Evidence row 2201434

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/software/npm-package-preflight"
    ]
  ],
  "name": "NO HANDS AI",
  "owner_address": "0x94f751f04b98507d31b500b7ed50be68a1514873",
  "raw": {
    "accepts": [
      {
        "amount": "15000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "assetTransferMethod": "eip3009",
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x94F751f04b98507D31b500b7Ed50bE68A1514873",
        "scheme": "exact"
      }
    ],
    "description": "Check npm package metadata, maintenance signals, deprecation, license, dependencies, and OSV vulnerabilities.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "package": "express",
              "version": "4.18.2"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "assessment": {
                "decision_hint": "No deprecation or known OSV vulnerability was found for this exact version.",
                "flags": [],
                "risk_level": "low",
                "risk_score": 0
              },
              "fetched_at": "2026-07-24T00:00:00.000Z",
              "limitations": [
                "OSV results cover disclosed vulnerabilities and cannot prove a package is safe.",
                "This does not execute, install, or inspect package tarball contents or lifecycle scripts."
              ],
              "metadata": {
                "dependency_count": 1,
                "deprecated": null,
                "homepage": null,
                "integrity": null,
                "latest_version": "4.18.2",
                "license": "MIT",
                "maintainers": [],
                "optional_dependency_count": 0,
                "peer_dependency_count": 0,
                "publish_age_days": 101,
                "published_at": "2026-07-24T00:00:00.000Z",
                "repository": null
              },
              "package": "express",
              "product": "npm-package-preflight",
              "provenance": {
                "npm": "https://www.npmjs.com/package/express/v/4.18.2",
                "osv": "https://osv.dev/"
              },
              "requested_version": "4.18.2",
              "resolved_version": "4.18.2",
              "schema_version": "1.0",
              "vulnerabilities": []
            },
            "type": "json"
          }
        },
        "routeTemplate": "/v1/x402/software/npm-package-preflight",
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "package": {
                      "description": "npm package name, including an optional scope.",
                      "example": "express",
                      "maxLength": 214,
                      "minLength": 1,
                      "pattern": "^(?:@[A-Za-z0-9][A-Za-z0-9._~-]*/)?[A-Za-z0-9][A-Za-z0-9._~-]*$",
                      "type": "string"
                    },
                    "version": {
                      "description": "Exact npm version or latest. Defaults to latest.",
                      "example": "4.18.2",
                      "maxLength": 80,
                      "minLength": 1,
                      "type": "string"
                    }
                  },
                  "required": [
                    "package"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "additionalProperties": true,
                  "type": "object",
                  "x-schema-authority": "STRUCTURED_PRODUCT_RESULT",
                  "x-schema-family": "STRUCTURED_PRODUCT_RESULT"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-11-02T02:37:02.673Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-11-02T02:37:01.955Z"
    },
    "resource": "https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/software/npm-package-preflight",
    "serviceName": "NO HANDS AI",
    "tags": [
      "x402",
      "no-hands-ai",
      "software-security"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Check npm package metadata, maintenance signals, deprecation, license, dependencies, and OSV vulnerabilities."
}

What the leaf hashes

{"body":"baf3186f5808f68c2fdaa0eaab083390d38dec80324f189f72126d2e344d784a","id":2201434,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646804939948,"prev":null,"subject":"x402_bazaar:https://nohands-coinbase-bazaar.bytoken2023.workers.dev/v1/x402/software/npm-package-preflight","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-02 (444186 rows).

1. 0xee515cdc66bc88294dfa06fd2b7829db0b0c4a73036629c1a95cb54560992000
2. 0x43a36ee67111957d2abd9525091f1bf61f25dcfab89bb04078ef78a84288dacc
3. 0x645f3532ec4f227fdbeb5f1470ddc471b7ee4cb9a1fb182f5f8185d3b57a061c
4. 0x707b30abec4d3ef96513fb979642737c259149169f99e2f1a767c5f677499e8c
5. 0xf7265b907d1866579c18113d140699818bb66fab72819f446903b54feb6ea7d1
6. 0x462d8cedd1edc65ca19382f17bea58215261adb31788803efcba04dfae02b45d
7. 0xb86969a284edd3f29330da164667da84ca4a9aed4dbb5e08413456942aa107a3
8. 0xb6ad4cbdcc53d5e71563703e39187791197c781a1ceb0abb0099c0875f1906ba
9. 0x3deae1fbc918caa35d096c14d5ebded937b4adf80108de8ae498c42d1231d9e5
10. 0x289d10558b458eda3cc9917551191f15d289cb49c8cb0be546d2d23d012e6782
11. 0x151bd83170434ccd04f82906ef73350feadc28309b6f1874e3bc7fe465fe848f
12. 0x244e5498c1a18cb79272c8888907c216b04d0ef4381a107b2d329eb22383048b
13. 0x6a66db154e32d45aa1f1ce72719d9372fd5cdf4add16d249006bd3cdb0f7c074
14. 0xbb465466dac90179fd91fd4d3b6985e80736d1ab4662dc57a78b5e5098d6f074
15. 0xde6a8fd6590b70565baa6078cbc8add8d94950fe959ebaf8c3716adcdbd78aa8
16. 0x6dd7e4db65395e8670c7c2747d44fec79e03305934ef4746bf5dbca04ec6ec49
17. 0xec5d643575d83c9e07e65deeef71943b53cbf3007e7e2b9a6ef414081509b0cc
18. 0x252cce55f1a3d5391c16f82d7f62494429a5f69b03486d4cfcfb7b2c96d6c884

Day root

0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1

Chained

0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2

Published

On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af