
"x402": null
},
"provider_called": true,
"provider_failure": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"NO_SECURITY_SCHEMES"
],
"status": "pass"
},
{
"check": "x402_endpoint",
"evidence": {
"agent": null,
"domain": null,
"fingerprint_sha256": null,
"product": "x402-endpoint-preflight",
"repository": null,
"resolved_version": null,
"risk_level": "low",
"risk_score": 0,
"x402": {
"accepts": [
{
"amount_usdc": 0.015002,
"network": "eip155:8453",
"scheme": "exact"
}
],
"version": 2
}
},
"provider_called": true,
"provider_failure": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"X402_ENDPOINT_PASS"
],
"status": "pass"
}
],
"decision": "REVIEW",
"decision_id": "cap_20261101000000_g98",
"fail_closed": false,
"generated_at": "2026-11-01T00:00:00.000Z",
"policy_version": "agent-capability-security-v1",
"pricing_version": "x402-pricing-v2-resource-binding-20260910",
"provider_failure_applicable": true,
"provider_failure_detected": false,
"provider_failure_reason_codes": [],
"reason_codes": [
"AGENT_CARD_URL_MISSING",
"GITHUB_REPOSITORY_HEALTH_PASS",
"NPM_PACKAGE_PREFLIGHT_PASS",
"DOMAIN_TRUST_PASS",
"NO_SECURITY_SCHEMES",
"X402_ENDPOINT_PASS"
],
"summary": {
"failed": 0,
"passed": 5,
"unavailable": 1,
"warned": 0
},
"target": {
"identifier": "https://nohands-coinbase-bazaar.bytoken2023.workers.dev",
"type": "api"
}
},
"type": "json"
}
},
"routeTemplate": "/v1/x402/agent/capability-security-preflight",
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"agent_card_url": {
"example": "https://base-agent-preflight.bytoken2023.workers.dev",
"maxLength": 2048,
"pattern": "^https?://",
"type": "string"
},
"domain": {
"example": "github.com",
"maxLength": 253,
"pattern": "^(?:[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?\\.)+[A-Za-z]{2,63}$",
"type": "string"
},
"github_owner": {
"example": "cloudflare",
"pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$",
"type": "string"
},
"github_repo": {
"example": "workers-sdk",
"pattern": "^[A-Za-z0-9._-]{1,100}$",
"type": "string"
},
"identifier": {
"description": "Human-readable package, repository, agent, API, or capability identifier.",
"example": "https://base-agent-preflight.bytoken2023.workers.dev",
"maxLength": 512,
"minLength": 1,
"type": "string"
},
"npm_package": {
"example": "express",
"maxLength": 214,
"minLength": 1,
"type": "string"
},
"npm_version": {
"example": "latest",
"maxLength": 80,
"minLength": 1,
"type": "string"
},
"openapi_url": {
"example": "https://base-agent-preflight.bytoken2023.workers.dev/openapi.json",
"maxLength": 2048,
"pattern": "^https?://",
"type": "string"
},
"target_type": {
"description": "Capability type being evaluated.",
"enum": [
"agent",
"package",
"repository",
"api",
"capability"
],
"example": "agent",
"type": "string"
},
"x402_url": {
"example": "https://base-agent-preflight.bytoken2023.workers.dev/v1/x402/base/alpha-risk",
"maxLength": 2048,
"pattern": "^https?://",
"type": "string"
}
},
"required": [
"target_type",
"identifier"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": true,
"type": "object",
"x-schema-authority": "STRUCTURED_PRODUCT_RESULT",
"x-schema-family": "STRUCTURED_PRODUCT_RESULT"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-11-02T10:46:59.077Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-11-02T10:46:58.859Z"
},
"resource": "https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/agent/capability-security-preflight",
"serviceName": "NO HANDS AI",
"tags": [
"x402",
"no-hands-ai",
"agent-tools"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Combine selected public agent-card, repository, package, domain, OpenAPI and unpaid x402 observations. Advisory report with explicit missing or unavailable checks; no target payment or enforcement is performed."
}What the leaf hashes
{"body":"be5e4fb29d85ad5c0147bffde35f88b7422c730a642e1526c0ddd239eb1f9e68","id":2200667,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646797897389,"prev":null,"subject":"x402_bazaar:https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/agent/capability-security-preflight","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (444186 rows).
- 0xafc686ea4b5c4ac99caccbc6d941ee294bf746a51a8b917d19c9126b3f2111ec
- 0xaefd7a23c684237a66853ef34635e33a49255e9494c3215eff126f8cbd998677
- 0x9872a708c2e792e5261aff252a0da46bda0ea0633edb068e7533bb6c53ac95d1
- 0x64793fcde6dc0fb3c42b961b7bd88df8cc467b180c9c5859b75e0c6d3a887510
- 0x472e7dcb675cde5868001f4cb90a12066f8a2696c504e25b19a60374b57d588e
- 0x2a10b3f2056c96c6594a01ea3f3126ccd8d33f72ef1ea5c727317f990331517e
- 0x30610b249433daa803a405fbdb1b6a73ad995852703cba0e143ddf76f892bfe6
- 0xfb6db425c39ce88b3735ddc5a84342980e1946eafe2388f23ba73222e21eabdd
- 0x6e9d87a04fef00c22fa18287ecff0a67329b2220ad6c13e5b427555a547e1c4f
- 0x7e7a2c5f72d9593776258f7bb00b74f7eb7c8c48d9fd091a0cfe5d5524f21f45
- 0xb2b170d7ad5dcf3e55a540b203eea738dca48e14c97deefdf470883ad4b9084c
- 0x3f5b8a46d4602f78a712f9446b064f32836e36fd6c23e6658582d1139ccd321f
- 0x026aca682cb5dc6926296949fd7c047905eb55f048c3a7c3bfbbb67e9d07fee8
- 0x2f8469a138f90dfcfc93d4f817bc8f20341a871e08f629fe27a2cd40dbfeb340
- 0x793184605629cd36ba80a07cbe115ca35e8923297bf024260c6f5c06b255f638
- 0x2922573a524a0694086782ac45fa3083d3fc3f6a2a479b2105e1e2f06b2916f7
- 0x07ad80c0c234ecea379a2f4450dfd0804db049dbc62abe77af6306049ca6b6c2
- 0x98cbbf2c68ab4c0b4db782aeb88bea1f30b02178cf8b5d3d24a931d19492ea6d
- 0x252cce55f1a3d5391c16f82d7f62494429a5f69b03486d4cfcfb7b2c96d6c884
- Day root
- 0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1
- Chained
- 0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2
- Published
- On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af