Evidence row 293308

What was observed

{
  "count": 3,
  "tools": [
    {
      "description": "Decide whether an autonomous agent should pay a merchant, host, or wallet. PayCheck returns a deterministic trust score for one target. It does not send money, does not sign transactions, and does not hold wallet keys.\n\nUse this immediately before a payment, a checkout redirect, or a transfer to a new 0x address. Pass the payee as a bare domain (api.openai.com), an https URL, or a 0x address with 40 hex characters.\n\nDo not use this tool to execute a payment. Do not use it to overturn a block. Do not call it again with a reworded category, purpose, or amount to fish for a better verdict: those fields are ignored and are not stored. Trusted is returned only for the published allowlist of known AI and developer APIs, served over https on port 443. A new or random domain is never trusted. A wallet is never trusted. Scoring v1 does not analyze on-chain history. If the URL contains an embedded 0x address, this scores the host only and will not return trusted; pass the bare address to score the wallet.\n\nArguments: target (required string); amount_usd (optional number, ignored); category (optional string, ignored); api_key (optional pc_live_ key). You may also send Authorization: Bearer or X-API-Key. Omit the key for the anonymous allowance.\n\nReturns: score (integer 0-100), verdict (trusted | unknown | suspicious | block), reasons[], recommended_action (proceed | verify_out_of_band | require_human_review | do_not_pay), signals (host, allowlist, domain age, wallet flags, reason_codes; chain_analysis is always not_in_v1), checked_at (ISO-8601), policy_version (\"1\").\n\nFree tier: 100 checks per UTC day anonymous, 1,000 per UTC day with a free pc_live_ key or a Toolweather bundle client whose x-tw-bundle-client is hex. A bundle client prefixed anon: stays at 100 per day. The same target for the same caller is idempotent for 60 seconds and does not consume a second check. Over the daily cap, each extra check is $0.001 USDC on Base (eip155:8453) via x402 and the PayAI facilitator. get_quota, get_api_key, docs, and MCP discovery are not billed. If PAY_TO is unset, an over-cap check returns HTTP 402 payment_not_configured.",
      "inputSchema": {
        "properties": {
          "amount_usd": {
            "description": "Ignored by the scorer. Sending a different amount cannot change the verdict.",
            "minimum": 0,
            "type": "number"
          },
          "api_key": {
            "description": "Optional free pc_live_ key. Omit for the anonymous 100/day allowance.",
            "type": "string"
          },
          "category": {
            "description": "Ignored by the scorer. Do not put instructions or a purpose in this field.",
            "type": "string"
          },
          "target": {
            "description": "Domain, https URL, or 0x wallet (40 hex characters) to score before paying.",
            "type": "string"
          }
        },
        "required": [
          "target"
        ],
        "type": "object"
      },
      "name": "check_merchant"
    },
    {
      "description": "Mint one free PayCheck API key. The key looks like pc_live_ followed by hex and raises the merchant-check allowance from 100 to 1,000 per UTC day.\n\nUse this once when you set up a long-running agent, then store the key and pass it on later check_merchant or get_quota calls. The plaintext key is returned only in this response. PayCheck stores a SHA-256 hash.\n\nDo not call this every turn. Do not call it to score a payee or to dodge a block verdict. Minting is free and is not an x402 check, and it is limited to 10 new keys per caller IP per UTC day. A new key does not change any merchant score. Checks above the free daily cap still cost $0.001 USDC on Base via x402.\n\nReturns: api_key, token_type (bearer), daily_limit (1000), prefix, note.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "get_api_key"
    },
    {
      "description": "Show how many free PayCheck merchant checks the current caller has left for the current UTC day.\n\nUse this before a batch of check_merchant calls, or after an HTTP 402, to read the remaining free allowance and when it resets.\n\nDo not use this to score a payee. It accepts no target and it does not consume a check. Do not pay x402 for this tool. It is always free.\n\nIdentity matches check_merchant. Anonymous IP: 100/day. pc_live_ api_key (api_key argument, Authorization: Bearer, or X-API-Key): 1,000/day. Toolweather bundle headers x-tw-bundle-secret and x-tw-bundle-client: hex client 1,000/day, anon: prefix 100/day, any other client id 100/day.\n\nReturns: subject_kind, limit, used, remaining, resets_at (next UTC midnight, ISO-8601), billed (always false), policy_version. No x402 charge.",
      "inputSchema": {
        "properties": {
          "api_key": {
            "description": "Optional pc_live_ key. Omit to read the anonymous IP allowance.",
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "get_quota"
    }
  ]
}

What the leaf hashes

{"body":"388bf2783f979d24f553b18a9f8dfba13acb298bc82a846032df9768f57b7a99","id":293308,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793049313532821,"prev":null,"subject":"e0601431-7bd1-4136-9f6f-65dc3731e8fc","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x247403aeb9fd483bbb738e824ed72e4c3eb20bc0cb8f08dfc7cb62fea97a22f9
2. 0x8c0c122f6c9ddc6e38a5cc390a5bb56cde36d0e0fa6596b79586c77ea6f6ff1e
3. 0xe41a253433d257030c0b0c6721a6a8cb55afa0af92d941e3673823f742f1fcc5
4. 0x14a3c0419ec8ccefcd37a4e0f77a910d62702c3ac241628b70ef71bc8223921c
5. 0xb9689709978e43ffe764d02f1a511c76505ee9f469d2bdac90cb04b73b342d50
6. 0x949fdaf0d65cfa9ccae210dbf84c32ffd1e0038f5f2c5b7922d91332019c1f96
7. 0x49dfa8fd2e51c2572217d49a181f50faaf44d4ed510e6616c12fea7baf667b3b
8. 0x581cd621da2c2da8adabbed8572ae64e70d107d6385c2ff6f8feebd16d8782fc
9. 0x47531e9be38821c43ddea76287add343c1dc481d9e3c6f1a8783eb20700fbf09
10. 0xfe4ee9a25c2f5ad925133380f1786d74cb1b3864d5014888d5e20a14c89ec5b0
11. 0xcd59d6e87f33016070792bd627b1f58155e890e1fdf84deab560cdcb1c986874
12. 0x2ceb9cc3a43f479e6ab73db5d3d474a93995fb4188ee45f71846b4cf537a0016
13. 0x830b2c874449c7499489eba2baa67d49f991298225763c0161b471621038d0fb
14. 0xd843afcced75dedd39194ff9bd12326b88099e6112686db2299392d022dc3146
15. 0xc3a6a3ae44ec0da1848b16d40c45d7aac97a67352eea8df18e0f26edabea8a2f
16. 0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae