← The evidence ledger
Evidence row 76422
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/cors/preflight
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- dbb925c9d086e9821f568ba9c2d739cac9d120820c708a78c578464f61499f21
- Leaf
- 0x49190e43d65a666140fdb731c80926023b02ef792854bdbffa74fcc6d2b650b5
What was observed
{
"endpoints": [
[
"x402",
"https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/cors/preflight"
]
],
"name": "Forest Web",
"owner_address": "0xb48d918151311f982d542ef5c84cc1cd54cff7a9",
"raw": {
"accepts": [
{
"amount": "2000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0xb48D918151311F982d542eF5C84cc1cd54CFf7a9",
"scheme": "exact"
}
],
"description": "Send exactly one bounded non-credentialed browser-style CORS OPTIONS preflight to the supplied public URL and normalize the observed Access-Control-Allow-* response into origin, method and header decisions. Redirects are not followed, so the result describes the exact resource URL. Forest does not send cookies or Authorization, invoke the requested resource afterward, run JavaScript, or guarantee browser/runtime success beyond the observed response. Base mainnet USDC",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"origin": "https://forestfactory.dev",
"requested_headers": [
"content-type",
"x-request-id"
],
"requested_method": "POST",
"url": "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/fixtures/cors"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"capability": "cors.preflight",
"data": {
"allowed_headers": [],
"allowed_methods": [],
"allowed_origin": "example",
"blockers": [],
"credentials_allowed": false,
"final_url": "example",
"headers_allowed": false,
"method_allowed": false,
"origin_allowed": false,
"preflight_passes": false,
"provider_request_count": 1,
"redirect_count": 0,
"scope": "observed_noncredentialed_cors_preflight_only",
"status": 100,
"warnings": []
},
"meta": {
"cache": "miss",
"checked_at": "2026-01-01T00:00:00.000Z",
"duration_ms": 0,
"provider": "safe-http-options"
},
"ok": true,
"version": "1"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"additionalProperties": false,
"properties": {
"origin": {
"description": "Public origin value used to scope this lookup.",
"maxLength": 2048,
"minLength": 1,
"pattern": "^https?://",
"type": "string"
},
"requested_headers": {
"description": "Public requested headers value used to scope this lookup.",
"items": {
"maxLength": 128,
"minLength": 1,
"type": "string"
},
"maxItems": 20,
"type": "array"
},
"requested_method": {
"description": "Public requested method value used to scope this lookup.",
"maxLength": 32,
"minLength": 1,
"type": "string"
},
"url": {
"description": "Public HTTP(S) URL to inspect, resolve, or compare.",
"maxLength": 2048,
"minLength": 1,
"pattern": "^https?://",
"type": "string"
}
},
"required": [
"url",
"origin",
"requested_method"
],
"type": "object"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"additionalProperties": false,
"properties": {
"capability": {
"const": "cors.preflight",
"description": "Public capability value used to scope this lookup."
},
"data": {
"additionalProperties": false,
"description": "Public data value used to scope this lookup.",
"properties": {
"allowed_headers": {
"description": "Public allowed headers value used to scope this lookup.",
"items": {
"type": "string"
},
"type": "array"
},
"allowed_methods": {
"description": "Public allowed methods value used to scope this lookup.",
"items": {
"type": "string"
},
"type": "array"
},
"allowed_origin": {
"description": "Public allowed origin value used to scope this lookup.",
"type": [
"string",
"null"
]
},
"blockers": {
"description": "Public blockers value used to scope this lookup.",
"items": {
"type": "string"
},
"type": "array"
},
"credentials_allowed": {
"description": "Public credentials allowed value used to scope this lookup.",
"type": "boolean"
},
"final_url": {
"description": "Public final url value used to scope this lookup.",
"type": "string"
},
"headers_allowed": {
"description": "Public headers allowed value used to scope this lookup.",
"type": "boolean"
},
"method_allowed": {
"description": "Public method allowed value used to scope this lookup.",
"type": "boolean"
},
"origin_allowed": {
"description": "Public origin allowed value used to scope this lookup.",
"type": "boolean"
},
"preflight_passes": {
"description": "Public preflight passes value used to scope this lookup.",
"type": "boolean"
},
"provider_request_count": {
"const": 1,
"description": "Public provider request count value used to scope this lookup."
},
"redirect_count": {
"const": 0,
"description": "Public redirect count value used to scope this lookup."
},
"scope": {
"const": "observed_noncredentialed_cors_preflight_only",
"description": "Public scope value used to scope this lookup."
},
"status": {
"description": "Public status value used to scope this lookup.",
"maximum": 599,
"minimum": 100,
"type": "integer"
},
"warnings": {
"description": "Public warnings value used to scope this lookup.",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"status",
"final_url",
"redirect_count",
"allowed_origin",
"allowed_methods",
"allowed_headers",
"credentials_allowed",
"origin_allowed",
"method_allowed",
"headers_allowed",
"preflight_passes",
"blockers",
"warnings",
"provider_request_count",
"scope"
],
"type": "object"
},
"meta": {
"additionalProperties": false,
"description": "Public meta value used to scope this lookup.",
"properties": {
"cache": {
"description": "Public cache value used to scope this lookup.",
"enum": [
"hit",
"miss",
"bypass"
]
},
"checked_at": {
"description": "Public checked at value used to scope this lookup.",
"type": "string"
},
"duration_ms": {
"description": "Public duration ms value used to scope this lookup.",
"minimum": 0,
"type": "integer"
},
"provider": {
"description": "Public provider value used to scope this lookup.",
"type": [
"string",
"null"
]
}
},
"required": [
"provider",
"checked_at",
"cache",
"duration_ms"
],
"type": "object"
},
"ok": {
"const": true,
"description": "Public ok value used to scope this lookup."
},
"version": {
"const": "1",
"description": "Package version whose public metadata should be checked."
}
},
"required": [
"ok",
"capability",
"version",
"data",
"meta"
],
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-25T23:58:58.675Z",
"quality": {
"l30DaysTotalCalls": 4,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-25T23:58:58.467Z"
},
"resource": "https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/cors/preflight",
"serviceName": "Forest Web",
"tags": [
"cors",
"api",
"http"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Send exactly one bounded non-credentialed browser-style CORS OPTIONS preflight to the supplied public URL and normalize the observed Access-Control-Allow-* response into origin, method and header decisions. Redirects are not followed, so the result describes the exact resource URL. Forest does not send cookies or Authorization, invoke the requested resource afterward, run JavaScript, or guarantee browser/runtime success beyond the observed response. Base mainnet USDC"
}What the leaf hashes
{"body":"dbb925c9d086e9821f568ba9c2d739cac9d120820c708a78c578464f61499f21","id":76422,"kind":"listing","method":"baseline/1","observed_us":1793025492248558,"prev":null,"subject":"x402_bazaar:https://http--forest-gas-station-mainnet--lcjl27p8lmjs.code.run/cors/preflight","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x491929757cf762af75e7808c766b41167c641a9deac525d6afcb2516ac093436
- 0xb6214bdaef1168bfee9a704a9dfc14909aa94fadb47689a2434038d2e822f486
- 0x5a070a3ab88643e995165d80873111c483b0a0eb30677b55bdb329165f774ddc
- 0x33bacb78b0e98c2165e504d5a81f55f2328eb5d387654e5c019d7ea7ffcdf09a
- 0x2d791a07a1194f57c6c9af2d19ad9a7037dc769410a895a44701e4d5d6c674de
- 0x04347545fcad8e9ac8ddd89b58111e4415bb7e4a1104dd2d7521ffcd3d9195b9
- 0x76c19e7ec088bb0ed1a13ccbdeae4dc72c04ab0756b45dff15cc1282821755ae
- 0xc7030292d06775814630ce84a84f8aace027d708bd27b383e364a8af1e25fd7f
- 0x7541cd1918e38f4a0f6add627a7846433315f4898be3452c4fe4e6121a5b9747
- 0x1c31b9fd609755e3d960fab27bd2b1eb3a2104f15e3f9261a56d30e3613f4c01
- 0xa40c09a143bc388ccac821ec3854902941c513470a57a806c98060a6d63aedf9
- 0xee7d5711cd2515f4b08f3e4041d3d56304f9db6bffd82d82746f0f4ea43b8f26
- 0xb86fa861d04737cb507e721eefbb066d26528fdb6017b1145c18d1223b93ee21
- 0x88e326a39b26e2c125306c9d3805d14398ace088bba9a2a0aa376b811cfb201a
- 0x2be1e80e065dd6b2cc75a7142be22225acd144ac975d70bf24b4f01fd76dc497
- 0x2e6a32eb32761c210560e852405e2f865f958ddbe01027894f8b9c1b3433b9f0
- 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae