Evidence row 578585

What was observed

{
  "count": 19,
  "tools": [
    {
      "description": "Readiness audit of any agent-facing URL: MCP handshake, CORS, discovery docs (llms.txt, mcp.json), and payment-offer behaviour. First call with url alone for the FREE grade and failing-check list. For the full findings and remediations, call get_offer with productType \"audit\" and productId \"conformance-report\", pay, then call audit_endpoint again with the same url plus paymentTx and paymentOffer. This tool both previews and redeems the paid report; no separate delivery tool is needed.",
      "inputSchema": {
        "properties": {
          "paymentOffer": {
            "description": "Signed offer token from get_offer (productType: audit)",
            "type": "string"
          },
          "paymentTx": {
            "description": "Base Pay UserOperation hash for USDC or Base transaction hash for ETH, for the full paid report",
            "type": "string"
          },
          "url": {
            "description": "Base URL to audit, e.g. https://your-agent.example.com",
            "format": "uri",
            "type": "string"
          }
        },
        "required": [
          "url"
        ],
        "type": "object"
      },
      "name": "audit_endpoint"
    },
    {
      "description": "Run a read-only theme audit on a public HTTP(S) page, free in full. Fetches but never modifies the page, then checks inline style CSS for brace errors, token gaps, incomplete dark themes, missing body backgrounds, and WCAG body-text contrast. External stylesheets are counted but not fetched. Use audit_endpoint instead for MCP, CORS, discovery, and payment readiness.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "url": {
            "description": "Public HTTP(S) page to fetch and inspect. Direct localhost, .local, loopback, private IPv4, and IPv6-literal targets are rejected. Inline style CSS is analyzed; external stylesheets are not fetched.",
            "format": "uri",
            "type": "string"
          }
        },
        "required": [
          "url"
        ],
        "type": "object"
      },
      "name": "audit_theme"
    },
    {
      "description": "Check a private ticket from request_fix. Returns pending, declined, not-eligible, redeemed, or the full fix free once an eligible new fix is stocked. This call may atomically consume the ticket's one-time delivery, so save the returned body. Use get_fix when you already have a catalog id; do not create another request while this ticket is pending.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "ticket": {
            "description": "Private req_ ticket returned once by request_fix. Reuse it unchanged and never publish it. A stocked eligible result can be redeemed only once, so save the returned fix body.",
            "type": "string"
          }
        },
        "required": [
          "ticket"
        ],
        "type": "object"
      },
      "name": "check_request"
    },
    {
      "description": "Check a private service order by its svc_ ticket. With paymentTx and paymentOffer, atomically confirms exactly one matching Base payment and moves the order into review. Without payment fields, returns current status; once complete, it returns the private Markdown report and SHA-256 digest. Keep the ticket and signed offer private.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "paymentOffer": {
            "description": "Matching private signed offer returned by order_service. Omit after payment is confirmed.",
            "maxLength": 2048,
            "type": "string"
          },
          "paymentTx": {
            "description": "Base Pay UserOperation hash for USDC or mined Base transaction hash for ETH. Omit after payment is confirmed.",
            "type": "string"
          },
          "ticket": {
            "description": "Private bearer ticket returned once by order_service.",
            "pattern": "^svc_[0-9a-f]{32}$",
            "type": "string"
          }
        },
        "required": [
          "ticket"
        ],
        "type": "object"
      },
      "name": "check_service_order"
    },
    {
      "description": "Check the private submissionId returned by submit_fix. Returns only pending-review, accepted, declined, or cataloged state and, when cataloged, the stocked fix id. It never returns submitted text or contributor details and creates no side effects. Use get_fix with catalogId when cataloged; do not resubmit merely because review is pending.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "submissionId": {
            "description": "Private UUID returned once by submit_fix. Reuse it unchanged and never publish it; it identifies the review record but cannot retrieve submitted text.",
            "format": "uuid",
            "type": "string"
          }
        },
        "required": [
          "submissionId"
        ],
        "type": "object"
      },
      "name": "check_submission"
    },
    {
      "description": "Get or redeem a fix after search_fixes or list_catalog identifies the id. Free samples return immediately. For a paid fix, call with the id alone to receive a free diagnosis preview, confidence and compatibility, dollar price, signed Base Pay USDC and exact-ETH offers, and one pay-and-redeem action; then call once more with the matching paymentTx and private paymentOffer. Never pay again merely because an existing proof is pending or denied.",
      "inputSchema": {
        "properties": {
          "id": {
            "description": "Fix id from search_fixes or list_catalog",
            "type": "string"
          },
          "paymentOffer": {
            "description": "Private signed bearer token from search_fixes or get_offer; omit for free samples and never publish it.",
            "maxLength": 2048,
            "type": "string"
          },
          "paymentTx": {
            "description": "Base Pay UserOperation hash for USDC or Base transaction hash for ETH; omit for free samples.",
            "pattern": "^0x[0-9a-fA-F]{64}$",
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "name": "get_fix"
    },
    {
      "description": "Return the complete Markdown body of one free workflow listed by get_overview. No account, payment, paid body or private data. Use list_skills/get_skill for premium products instead. This tool supports clients that cannot read MCP resources.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "id": {
            "enum": [
              "evidence-first-bug-report",
              "release-smoke-check",
              "mcp-connection-triage",
              "website-search-readiness",
              "api-response-triage",
              "webhook-delivery-triage"
            ],
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "name": "get_free_skill"
    },
    {
      "description": "Create or refresh a one-hour signed bearer offer for a chosen skill, bundle, audit, or fix. Do not call this after a paid search_fixes result or an unpaid get_fix/get_skill result because those responses already include both payment rails. Choose USDC for Base Pay or ETH for exact wei; with no product arguments, this returns the general settlement document.",
      "inputSchema": {
        "properties": {
          "currency": {
            "description": "Settlement rail. Defaults to ETH for backward compatibility.",
            "enum": [
              "USDC",
              "ETH"
            ],
            "type": "string"
          },
          "productId": {
            "description": "Exact fix, skill, bundle, or audit product id.",
            "type": "string"
          },
          "productType": {
            "description": "Catalog shelf that owns the product id; bundles use skill.",
            "enum": [
              "fix",
              "skill",
              "audit",
              "service"
            ],
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "get_offer"
    },
    {
      "description": "One free overview of all KnownFix offerings: complete free-workflow resource URIs, three browser-local tools and their companion guides, catalog routes, premium outlines and service prices/scopes/ordering boundaries. No account, payment, signed offer or order creation. Use search_fixes first for an exact error; list_services for full engagement terms.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "get_overview"
    },
    {
      "description": "Get or redeem a premium skill or multi-fix bundle after choosing with list_skills. Call with the id alone to receive the free outline, dollar price, signed Base Pay USDC and exact-ETH offers, and one pay-and-redeem action. After payment, call once more with the matching paymentTx and private paymentOffer for the complete SKILL.md or assembled bundle decision tree, fix bodies, verification commands, update guidance, and sources. Do not use this for individual fixes; call get_fix instead. Never pay again merely because an existing proof is pending or denied.",
      "inputSchema": {
        "properties": {
          "id": {
            "description": "Exact skill or bundle id from list_skills.",
            "type": "string"
          },
          "paymentOffer": {
            "description": "Private signed bearer token from get_offer; never publish it.",
            "maxLength": 2048,
            "type": "string"
          },
          "paymentTx": {
            "description": "Base Pay UserOperation hash for USDC or Base transaction hash for ETH.",
            "pattern": "^0x[0-9a-fA-F]{64}$",
            "type": "string"
          }
        },
        "required": [
          "id"
        ],
        "type": "object"
      },
      "name": "get_skill"
    },
    {
      "description": "Browse every stocked error signature, title, tag, confidence label, and free-sample flag without ranking or creating an offer. Use search_fixes instead when diagnosing a specific error; it returns the best match and any purchase-ready checkout.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "list_catalog"
    },
    {
      "description": "Browse the KnownFix Merch Store. Returns fixed product ids, lines, formats, and privacy-safe tracked links to the human Fourthwall storefront. Fourthwall shows the current localized price, options, tax, shipping, and availability. This tool does not place an order or collect checkout data.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {},
        "type": "object"
      },
      "name": "list_merch"
    },
    {
      "description": "Compare all current KnownFix reviews, Verified Repo Fix and Microsite Launch. Returns complete scope, deliverables, prices, delivery targets and limitations. Services requiring scope approval or payment after verified delivery are manual: use their order page, not order_service. SaaS security requires explicit written testing authorization. Other services use private-ticket checkout only after operator spending approval and target authorization.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "list_services"
    },
    {
      "description": "Compare premium skills and multi-fix bundles. Returns current ids, free outlines, provenance, formats, and exact prices while full bodies remain paid. Call get_skill with a chosen id for signed USDC and ETH checkout; use search_fixes for a single error.",
      "inputSchema": {
        "properties": {},
        "type": "object"
      },
      "name": "list_skills"
    },
    {
      "description": "Create a private ticket and signed Base USDC/ETH checkout for an eligible automated service only. Do not call for requiresScopeApproval services (SaaS security, Microsite Launch) or paymentTiming:after-verified-delivery (Verified Repo Fix); these require manual scope approval via their published page. Accepts authorized public HTTPS targets only. Obtain operator spending approval. Never send credentials or confidential data. Keep the returned svc_ ticket private.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "authorizationConfirmed": {
            "description": "Must be true: confirms the target is public and the requester is authorized to commission a passive, non-destructive review.",
            "type": "boolean"
          },
          "notes": {
            "description": "Optional review focus. Never include credentials, tokens, secrets, private URLs, or confidential data.",
            "maxLength": 1500,
            "type": "string"
          },
          "publishTarget": {
            "description": "Optional explicit consent to show the target and status in the public work queue. Defaults to false.",
            "type": "boolean"
          },
          "serviceId": {
            "enum": [
              "microsite-launch",
              "website-first-look",
              "website-growth-audit",
              "homepage-build",
              "codebase-review",
              "agent-commerce-audit",
              "release-pipeline-review",
              "webhook-reliability-review",
              "saas-security-exposure-review"
            ],
            "type": "string"
          },
          "targetUrl": {
            "description": "Public HTTPS website or exact public GitHub repository URL. Do not include credentials, query parameters, or fragments.",
            "format": "uri",
            "maxLength": 2048,
            "type": "string"
          }
        },
        "required": [
          "serviceId",
          "targetUrl",
          "authorizationConfirmed"
        ],
        "type": "object"
      },
      "name": "order_service"
    },
    {
      "description": "Use only after a signed KnownFix checkout cannot proceed before a payment hash exists. Reports one closed-vocabulary blocker tied to the valid offer; at most one aggregate count is accepted per offer. No wallet address, token, transaction hash, query, or free-form text is published. Do not call after payment; redeem with get_fix, get_skill, or audit_endpoint instead.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "blocker": {
            "description": "Observed pre-payment stopping point. Use funding-unavailable when no practical funding path exists; insufficient-balance when a compatible wallet exists but lacks the required asset.",
            "enum": [
              "no-compatible-wallet",
              "funding-unavailable",
              "insufficient-balance",
              "base-pay-unavailable",
              "payment-rejected",
              "payment-failed"
            ],
            "type": "string"
          },
          "paymentOffer": {
            "description": "Private signed offer returned by KnownFix. It is verified, never returned, and never published.",
            "maxLength": 2048,
            "type": "string"
          },
          "productId": {
            "description": "Exact product id encoded in the signed offer.",
            "maxLength": 120,
            "type": "string"
          },
          "productType": {
            "description": "Product shelf encoded in the signed offer.",
            "enum": [
              "fix",
              "skill",
              "audit",
              "service"
            ],
            "type": "string"
          }
        },
        "required": [
          "productType",
          "productId",
          "paymentOffer",
          "blocker"
        ],
        "type": "object"
      },
      "name": "report_checkout_blocker"
    },
    {
      "description": "Ask for a fix this store does not have yet. If we already stock it (matched on either field) you get the id straight back and no ticket. Otherwise you get a ticket; when we stock THAT fix, check_request returns it to you FREE, once. A ticket only ever redeems a fix created after the request: fixes that already existed when you asked are not free, whatever the request said. No contact details are collected. Set publish: true ONLY if the text may appear on a public wanted board — never include secrets, tokens, internal hostnames, or file paths.",
      "inputSchema": {
        "properties": {
          "context": {
            "description": "What you already tried, and the tool/runtime versions",
            "type": "string"
          },
          "publish": {
            "description": "Allow this text on the public board (default false)",
            "type": "boolean"
          },
          "signature": {
            "description": "The exact error text you are stuck on",
            "type": "string"
          }
        },
        "required": [
          "signature"
        ],
        "type": "object"
      },
      "name": "request_fix"
    },
    {
      "description": "Use this first for an exact error or distinctive symptom. Returns up to three confident ranked matches. A free top match includes the full fix. A paid top match includes a free diagnosis, confidence and compatibility, dollar price, signed USDC/Base Pay and exact-ETH rails, and one pay-and-redeem action; do not call get_offer. Use list_catalog to browse, get_fix only with a known id or payment proof, and request_fix only after an honest miss.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "query": {
            "description": "Preserve the exact error code and distinctive text; add tool or runtime context needed to disambiguate it. Omit credentials, tokens, private hostnames, and private paths.",
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "search_fixes"
    },
    {
      "description": "Offer a fix for the catalog. Submissions are reviewed by the operator before listing; include a reproduction so the fix can be verified rather than trusted. Returns a private submissionId; save it and call check_submission for pending, accepted, declined, or cataloged status. Submitted text and contributor details are never returned by the status tool. Revenue-sharing for accepted contributions is planned, not yet live.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "cause": {
            "description": "Root cause supported by the reproduction, without secrets or private paths.",
            "maxLength": 4000,
            "type": "string"
          },
          "contributor": {
            "description": "Optional private credit/contact string (name, public URL, or wallet). Stored for review; never returned by check_submission.",
            "maxLength": 500,
            "type": "string"
          },
          "fix": {
            "description": "Concrete remediation steps and commands, sanitized of credentials.",
            "maxLength": 8000,
            "type": "string"
          },
          "reproduction": {
            "description": "Minimal steps that reproduce the failure, followed by commands or checks proving the remediation works; omit credentials and private infrastructure.",
            "maxLength": 8000,
            "type": "string"
          },
          "signature": {
            "description": "Exact error text an agent would search, including the code and distinctive tokens; omit secrets and private paths.",
            "maxLength": 2000,
            "type": "string"
          },
          "title": {
            "description": "Short, specific failure-and-recovery name; do not use a generic category.",
            "maxLength": 160,
            "type": "string"
          }
        },
        "required": [
          "title",
          "signature",
          "fix"
        ],
        "type": "object"
      },
      "name": "submit_fix"
    }
  ]
}

What the leaf hashes

{"body":"7d85c167793bc2305222136e288a6c845e3fcf7a2839c9be5e8429a61be00b67","id":578585,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793143072373104,"prev":null,"subject":"724273b4-145b-4655-b65a-ba7761174102","subject_kind":"endpoint"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-27 (273461 rows).

1. 0xd7e8fd97451686138f204a420c5df94634940b9b074d684f2f7108d4335e68b5
2. 0x308389f555010689b7884aee555bf2746f112cb0a710df4d8a04fa46fd3d9bd6
3. 0x414a2907869a9365b76e464676ce38c0bc05aa6607a2289b536a217ec7f3377c
4. 0x56ddc9bfab9a67f81ef1ec3326d20af7a7bc19f1ff6147f4d4b0bceb82909199
5. 0x831caf04092ca5de52f4222c565d5a9e4fe871fcf588fb2951ea9d1f44b43016
6. 0xa40646e8b1c1e62cd7688c7b631dd085b2d95937217e282cd9856a5259eccd63
7. 0x1d3798ddf1e6ecfb87c364f3c5d05e14593fb2b4161676318e0a7fde97647e73
8. 0xbafedb24030d8ded08005052400b9e6b50e9f8271104b4832372e64cc500192f
9. 0x6f2a03ff07daddb913710745482384a1f10c6bfe1e1af746abe8488b4888d137
10. 0xcbd034a0cd26135dfe3bfa8fd5f89984d2548896a214c858b8d7fbfbfef4f03f
11. 0x3dca44952a9682a51f9efd327b03aab50a00e491555a6e0d2002b9d4c8a802cd
12. 0x849261a3d4118e022f8782d6166f4778e44fb4b1ae758bb02cd94e56b5df0896
13. 0x13692b463800846f580925c8ea49b43f92b7df3f9e8d32b8a18802640cca3780
14. 0xd59f3e577867f5105dd7f75598f16da8286185e426dfcdafb84e733fde2b2492
15. 0x24e3e2bb8ee1e8d20756de35f0e0c4ec8eb1f193bd2cf3f077ee1f92f211c34d
16. 0x8745bd887f5ce9f7a49558fd2b04cdcd97a05ea9f8a23f62d0e80cb13d328b0f
17. 0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310
18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699

Day root

0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795

Chained

0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4

Published

On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4