Evidence row 532152

What was observed

{
  "count": 5,
  "tools": [
    {
      "description": "Simulate one unsigned Base transaction before an agent signs it. Runs eth_call and gas estimation on current chain state, decodes the intent (ERC-20 transfer, approve, NFT setApprovalForAll), flags unlimited approvals, calldata sent to a non-contract, zero-address targets, reverts and destination risk labels such as phishing or sanctions. Returns ALLOW, WARN, BLOCK or INCOMPLETE with findings. No key or signed transaction is requested. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "chain": {
            "enum": [
              "base"
            ],
            "type": "string"
          },
          "data": {
            "description": "Unsigned calldata.",
            "pattern": "^0x([a-fA-F0-9]{2})*$",
            "type": "string"
          },
          "from": {
            "description": "Optional sender used for simulation.",
            "pattern": "^0x[a-fA-F0-9]{40}$",
            "type": "string"
          },
          "to": {
            "description": "Transaction destination.",
            "pattern": "^0x[a-fA-F0-9]{40}$",
            "type": "string"
          },
          "valueWei": {
            "description": "Native ETH value in wei.",
            "pattern": "^[0-9]+$",
            "type": "string"
          }
        },
        "required": [
          "chain",
          "to"
        ],
        "type": "object"
      },
      "name": "preflight"
    },
    {
      "description": "Fast pre-payment sanity check for agents on Base: confirms the RPC reports Base mainnet (chain ID 8453) and that the official USDC contract has deployed code. No request body. Returns PASS or FAIL with both checks and a timestamp. It is not a token-risk report, transaction simulation or payment proof. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "quick_check"
    },
    {
      "description": "Free. Check a proposed Base USDC payment against a spending policy you supply (per-transaction limit, daily budget, human-approval threshold, allowed recipients) before money moves. Returns APPROVE, HUMAN_APPROVAL or BLOCK with findings. Advisory only: it never signs, holds keys or moves funds.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "agentId": {
            "type": "string"
          },
          "amount": {
            "type": "string"
          },
          "asset": {
            "enum": [
              "USDC"
            ],
            "type": "string"
          },
          "chain": {
            "enum": [
              "base"
            ],
            "type": "string"
          },
          "context": {
            "additionalProperties": false,
            "properties": {
              "agentProofDecision": {
                "enum": [
                  "ALLOW",
                  "WARN",
                  "BLOCK",
                  "INCOMPLETE",
                  "UNKNOWN"
                ],
                "type": "string"
              },
              "repeatCount": {
                "minimum": 0,
                "type": "integer"
              }
            },
            "type": "object"
          },
          "policy": {
            "additionalProperties": false,
            "properties": {
              "allowedRecipients": {
                "items": {
                  "pattern": "^0x[a-fA-F0-9]{40}$",
                  "type": "string"
                },
                "type": "array"
              },
              "blockUnknownRecipients": {
                "type": "boolean"
              },
              "maxPerTransaction": {
                "type": "string"
              },
              "maxRepeats": {
                "minimum": 1,
                "type": "integer"
              },
              "remainingDailyBudget": {
                "type": "string"
              },
              "requireHumanAbove": {
                "type": "string"
              }
            },
            "required": [
              "maxPerTransaction",
              "remainingDailyBudget",
              "requireHumanAbove",
              "maxRepeats",
              "allowedRecipients",
              "blockUnknownRecipients"
            ],
            "type": "object"
          },
          "recipient": {
            "pattern": "^0x[a-fA-F0-9]{40}$",
            "type": "string"
          },
          "requestId": {
            "type": "string"
          }
        },
        "required": [
          "agentId",
          "requestId",
          "chain",
          "asset",
          "recipient",
          "amount",
          "policy"
        ],
        "type": "object"
      },
      "name": "spendguard_evaluate"
    },
    {
      "description": "Token-risk report for one Base ERC-20 contract. Checks whether the token can be sold (honeypot simulation), buy/sell/transfer tax, owner privileges (mint, pause, blacklist, balance changes, proxy upgrades), holder concentration and DEX liquidity. Returns ALLOW, WARN, BLOCK or INCOMPLETE with scored findings and per-check coverage. INCOMPLETE means required evidence was unavailable, never zero risk. Read-only: never signs or trades. Paid tool: 0.001 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "address": {
            "description": "Base token contract address.",
            "pattern": "^0x[a-fA-F0-9]{40}$",
            "type": "string"
          },
          "chain": {
            "description": "Blockchain network.",
            "enum": [
              "base"
            ],
            "type": "string"
          }
        },
        "required": [
          "chain",
          "address"
        ],
        "type": "object"
      },
      "name": "token_risk"
    },
    {
      "description": "Verify one Base USDC payment onchain before an agent releases goods or credit. Reads the transaction receipt and checks the official USDC Transfer logs against the expected recipient, amount and optional sender. Returns VERIFIED, MISMATCH, FAILED or PENDING_OR_NOT_FOUND with block number, confirmations, the matching transfer and a Basescan link. Read-only: never moves funds. Paid tool: 0.00288 USDC per call on Base via x402 (exact scheme). An unpaid call returns the payment requirement and charges nothing.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "chain": {
            "enum": [
              "base"
            ],
            "type": "string"
          },
          "expectedAmount": {
            "description": "Expected USDC amount.",
            "pattern": "^[0-9]+(\\.[0-9]{1,6})?$",
            "type": "string"
          },
          "expectedFrom": {
            "pattern": "^0x[a-fA-F0-9]{40}$",
            "type": "string"
          },
          "expectedTo": {
            "pattern": "^0x[a-fA-F0-9]{40}$",
            "type": "string"
          },
          "txHash": {
            "pattern": "^0x[a-fA-F0-9]{64}$",
            "type": "string"
          }
        },
        "required": [
          "chain",
          "txHash",
          "expectedTo",
          "expectedAmount"
        ],
        "type": "object"
      },
      "name": "verify_payment"
    }
  ]
}

What the leaf hashes

{"body":"1d716faeb33986be1476cef209d7f09b178d24851e0377bb672747f003b00b6f","id":532152,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793126944180455,"prev":null,"subject":"e07891a4-80ed-4ec3-acaa-7f8aa1a8f825","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0x6d915b6a3bdbfd27fc1a75c7d26446f7e921c78cf7aa155af75098e5c4583eac
2. 0x9644ea79d32e1cf4051f750bbad5a304001f312752a041bed2a8951e3544b2c2
3. 0x048d36e99bcafd103ef9674afabfc47fb625ae5c26b98d32b66930bd0a105d79
4. 0xfd1d8e85543cf18918ef054b6c0feab1c5cbe938b8f2bed40872349745139508
5. 0xe8fc34fd1e36ce9a2d8b7334aa378eb216a79645aee92ddebe6fd7cdd89ebc5d
6. 0x6226384b5425035c43cd282c16b94aabac79a58f038ada987fdc6706e94a88bb
7. 0x4883c3332875a2a9b306dfd1addd8884ca10a7ed820829c1abc942cc4a65ecf0
8. 0xd4f667ea622b4a870ed6867ee2515069596d24d5430b686bc861a5838dafa32d
9. 0x5f185fe74ca0074e6e55b9f952ab66543de7f74fb27b2fc7114c9a020339b74b
10. 0x0c620ef247250b34019e2ced8741b3505fbbe8bdfdb8250b2f8d3916aa35c55e
11. 0xfac107c1c8084222245c143cec42507a805d975aa36d06859f2154d70b78a0be
12. 0xc78608c08428e27bbac3251f568868a865e1e442ea6f182a8fd2342173a5acaf
13. 0xa7e162a9119a39c37b96b3483510d3fd108f25676fe3a9584241629612b01526
14. 0xb2ae53d841a55a805fb4078b1a7d44e08a81aba4be3690bac3a5b4c366bf39da
15. 0x275720ecabb68df33eee92ae4fd70572a8d952d6c61c061c2869cfc3217aa5c5
16. 0x23cf9bb4337ee8be7fcae368fd69d24c62c11fb45882127b4cd919bb96a19996
17. 0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d
18. 0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4