← The evidence ledger
Evidence row 558327
Observed , by sync.agentic_market/1.
- Kind
- listing
- About
- source_record agentic_market:sicher-halowerk-com
- Recorded
- Previous row
- #547941
- Body SHA-256
- 126cf1d7a15b3eb90511601b5b1f69649ae0b6671b8fa3d492be6b519230721f
- Leaf
- 0x6b32d8b09ea847ba4ca88db0ee6bd8a8ae3676e657834bb42fdd4a20a411c302
What was observed
{
"endpoints": [
[
"x402",
"https://sicher.halowerk.com/v1/container-inspect"
],
[
"x402",
"https://sicher.halowerk.com/v1/cve-check"
],
[
"x402",
"https://sicher.halowerk.com/v1/hash-reputation"
],
[
"x402",
"https://sicher.halowerk.com/v1/jwt-verify"
],
[
"x402",
"https://sicher.halowerk.com/v1/license-check"
],
[
"x402",
"https://sicher.halowerk.com/v1/log-chain-verify"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-gnupg-detached-signature-verify"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-asn1-structure-diagnose"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-certificate-bundle-normalize"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-cms-envelope-encrypt"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-csr-self-signature-audit"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-dh-group-check"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-pkcs12-certificate-store-build"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-public-key-math-audit"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-rfc3161-request-build"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-tls12-cipher-policy-expand"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-openssl-x509-purpose-evaluate"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-sqlite-database-integrity-audit"
],
[
"x402",
"https://sicher.halowerk.com/v1/oss-zip-archive-inventory-audit"
],
[
"x402",
"https://sicher.halowerk.com/v1/provenance-verify"
],
[
"x402",
"https://sicher.halowerk.com/v1/sbom"
],
[
"x402",
"https://sicher.halowerk.com/v1/tls-chain"
],
[
"x402",
"https://sicher.halowerk.com/v1/webhook-signature"
]
],
"name": "sicher.halowerk.com",
"owner_address": null,
"raw": {
"caip2_networks": [
"eip155:8453"
],
"category": "",
"description": "",
"domain": "sicher.halowerk.com",
"endpoints": [
{
"description": "Reads the manifest and config of an OCI or Docker image straight from the registry — a few kilobytes, never the layers, and the image is never run. Returns the digest, the platforms a multi-arch index covers, every layer with its size and the command that produced it, and the runtime configuration: entrypoint, command, working directory, exposed ports, volumes and environment variable names.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "beispiel",
"group": "body",
"name": "image",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/container-inspect"
},
{
"description": "Queries OSV.dev for a list of packages with versions across npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist and the Linux distributions. For each package it returns the vulnerabilities found with their identifiers, severity and summary, and the single figure that decides what to do next: the lowest version that fixes all of them, derived from the fixed-version events in the affected ranges.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": false,
"group": "body",
"name": "include_details",
"required": false,
"type": "boolean"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "packages",
"required": false,
"type": "array"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/cve-check"
},
{
"description": "Queries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict. No endpoint for sample retrieval is called and no binary is downloaded. A missing record means unknown to these sources, not proven benign. VirusTotal is deliberately not used because its public terms do not permit redistribution in this paid product.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "094fd325049b8a9cf6d3e5ef2a6d4cc6a567d7d49c35f8bb8dd9e3c6acf3d78d",
"group": "body",
"name": "hash",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/hash-reputation"
},
{
"description": "Decodes a JWT and checks it in two layers. Structure and claims: expiry, not-before and issued-at against the current time with the clock skew you allow, issuer and audience against the values you expect, and the token lifetime. Signature: HMAC with a shared secret, or RSA, RSA-PSS and ECDSA against a PEM key or a JWKS you point at, with the kid matched to the right key.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"group": "body",
"name": "token",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/jwt-verify"
},
{
"description": "Looks up the declared licence of each package through deps.dev and sorts the result by the only question that matters for a closed, sold product: what does this licence demand. Permissive licences need attribution. Weak copyleft affects changes to the library itself. Strong copyleft can force disclosure of the whole work on distribution. Network copyleft such as AGPL and SSPL bites on operating the software as a service, which is the sharpest case for a paid API.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "packages",
"required": false,
"type": "array"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/license-check"
},
{
"description": "Recomputes every record hash from a canonical JSON representation of id, sequence, timestamp, previous_hash and payload, then checks that each record points to the hash of the record before it. If a root_hash is supplied, the same computed record hashes are folded into a deterministic binary Merkle tree with the last leaf duplicated on odd levels.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "records",
"required": false,
"type": "array"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "f6e5b0a2eeed0102fcdd3480a6f7a851bb55679f2d3c7e532df3780f46c1b426",
"group": "body",
"name": "root_hash",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "3",
"l30DaysUniquePayers": "3"
},
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/log-chain-verify"
},
{
"description": "Checks a detached OpenPGP signature against the bytes it claims to cover, using the pinned GnuPG build and nothing else. What comes back is the verdict in GnuPG's own terms, the fingerprint that actually signed, the signature timestamp, the algorithms used, and whether the key is expired or revoked. A wrong key, a tampered byte or a signature made by someone else each produce a distinct verdict rather than a bare false.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "-----BEGIN PGP PUBLIC KEY BLOCK-----\n\nmDMEaq1/cxYJKwYBBAHaRw8BAQdA1SVc3kWNOahbtF7NG/+r3J0FRi3eZttjwG4V\n3Q+87Ba0NUhBTE9XRVJLIFBydWVmdm9ybGFnZSA8cHJ1ZWZ2b3JsYWdlQGhhbG93\nZXJrLmV4YW1wbGU+iJMEExYKADsWIQRyU28SJU2LbSX4iJvvVEGQ4+pdywUCaq1/\ncwIbAwULCQgHAgIiAgYVCgkICwIEFgIDAQIeBwIXgAAKCRDvVEGQ4+pdy8MhAP9C\n8lCNPBS2EypohGv9TbqIt4muUHRgIqo2cbtoZCCH9QEAqUm1AMxHV1JtTTtuAN3H\nYBALXlpBeOwMfL3g7jCvSQk=\n=aSES\n-----END PGP PUBLIC KEY BLOCK-----\n",
"group": "body",
"name": "public_key_armored",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "-----BEGIN PGP SIGNATURE-----\n\niHUEABYKAB0WIQRyU28SJU2LbSX4iJvvVEGQ4+pdywUCaq1/cwAKCRDvVEGQ4+pd\ny/YLAQCcqZZLOV9guftS3z3AbKMfQ0fXNk69IaUk1/4XBBC8UAEAwXgKUJ501uNr\nw2AtQSLYn1PZ6F0pN3/LV27xaKoPkAs=\n=w0mv\n-----END PGP SIGNATURE-----\n",
"group": "body",
"name": "signature_armored",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "UHJ1ZWZ2b3JsYWdlIGZ1ZXIgZGVuIERpZW5zdCBvc3MtZ251cGctZGV0YWNoZWQtc2lnbmF0dXJlLXZlcmlmeS4KVW1sYXV0ZTogR3J1ZcOfZSwgTWHDnywgRnXDny4K",
"group": "body",
"name": "signed_data_base64",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"gnupg",
"p101"
],
"url": "https://sicher.halowerk.com/v1/oss-gnupg-detached-signature-verify"
},
{
"description": "Parses a definite-length binary artifact and returns every ASN.1 object it contains with its byte offset, nesting depth, header and content lengths, whether it is constructed, and the type as OpenSSL names it. This is the tool for the moment a certificate, key or signature is rejected with an unhelpful parse error and the question is which byte is wrong. Because offsets are exact, a diff against a known-good artifact localises the difference instead of describing it.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "MAgCAQUEA2FiYw==",
"group": "body",
"name": "der_base64",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.001",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "8",
"l30DaysUniquePayers": "5"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-asn1-structure-diagnose"
},
{
"description": "Accepts up to sixteen certificates in any PEM shape and returns a single normalized bundle. Duplicates are identified by their canonical DER encoding, not by the PEM text, so the same certificate supplied twice with different line wrapping, different header text or trailing whitespace collapses into one entry. The reply gives the input count, the unique count and the resulting bundle, which makes it usable as a preparation step before a trust store is built or shipped.",
"method": "POST",
"parameters": [],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-certificate-bundle-normalize"
},
{
"description": "Wraps the supplied bytes in a CMS EnvelopedData envelope using the pinned OpenSSL build, addressed to every recipient certificate you pass in. A single content-encryption key protects the payload and is itself encrypted once per recipient, so any one holder of a matching private key can decrypt, and nobody else can. The reply names the cipher actually used and the recipient count, so an agent can record what it produced rather than assume it.",
"method": "POST",
"parameters": [],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-cms-envelope-encrypt"
},
{
"description": "Runs the pinned OpenSSL build against a submitted certificate request and answers two questions a registration authority has to settle before it signs anything: does the request carry a valid self-signature over its own body, and what exactly is being requested. The reply names the subject, the public key parameters and every requested extension as OpenSSL parses them, so a policy check compares against the parsed request rather than the text an applicant supplied.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "-----BEGIN CERTIFICATE REQUEST-----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\nwOs=\n-----END CERTIFICATE REQUEST-----\n",
"group": "body",
"name": "csr_pem",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "4",
"l30DaysUniquePayers": "4"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-csr-self-signature-audit"
},
{
"description": "Runs the pinned OpenSSL build's parameter checks over a supplied finite-field Diffie-Hellman group and reports whether it passes, along with the detail output that says why. The point is to catch parameters that are syntactically fine but cryptographically unsafe before they reach a handshake: a non-prime modulus, a generator of small order, a group below the build's security level.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "-----BEGIN DH PARAMETERS-----\nMIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz\n+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a\n87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7\nYdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi\n7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD\nssbzSibBsu/6iGtCOGEoXJf//////////wIBAg==\n-----END DH PARAMETERS-----\n",
"group": "body",
"name": "parameters_pem",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.003",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-dh-group-check"
},
{
"description": "Builds a PKCS#12 container holding certificates only, for the common case where a runtime insists on PKCS#12 as its trust store format. The password is explicitly empty and reported back as such, so nothing depends on an undocumented default, and the reply states outright that the store contains no private keys. That matters: a PKCS#12 file is the usual carrier for a key, and a consumer must be able to tell a trust store from an identity store without opening it.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "certificates_pem",
"required": false,
"type": "array"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "4",
"l30DaysUniquePayers": "4"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-pkcs12-certificate-store-build"
},
{
"description": "Takes a public key in SubjectPublicKeyInfo PEM form and runs the pinned OpenSSL build's own consistency checks over it, then reports the algorithm, the key size in bits and the parameters it found. This catches keys that parse but are structurally unusable: a modulus that is not a valid product, curve parameters that do not match a known group, a size that no longer meets the build's security level. The reported bit count comes from the key itself, not from the label a producer attached.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwTk3ZwVC7tWYSnhquXw\nKI4MbYSvyV20ZodcGYaMsRDc6JQSm04srCiQe5I5JtJOYJbUUUPVY0KswOzhV2El\nyFH7/n38OhLfWzY2CYCwu+zhxJq0YTRlr7f4fpdm72KxwyMUo17KteGofnszLa/s\nI4jWrl083oP7XrwTBcJxZ2v+hkEAA4UGNYgnXl/ANAalOVJg825hxjXcbbRiNjcC\nDHVuIXfdyHDIId0NRVTbfXLcTA1zDfAE4+jhDaC7aToCccCBLOjzZSkN5SzTx3NR\nDuO5GUpW5SgewWPmB62hpF5BPzA+/t/DOMDLKhyqOHvj0hsKWvHkui+is8k3H/eE\ntwIDAQAB\n-----END PUBLIC KEY-----\n",
"group": "body",
"name": "public_key_pem",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "4",
"l30DaysUniquePayers": "4"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-public-key-math-audit"
},
{
"description": "Produces a ready-to-post RFC 3161 TimeStampReq for a SHA-256 digest you already computed. The pinned OpenSSL build encodes the message imprint, adds a fresh nonce so a replayed response can be detected, and sets the flag that asks the timestamp authority to include its signing certificate in the reply. The result is returned as a binary artifact together with the imprint it was built around, so the caller can check that the request really covers the intended digest.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "630ef5fa9f154edb61d2bb1f0767b6f110d1600860e8afc4d363cb20d0f52da0",
"group": "body",
"name": "sha256",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.001",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "8",
"l30DaysUniquePayers": "5"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-rfc3161-request-build"
},
{
"description": "Takes a cipher policy in OpenSSL syntax and resolves it into the concrete list of TLS 1.2 cipher suites that the pinned build would actually offer, in the order it would offer them. This closes the gap between a policy string in a configuration file and what a server ends up negotiating: aliases expand, exclusions apply, and suites below the build's security level drop out silently in normal operation. Here they simply do not appear in the list, and the count says how many survived.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "ECDHE-RSA-AES256-GCM-SHA384",
"group": "body",
"name": "cipher_rule",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.001",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "8",
"l30DaysUniquePayers": "5"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-tls12-cipher-policy-expand"
},
{
"description": "Reads the constraints inside a single certificate — basic constraints, key usage, extended key usage — and reports, per role, whether the certificate permits being used that way under the pinned OpenSSL build's rules. Roles covered are TLS client, TLS server, S/MIME signing and encryption, and timestamp signing. This answers the frequent confusion where a certificate is deployed for a purpose its own extensions forbid, and the failure only shows up as an opaque handshake error later.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "-----BEGIN CERTIFICATE-----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\nDmVCA6ajI2xERBn+\n-----END CERTIFICATE-----\n",
"group": "body",
"name": "certificate_pem",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.001",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "9",
"l30DaysUniquePayers": "6"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"openssl",
"p012"
],
"url": "https://sicher.halowerk.com/v1/oss-openssl-x509-purpose-evaluate"
},
{
"description": "Opens a supplied SQLite database read-only with the pinned engine and asks it the two questions it answers about itself: whether the file structure is intact, and whether any row points at a parent that is not there. What comes back is the engine's own integrity messages, each foreign-key violation with its table and rowid, the inventory of tables and indexes, and the page geometry and text encoding.",
"method": "POST",
"parameters": [],
"pricing": {
"amount": "0.0025",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"sqlite",
"p102"
],
"url": "https://sicher.halowerk.com/v1/oss-sqlite-database-integrity-audit"
},
{
"description": "Reads the central directory of a supplied ZIP archive with the pinned unzip build and reports what it would do if you unpacked it, without unpacking anything. Every entry is listed with its uncompressed size and method, and three specific hazards are named: paths that climb out of the target directory, names the archive repeats so that a later entry silently overwrites an earlier one, and a total uncompressed size far out of proportion to the archive.",
"method": "POST",
"parameters": [],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"zip",
"p103"
],
"url": "https://sicher.halowerk.com/v1/oss-zip-archive-inventory-audit"
},
{
"description": "Searches the Sigstore Rekor log for entries matching an artefact hash and returns what a provenance claim is actually worth: the log index and inclusion time, the signing identity from the certificate, and where available the source repository and workflow reference that produced it. Several entries for one hash are all returned, because a rebuild or a second signer is a fact worth seeing rather than collapsing.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "a3f1c2d4e5b6978012345678901234567890abcdefabcdefabcdef1234567890",
"group": "body",
"name": "sha256",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/provenance-verify"
},
{
"description": "Parses package-lock.json, package.json, requirements.txt, go.mod and Cargo.lock and emits a bill of materials in CycloneDX 1.5 or SPDX 2.3, with a package URL per component. The distinction that decides whether the document is worth anything is made explicit: a lockfile names the versions actually installed, a manifest only names ranges, and a bill of materials built from ranges describes what might be installed rather than what is.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "files",
"required": false,
"type": "array"
}
],
"pricing": {
"amount": "0.005",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": null,
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/sbom"
},
{
"description": "Opens a TLS connection and reports the chain the server presents. Per certificate: subject and issuer, validity window with days remaining, serial, SHA-256 fingerprint, key type and size, and the subject alternative names. Above that it answers the questions a monitor asks: is the requested hostname covered by the leaf certificate including wildcard rules, how many days until the nearest expiry, is any certificate self-signed or signed with a weak algorithm, does the server send its…",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "sicher.halowerk.com",
"group": "body",
"name": "host",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": 443,
"group": "body",
"name": "port",
"required": false,
"type": "number"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/tls-chain"
},
{
"description": "Providers each build their signing string differently — some sign only the body, others prepend a timestamp, an id, or a version marker in a fixed order — and getting that order wrong produces a mismatch that looks exactly like an attack. This checks the signature the way the named provider actually specifies, with constant-time comparison, and returns the string that was signed so a mismatch can be debugged instead of guessed at.",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "{\"synthetic\":true,\"event\":\"documentation-example\"}",
"group": "body",
"name": "body",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "github",
"group": "body",
"name": "provider",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "HALOWERK-public-synthetic-example-never-use-for-authentication",
"group": "body",
"name": "secret",
"required": false,
"type": "string"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "sha256=fdfaa7380ce9e369a7d90e8651603bb777a4f008dd3070b056d2b59122d602f8",
"group": "body",
"name": "signature",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.002",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "3",
"l30DaysUniquePayers": "3"
},
"serviceName": "",
"tags": [],
"url": "https://sicher.halowerk.com/v1/webhook-signature"
}
],
"enriched": false,
"iconUrl": "",
"id": "sicher-halowerk-com",
"integrationType": "",
"isNew": false,
"name": "sicher.halowerk.com",
"networks": [
"Base"
],
"priceSummary": {
"avgCostBasis": "exact",
"avgCostPerTransaction": "0.002674",
"currency": "USDC",
"maxAmount": "0.005",
"minAmount": "0.001"
},
"provider": "sicher.halowerk.com",
"providerUrl": "",
"serviceName": "HALOWERK sicherwerk",
"tags": [
"oss",
"gnupg",
"p101",
"openssl",
"p012",
"sqlite",
"p102",
"zip",
"p103"
]
},
"source": "agentic_market",
"summary": ""
}What the leaf hashes
{"body":"126cf1d7a15b3eb90511601b5b1f69649ae0b6671b8fa3d492be6b519230721f","id":558327,"kind":"listing","method":"sync.agentic_market/1","observed_us":1793134970412709,"prev":547941,"subject":"agentic_market:sicher-halowerk-com","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (273461 rows).
- 0x6b32d59f8e69cbdf093c24d3c6ee5b6e3a5041471db534df8bbc7064f6515afe
- 0x5f5b9f4bbfc7be2409da2e8e734cff97bff0a67eef5457a2cc9af7733ffff576
- 0xc683a61a82933f72597dd736a8e75b60306e75c1b66372d014235fdc8cd1ac1b
- 0x0fd117e84a4ad33122079aba00e5d78118aeb651eb357c2c655cd42f6f621547
- 0xed49f71ab60e0cd7672b60d27ee75900fcbd6af798388cd927d9155d9b302a44
- 0x6dbefcab6535d0d2f5875c3eb9394ad28828f35e22f85d20c98ba22b8d82b2ff
- 0x05fe15abfbbc803c1381442d944e7737f845b43fe419c19ceb72add61bf58b0a
- 0xd5f26d23e97edb979f89254d864be6b36accc384661575825ab6d327636516df
- 0x90fa0eb482c5c3a8e3d85fc18e73b0929513dd59c24a707d333b2e42f377e657
- 0x58e388926a516d3667909f6fd7a79dae6480082711d20d5cd10d161d0ab243d4
- 0xdc9ca5cffc0291f8ddf9255389acf7653056f9ad5b5eee5581f407185fc803d1
- 0x1907258a29a881c6f59707e890e9f73f7aff1ace32101f20e208f76e9fac9a60
- 0x927616fada4e04588c09f6e02e8f6e3a1351bac8355e394da3bd0bf249a5c503
- 0x3c5462812bd2f841e3d7deefc01555f18262fe5e0d5a7eb155330b7a7cb0388e
- 0x6f00f0da417f4126951ba8ba9b7962c847e91f5c61364ad9ad47e5f979698a60
- 0x23cf9bb4337ee8be7fcae368fd69d24c62c11fb45882127b4cd919bb96a19996
- 0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d
- 0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585
- 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699
- Day root
- 0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795
- Chained
- 0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4
- Published
- On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4