Endpoint report ($0.05): what the locked teasers hide
Live. Every free check answer carries a locked block with two teasers: drift (for example "2 changes in 30d": a count only, never which terms or when) and hygiene (a grade: A = quality_ok, C = bad content type, D = schema mismatch, F = bad status or unreachable, "–" plus a reason when there is nothing to validate). Next to it, locked_commitments holds one sha256: digest per locked item (drift_history, hygiene_detail) and a ref (cm-…), valid for 30 days.
Buy the report: POST https://api.402xagent.com/v1/products/endpoint-report with JSON {"url":"https://api.402rates.com/v1/ping","commitment_ref":"cm-0123456789abcdef"} and an x402 payment of $0.05 USDC on Base (no free tier; the same price for everyone). The signed er- receipt reveals exactly the committed snapshots (which terms changed, when, from what to what; the full hygiene checks) with their nonces. Add "include_current": true to also get today's stored data under current, which the commitment does not cover. Without a commitment_ref the report commits and reveals in one step.
Verify a report
- Keep
locked_commitmentsfrom your free check. - For each key k: compute
"sha256:" + hex(sha256(JCS({snapshot: revealed[k].snapshot, nonce: revealed[k].nonce})))(RFC 8785 canonical JSON; the nonce is 32 bytes hex). - It must equal
locked_commitments[k]. A changed snapshot, a different nonce or newer data gives a different digest. - Verify the receipt's ed25519 signature with the kid in /.well-known/402xagent-keys.json (see receipt signatures below).
Public views of every receipt (sc-, ps-, er-) never show buyer wallets, payment payloads, nonces of your payment, settle transactions or client IPs.