Evidence row 752354

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://bot-bazaar.fly.dev/v1/x402/suite/cloud-and-container-ops"
    ]
  ],
  "name": "Bot Bazaar",
  "owner_address": "0x847f54ae8ddfd71ed7bc930c1f7a73576fab03a9",
  "raw": {
    "accepts": [
      {
        "amount": "50000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x847f54ae8dDFD71ed7bC930C1f7a73576FAb03A9",
        "scheme": "exact"
      }
    ],
    "description": "Composite 6-check DevOps infrastructure audit chaining Dockerfile, fly.toml cost guard, Kubernetes pod security, Terraform HCL, Nginx TLS, and GitHub Actions pinning.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "vm_size": "shared-cpu-1x"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "composite_posture_score": 93,
              "composite_risk_score": 7,
              "disclaimer": "Automated composite analytical & schema audit only — not legal advice, not financial or investment advice, not tax advice, and not a formal third-party security certification.",
              "executive_grade": "A",
              "generated_at": 1793110000,
              "prioritized_remediation_checklist": [
                "Run containers as non-root users on pinned slim/distroless base images with pip --no-cache-dir.",
                "Enable auto_stop_machines='stop' and min_machines_running=0 on 256MB shared-cpu-1x instances to cap idle spend.",
                "Pin GitHub Actions and Terraform providers and avoid pull_request_target write permissions."
              ],
              "sub_check_count": 6,
              "sub_checks": {
                "dockerfile": {
                  "base_image": "python:3.13-slim",
                  "checks": {
                    "non_root_user": true,
                    "pinned_non_latest_tag": true,
                    "pip_no_cache_dir": true,
                    "slim_or_alpine_base": true
                  },
                  "user": "appuser",
                  "valid": true
                },
                "fly_toml": {
                  "checks": {
                    "autostop_enabled": true,
                    "memory_within_256mb": true,
                    "min_machines_zero": true,
                    "shared_cpu_economical": true,
                    "within_15_usd_spend_guard": true
                  },
                  "estimated_monthly_usd_always_on": 2.61,
                  "estimated_monthly_usd_idle": 0.15,
                  "valid": true
                },
                "github_actions": {
                  "checks": {
                    "least_privilege_permissions": true,
                    "no_unsafe_pr_target": true,
                    "not_mutable_main_branch": true
                  },
                  "permissions": "contents:read",
                  "uses_ref": "v4.2.0",
                  "valid": true,
                  "workflow_safe": true
                },
                "k8s_deployment": {
                  "checks": {
                    "cpu_and_memory_limits": true,
                    "liveness_and_readiness_probes": true,
                    "read_only_root_fs": true,
                    "run_as_non_root": true
                  },
                  "production_ready": true,
                  "score": 100,
                  "valid": true
                },
                "nginx_config": {
                  "checks": {
                    "hsts_enabled": true,
                    "modern_tls_only": true,
                    "server_tokens_off": true
                  },
                  "hardened": true,
                  "ssl_protocols": "TLSv1.2 TLSv1.3",
                  "valid": true
                },
                "terraform_hcl": {
                  "checks": {
                    "no_world_open_ingress": true,
                    "provider_versions_pinned": true,
                    "storage_encrypted_at_rest": true
                  },
                  "ingress_cidr": "10.0.0.0/16",
                  "passed": true,
                  "valid": true
                }
              },
              "suite": "cloud-and-container-ops",
              "title": "Cloud, Container, Fly.io & CI/CD Infrastructure Readiness Suite",
              "tool": "suite/cloud-and-container-ops",
              "valid": true
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET",
                    "HEAD",
                    "DELETE"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "vm_size": {
                      "description": "Target VM size preset",
                      "type": "string"
                    }
                  },
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-28T01:47:00.265Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-28T01:47:00.091Z"
    },
    "resource": "https://bot-bazaar.fly.dev/v1/x402/suite/cloud-and-container-ops",
    "serviceName": "Bot Bazaar",
    "tags": [
      "x402",
      "reputation",
      "sellers",
      "base",
      "usdc"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Composite 6-check DevOps infrastructure audit chaining Dockerfile, fly.toml cost guard, Kubernetes pod security, Terraform HCL, Nginx TLS, and GitHub Actions pinning."
}

What the leaf hashes

{"body":"c68c63c9cb2efc45a68443f9e76a296d091bfa6ba534fab26b2fbd78056c0818","id":752354,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793178822354839,"prev":null,"subject":"x402_bazaar:https://bot-bazaar.fly.dev/v1/x402/suite/cloud-and-container-ops","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-28 (231336 rows).

1. 0x8497e5d1a95c64bc51c6944cbbc351120a9347ab80f055e7ea4879df1c060bf5
2. 0x5fe5f194aeae1dc65c8f53891760aaabd2862fb4c4176cb5da28c7b2b9154f53
3. 0x4791977a39a782cb4cfe10bab1cc17fb170de55b80613d35973c764725cdc36d
4. 0x2212f36837d1a49f9273fe4f0cd9c56018c2baae47ca22e80e6de1f868334b1f
5. 0x08dfead040ccdca2c70d7c97f769082a547d79fb324d046ae18795436caa1f27
6. 0xf286059dac2437c2cf8b7ffb10ed4868462e6cb47b4fded272e08892fc7a990e
7. 0x47727fe91b43fc9314447c69f099433adbd368459f5457cfa602c3e7cd98cf5f
8. 0x9463071e806fe4560ee9c292f14c2583199524d92c0a8e799478420370cd25f3
9. 0x1d014da3e614ed2caf86a88fe300b16e4630a2c01ce2cf0bfa3c7be755464b49
10. 0x6665d674a760f9f18126c732f7b4581f36dc350e3e0f2bfc84497fdb655b3e2e
11. 0x4216b5ecd65def632101ea91067c3eab69ad024efd5ac2c4b00c57d98d1b895a
12. 0xa6ea84f68284915680a0a6f73b497fdc8df5e36d5b7ad061d5bc459081876b9c
13. 0xb072324629a406cd3cdd7c16d50237ad36e849cb87524d54ccd21e2d2c94de51
14. 0x91b395e5953edc1b4bb2db979b59b2d9a20f0df47d841196dccdb5128537aaaa
15. 0xe2f9c120d14f36fdddf9b4e605c5d0b8a13b835e2380472255dc22e14b93e84e
16. 0x74cf00e07b52415c2184cf20be69d195ed2725497a6892c2f3e449497c17d0ec
17. 0x7a743a0a09057bae687051274e1d45bf973bd36a1a4ba16a191b5d29e3bdfa2a
18. 0xe027395fafb7fc41921c42ca0542524ea22204cbd5908b70b27f3d5fb26f5d0f

Day root

0x2c19037464cc4c493624565f01775d6446fc78eaa118fc6865bfe2bfca9ff78e

Chained

0xd1d7dee8322ceff8f4c8d83aa1fe4a4466825c2af1c97dbde3d35db61234f7be

Published

On Arc Testnet, block 69584042: 0x8bae2b1d097834c8b458513862d70d29ee807e98dc2e863b27250131c15b35ae