Evidence row 786136

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://api.lookproof.dev/v1/http/csp-parse"
    ]
  ],
  "name": "Lookproof",
  "owner_address": "0x5be2be9f95549a2d69951d24a2b3901d1df1bc05",
  "raw": {
    "accepts": [
      {
        "amount": "2000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x5bE2bE9f95549A2D69951d24A2B3901D1df1Bc05",
        "scheme": "exact"
      }
    ],
    "description": "Parse a pasted Content-Security-Policy value as CSP Level 3 does: directives and sources per policy, 'unsafe-inline' and 'unsafe-eval', wildcard and scheme-only script or plugin sources, missing default-src, object-src and base-uri, and report-only mode. Offline. Use when an agent writes or reviews a CSP before it is deployed. Input: {\"header\": \"default-src 'self'; script-src 'self'\"}.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "header": "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.example.com; object-src 'none'; base-uri 'self'"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "additionalProperties": false,
                  "description": "One pasted HTTP header value; the header name in front of it is optional.",
                  "properties": {
                    "header": {
                      "maxLength": 8192,
                      "minLength": 1,
                      "title": "Header",
                      "type": "string"
                    }
                  },
                  "required": [
                    "header"
                  ],
                  "title": "HeaderInput",
                  "type": "object"
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST",
                    "PUT",
                    "PATCH"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-28T10:41:04.919Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-28T10:41:04.704Z"
    },
    "resource": "https://api.lookproof.dev/v1/http/csp-parse",
    "serviceName": "Lookproof",
    "tags": [
      "http",
      "csp",
      "security",
      "headers",
      "xss"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Parse a pasted Content-Security-Policy value as CSP Level 3 does: directives and sources per policy, 'unsafe-inline' and 'unsafe-eval', wildcard and scheme-only script or plugin sources, missing default-src, object-src and base-uri, and report-only mode. Offline. Use when an agent writes or reviews a CSP before it is deployed. Input: {\"header\": \"default-src 'self'; script-src 'self'\"}."
}

What the leaf hashes

{"body":"0fddaf8db47fd093301407dfedfa43520ad4cb6588e63e7a03a71304ebe46139","id":786136,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793211324119304,"prev":null,"subject":"x402_bazaar:https://api.lookproof.dev/v1/http/csp-parse","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-28 (231336 rows).

1. 0xc108c492e435fa7fb8e64e5150a9af4e4e0c47f4f89cac657346acffad2cc24a
2. 0x4a765f92beb0eb3db5d431a95043c7dd04c5ee14ee787a7773ac6eaf51b151d0
3. 0x66ef49c074ff68fd8af6273af28d1700f20f718d20b9fefe0f64df65c26e3092
4. 0x381ca27726983352652e1624b529c035f0ea3f0378b8e7384648cbc0cd215d00
5. 0x28f78c03ff8714fefbc0752210a976384b6afc8336ba2548c16e72fbe90bb976
6. 0x14a37ba9f43339b8bd06605c1791407173192cdab4b64f848e633b67383c132e
7. 0xd20ab98861ebee64f7e0b6c3f4f8a19a1066ebc9ae660f32a5f07d828073c243
8. 0x2ac25316d7b0631ad0d4015f6c178df65d6df50e7159b8a66650f769b297d9a1
9. 0xf5575b9b4cb19c8dd440b22cb189299f89a755a6a22f60fb806abc6fd2630a8d
10. 0xf8a003fed8bf198e5a41be95d3e4210ddf8134b7a70899ad09dbeecfc11956b3
11. 0xc79ea060175a9134e84d532f95a52074c91a666532311faf3b546ab67f80f855
12. 0x7d7c0b3eedb77dd5efc1a0565bf11347cfd7c983bbc429e9840837ad4cf17e16
13. 0x4e311d836f53bce1d38273217ead32c9dfd4eac156e4e78fc865e52c86afda83
14. 0x4dedfee32d37ea3cdc60e339d676b411d314f945b00a30f8e3bd1e0470526cf9
15. 0xc21e7661f5d6220994a88cc71b1262eeee3b912a2d383d18f38a631c534bfd71
16. 0x32beeeb960280bc48748681cb10297ede9403461fe9c8143fdf946548e552926
17. 0xe08e8bd91858a8a10c46ecde9c29a6288b960987303173c5e882afb46ce91fa0
18. 0xe6cfe00ae4e02bc12327e45b5f3334ea5850ba3bcc8e3101d30a8189856a95af

Day root

0x2c19037464cc4c493624565f01775d6446fc78eaa118fc6865bfe2bfca9ff78e

Chained

0xd1d7dee8322ceff8f4c8d83aa1fe4a4466825c2af1c97dbde3d35db61234f7be

Published

On Arc Testnet, block 69584042: 0x8bae2b1d097834c8b458513862d70d29ee807e98dc2e863b27250131c15b35ae