Evidence row 61272

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://agent-data.centorprat.workers.dev/tools/tech-version-cve-check"
    ]
  ],
  "name": "Tech Version, CVE & Security-Hea",
  "owner_address": "0x8d38d6026cf3a9805de9c5f0611cee95b532b120",
  "raw": {
    "accepts": [
      {
        "amount": "30000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x8d38D6026cf3A9805DE9c5F0611ceE95B532B120",
        "scheme": "exact"
      },
      {
        "amount": "30000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:137",
        "payTo": "0x8d38D6026cf3A9805DE9c5F0611ceE95B532B120",
        "scheme": "exact"
      },
      {
        "amount": "30000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "3644DrcePengCVjznEa59Dm7Mu7Acr522NvYyapHRHQh",
        "scheme": "exact"
      }
    ],
    "description": "For a URL and a technology, passively detects the tech and its version (headers, meta generator, script URLs - read-only, no probing), looks that version up in public CVE databases (OSV/NVD), and reports known CVEs plus a security-header posture. For assets you own or are authorized to test. Up to 3 items per call; failed lookups are not charged.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "technologies": [
                "wordpress"
              ],
              "urls": [
                "https://wordpress.org/"
              ]
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "items": [
                {
                  "check": "security-headers",
                  "checkedAt": "2026-10-25T16:58:07+00:00",
                  "cookieFlags": null,
                  "fetched": true,
                  "missingHeaders": [
                    "Content-Security-Policy",
                    "X-Content-Type-Options",
                    "Referrer-Policy",
                    "Permissions-Policy"
                  ],
                  "note": "Passive read of response headers only (OWASP A05-flavored). Missing headers are a hardening signal, not a confirmed vulnerability - some may be set at a CDN/edge or on other routes; verify in context.",
                  "posture": "weak-headers",
                  "presentHeaders": [
                    "HSTS",
                    "X-Frame-Options"
                  ],
                  "serverHeader": "nginx",
                  "url": "https://wordpress.org/",
                  "xPoweredBy": null
                }
              ]
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "includeSecurityHeaders": {
                      "description": "Also report which standard security headers (HSTS, CSP, X-Frame-Options, ...) and cookie flags the page sends - a passive OWASP A05-flavored hardening read from the same response. No extra requests.",
                      "type": "boolean"
                    },
                    "technologies": {
                      "description": "Technologies to look for, e.g. [\"jquery\"], [\"wordpress\", \"nginx\", \"php\"]. Known: jquery, bootstrap, lodash, vue, react, angular, axios, moment, wordpress, drupal, joomla, nginx, apache, php (others are attempted generically).",
                      "items": {
                        "type": "string"
                      },
                      "maxItems": 3,
                      "type": "array"
                    },
                    "urls": {
                      "description": "Pages to check, e.g. [\"https://your-site.com\"]. The Actor only performs a normal read-only GET of each page - no probing or exploitation. Only use it on assets you own or have permission to test.",
                      "items": {
                        "type": "string"
                      },
                      "maxItems": 3,
                      "type": "array"
                    },
                    "version": {
                      "description": "If you already know the version running on your asset, set it to CVE-check it directly (used for every technology above).",
                      "type": "string"
                    }
                  },
                  "required": []
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST",
                    "PUT",
                    "PATCH"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-25T17:24:31.713Z",
    "quality": {
      "l30DaysTotalCalls": 4,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-25T17:24:31.223Z"
    },
    "resource": "https://agent-data.centorprat.workers.dev/tools/tech-version-cve-check",
    "serviceName": "Tech Version, CVE & Security-Hea",
    "tags": [
      "developer-tools",
      "business",
      "data"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "For a URL and a technology, passively detects the tech and its version (headers, meta generator, script URLs - read-only, no probing), looks that version up in public CVE databases (OSV/NVD), and reports known CVEs plus a security-header posture. For assets you own or are authorized to test. Up to 3 items per call; failed lookups are not charged."
}

What the leaf hashes

{"body":"b6ee958ee351406de2d931441b3aae86c8d1359df34f384b43e81ca3addd3a5e","id":61272,"kind":"listing","method":"baseline/1","observed_us":1793025450407252,"prev":null,"subject":"x402_bazaar:https://agent-data.centorprat.workers.dev/tools/tech-version-cve-check","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x12198a8e81cafe49786ce72410b02c7db90113da561fae48e564dcf6142c95b5
2. 0x8645115ba63f375dad18e86b031431974dca0dd4b27abe35c916c18d53ec7a1b
3. 0x7b142cd116446d1f727df6b58c959ca813581ad1ee70d9e3b9ca4a0337386842
4. 0x6ddec3af1d31ee46013cf7c3b06ae1bb33b81b1fe699e5578a6fce8f6f8ebdcd
5. 0xe48478c58894d15a22f587d8210e7c1fec7c74a85435b6572c39384ffa7a62ea
6. 0x3caf9e5772cba15cda006611c5d7e784b8192df8f867531f7ee529190b0b25f0
7. 0xe9d28cf72988a07421fa9332007f607da0ad3ee32e57796342c67603ea637240
8. 0xa6a890404cbc3080502b67be5dead0e1faeb2bcb82fb87308721f3c788091c92
9. 0xb3d9cdddc01055d8ee1a1a57cc042cd7833eb5678449159bdb42cc89bafd60df
10. 0x8b074e295bef9ac21d945d10f5903500dd59050adddb16656bd7293d68fee436
11. 0x502ad0a7c2d0bbc45ef3aea37a6ae457822535bcbd44272f1f9e8e4f7166c167
12. 0x7e390200ea1ea25db5884cf05fa50ad599f0759b573f081e361cc22f7206133c
13. 0xff1c28bdf595a3d1333e9915edc68e9c5fded7bd5923fa85870979af34cbc3b3
14. 0xb49e8c2564256e5322e375cb619d9ac70fd17c1d1eba9c991bba4cb6428f45cc
15. 0x60582ab4b41e72eb70eb0bce07fbf0fb4d2b62a8bad5be50f5d16d511adc746c
16. 0xc6a4d7899a0f442958e26505011190b7cff2483611c1b94eba9043e0ba9ac36e
17. 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
18. 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae