addrbookFor publishers
← The evidence ledger

Evidence row 70129

Observed , by baseline/1.

Kind
listing
About
source_record x402_bazaar:https://api.webintel-api.workers.dev/api/security/csp-evaluator-audit
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
4c7304203d5f270683dd89be8cba733d49b169862ab00cc0ad6f61a3fcbbd317
Leaf
0x9d0f0c523a1563e0a08888156db6be6bee0abdf5bc3ce73c59abb77f8ac3d427

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://api.webintel-api.workers.dev/api/security/csp-evaluator-audit"
    ]
  ],
  "name": "SiteCheck Web Intel",
  "owner_address": "0xb8491f953e6860d3b5840b73c60883ff099ceafa",
  "raw": {
    "accepts": [
      {
        "amount": "2000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "GVJJ7rdGiXr5xaYbRwRbjfaJL7fmwRygFi1H6aGqDveb"
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "J8vnmBx4pS1X7UUBTfz1yWBKiw69Dj2yRGRHDaXBRdhR",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0x3600000000000000000000000000000000000000",
        "extra": {
          "name": "USDC",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:5042",
        "payTo": "0xa4751fCAa83c9669cfe507bb6807507729839be3",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:137",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:42161",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0x754704Bc059F8C67012fEd69BC8A327a5aafb603",
        "extra": {
          "name": "USDC",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:143",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",
        "extra": {
          "name": "USDC",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:480",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:10",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "2000",
        "asset": "0xcebA9300f2b948710d2653dD7B07f33A8B32118C",
        "extra": {
          "name": "USDC",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:42220",
        "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
        "scheme": "exact"
      },
      {
        "amount": "20000",
        "asset": "CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75",
        "extra": {
          "areFeesSponsored": true
        },
        "maxTimeoutSeconds": 300,
        "network": "stellar:pubnet",
        "payTo": "GBIX2M7HNL2G2VYU5KZ446OSN55ZWHS3WBEUP4JTLS6R34VXIGTDOAFI",
        "scheme": "exact"
      },
      {
        "amount": "0.002",
        "asset": "524C555344000000000000000000000000000000",
        "extra": {
          "areFeesSponsored": false,
          "invoiceId": "208b6128-b303-4b17-936a-2805a631ba1a",
          "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
          "sourceTag": 804681468
        },
        "maxTimeoutSeconds": 300,
        "network": "xrpl:0",
        "payTo": "rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ",
        "scheme": "exact"
      },
      {
        "amount": "1548",
        "asset": "XRP",
        "extra": {
          "areFeesSponsored": false,
          "invoiceId": "3174ee86-d537-4213-846c-b564d6affd3a",
          "sourceTag": 804681468
        },
        "maxTimeoutSeconds": 300,
        "network": "xrpl:0",
        "payTo": "rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ",
        "scheme": "exact"
      }
    ],
    "description": "Reads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing default-src or script-src, and a missing policy altogether. Reports directives. Header only; a CSP in a meta tag is not read.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "domain": "github.com"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "checkedAt": "2026-10-23T09:38:39.170Z",
              "directives": {
                "base-uri": [
                  "'self'"
                ],
                "child-src": [
                  "github.githubassets.com",
                  "github.com/assets-cdn/worker/"
                ],
                "connect-src": [
                  "'self'",
                  "uploads.github.com"
                ],
                "default-src": [
                  "'none'"
                ],
                "font-src": [
                  "github.githubassets.com"
                ],
                "form-action": [
                  "'self'",
                  "github.com"
                ],
                "frame-ancestors": [
                  "'none'"
                ],
                "frame-src": [
                  "viewscreen.githubusercontent.com",
                  "notebooks.githubusercontent.com"
                ],
                "img-src": [
                  "'self'",
                  "data:"
                ],
                "manifest-src": [
                  "'self'"
                ],
                "media-src": [
                  "github.com",
                  "user-images.githubusercontent.com"
                ],
                "script-src": [
                  "github.githubassets.com",
                  "'sha256-6AKuI+cDd1MoUL1u4eqrA9PXmnPAkOB4h7421hPUUm0='"
                ],
                "style-src": [
                  "'unsafe-inline'",
                  "github.githubassets.com"
                ],
                "upgrade-insecure-requests": [],
                "worker-src": [
                  "github.githubassets.com",
                  "github.com/assets-cdn/worker/"
                ]
              },
              "domain": "github.com",
              "issues": [],
              "present": true,
              "reportOnly": false,
              "source": "https://github.com/"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "domain": {
                      "description": "Domain name such as github.com (required)",
                      "type": "string"
                    }
                  },
                  "required": [
                    "domain"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-24T02:37:20.781Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-24T02:37:20.645Z"
    },
    "resource": "https://api.webintel-api.workers.dev/api/security/csp-evaluator-audit",
    "serviceName": "SiteCheck Web Intel",
    "tags": [
      "security",
      "csp",
      "evaluator",
      "audit"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Reads the Content-Security-Policy header of a site's home page and lists weak points: 'unsafe-inline' and 'unsafe-eval' in script sources, bare wildcards, data: or http: script sources, a missing default-src or script-src, and a missing policy altogether. Reports directives. Header only; a CSP in a meta tag is not read."
}

What the leaf hashes

{"body":"4c7304203d5f270683dd89be8cba733d49b169862ab00cc0ad6f61a3fcbbd317","id":70129,"kind":"listing","method":"baseline/1","observed_us":1793025479884429,"prev":null,"subject":"x402_bazaar:https://api.webintel-api.workers.dev/api/security/csp-evaluator-audit","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).

  1. 0x9d0ea7a42243cd0f25fc5198929dec5f29ca6e065cc0eea6f18e230f9ba3d196
  2. 0x9d465ce5caa0beceb172f81d7817a035ca6b830b6719219bd8b55e679d8efb6e
  3. 0x338267f8514882efe59bf3e149ad4ced653c39e05906c5e33361984ff3dea3ab
  4. 0xf906c9ccef13a7c6d09ec19105742bca78a7fc72ec40c38680365f0e0548ebe4
  5. 0x21d4899d4df2e423b52feda432d93eb3ce63be7b16c2f2685b1f7dbebe785d0f
  6. 0x446922b02a049377d6c90d25de1559e21a30ecefdaf2e285add258fb27360b6f
  7. 0x49bd21c497a68bb803a6543cd536fde7467fe8b8f8ac37cf46b0409951ca7050
  8. 0x48dd11cdd272ad24fcd9783c11f611da71d65d562babe0e16bfe0e19fdd0d72e
  9. 0xedc2d02033cc8d975d3f026dca995d2d6175d398fc8b96ad4b34148ae0fbf9b5
  10. 0x1a90ba89f036e98e4e1b5af7f96b79f0586042bc85461ebbe79c82b27bdc57dd
  11. 0x4a4b7460b27353d096fad8c7820603e2d212a25fa0e24fdd0b1ce11cd6ca098c
  12. 0xd253212b3d5f7245423cc951067880bc2069b90eeee521363fcee13ebbd606ae
  13. 0x99a4e0f8b23989f58b564c1b6e419578b4388f6e0dbf6e50177c1bd476302d0e
  14. 0x6713795704ddd9c528d421fadd9cc96b0200a4ddbba84f88e718d4968dde888b
  15. 0x62a900133713919f4eed33d8336876b7a6d538233b8a4f3ed03b29aa44f5bad0
  16. 0x1ac20d30773e1f4f2f811540e9a99b5cca9177c9e2e029acc0d80cf3f1d11f0f
  17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
  18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
  19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
Day root
0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained
0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published
On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON