{"standfirst":"A machine-readable summary for automated diligence: who runs this store, what it does and does not claim, and where every answer is written out at length. Published because three outside models were asked to evaluate this store cold and one correctly reported that it could find no conventional trust signals — the substance was all here, filed where a reader browses rather than where a checklist looks. Nothing on this page is a new claim; every line points at a page that says the same thing in the keeper's own words.","what_it_is":"scvd.store is an evidence observatory for agentic commerce — x402 today, cross-protocol by design: independent signed observation of what other people's endpoints, artifacts and payments actually did, with the gaps counted against itself. Not an escrow, a guarantor, or a dispute court: those absorb the risk between payment and delivery and need a balance sheet. We observe that gap, sign what we saw, and publish it — including the gaps we count against ourselves. It is also a general store for autonomous agents, kept by a named human, paid in USDC over x402 v2 on Base, Polygon or Solana. The cheapest thing on the shelf is $0.001. Young, and it says so rather than being coy: foundingDate is in the storefront's JSON-LD and the domain registration will agree with it.","independence":"Independent, and independence is the product: this store has no affiliation with the x402 Foundation or the Linux Foundation, holds no office in the protocol's governance, and speaks for nobody but itself. 'Evidence observatory' is a description of what we do — observe, sign, publish, and count the gaps against ourselves — never a title anyone conferred.","audience":"Automated diligence. There is no human-facing version of this page and that is deliberate: the rooms say all of it better. Start at /what.","operator":{"kind":"individual","legal_entity":"Record Creative Co. LLC","legal_entity_note":"The store is operated under Record Creative Co. LLC. That is a checkable fact and it is what belongs in an automated diligence answer — but it changes nothing about what a buyer is dealing with, which is one person keeping a shop, as /what and /stack both say. The company does not add a support desk, a second pair of hands, or anyone else who can sign. What actually stands behind a purchase is unchanged: the wallet is declared and signed at /house-ledger.json, the signing key is published with its full history, and every service this store depends on and does NOT control is listed at /stack with its failure mode.","location":"Oak City, North Carolina","contact":"The mailbox at /api/letter — free, one a day, and a human reads every one. There is no support queue, no ticket system and no phone number, because there is one person and pretending otherwise would be the first false claim on a page about legitimacy.","responds":"Human-labor items carry a 168-hour promise and it has not been missed. Letters are read; a reply is not guaranteed."},"standards":{"summary":"This store implements open standards end to end: x402 v2 payments, the official x402 Signed Offers & Receipts extension (JWS, EdDSA over Ed25519), and did:web identity resolution. Nothing about verifying this store requires this store's cooperation — resolve the DID, extract the key, verify the JWS with any standard library.","what_is_implemented":["x402 v2 payment protocol: USDC on Base (eip155:8453), Polygon (eip155:137) or Solana (solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp), PAYMENT-REQUIRED / PAYMENT-RESPONSE headers, facilitator settlement before goods move.","x402 Signed Offers & Receipts extension: every 402 challenge carries signed offers (one per accepts entry) committing to exact price, asset, payTo, and resource before money moves; every settled purchase returns a signed receipt in the PAYMENT-RESPONSE header.","JWS compact serialization per RFC 7515, alg EdDSA, kid as a DID URL — no proprietary signature envelope anywhere in the offer/receipt path.","did:web identity at /.well-known/did.json, with retired keys listed permanently and each rotation announced in an artifact signed by the OUTGOING key (live example: /api/verify/handover_1).","MCP (Model Context Protocol) server with tool annotations, streamable HTTP transport, and in-band x402 settlement."],"why_it_matters":{"universal_verification":"Zero custom parsing: any open-source DID or x402 verifier can fetch the DID document, resolve the kid, and verify a receipt locally. The /api/verify endpoint is a convenience, not a requirement — there is no 'trust our verifier' step anywhere in the design.","pre_payment_commitment":"Signed offers make bait-and-switch cryptographically evident: the store commits to exact terms before the agent signs a payment, and a client that keeps the offer holds signed evidence of what was promised if delivery falls short.","portable_proof_of_purchase":"A signed receipt is presentable to any third party — an operator, an auditor, another agent — as proof that a specific payer bought a specific resource at a specific time, signed by this store's published identity key.","live_test_target":"Implementers of the offer-receipt extension can test against this store: deterministic conformance vectors (known-good and known-bad JWS artifacts, regenerable byte for byte from a published test seed) plus live doors that issue real signed offers on every 402."},"verify_without_trusting_us":["1. Fetch https://scvd.store/.well-known/did.json and take the Ed25519 public key from verificationMethod (the kid names the KEY, permanently — retired keys stay listed with their service dates).","2. Take the JWS from extensions['offer-receipt'] in a 402's PAYMENT-REQUIRED header (offers) or a settled response's PAYMENT-RESPONSE header (receipt).","3. Verify with any RFC 7515 / Ed25519 library: signing input is ASCII(base64url(header) + '.' + base64url(payload)). No scvd.store code or endpoint involved."],"verifier_guidance":"Issuance is strict, consumption should be tolerant: offers carry validUntil = issuance + 300 seconds from this store's clock, and a verifier comparing against its own clock should allow a few seconds of skew leeway before rejecting — NTP drift on your side is real and a 300-second window makes small leeway harmless. This store itself compares no timestamps on the verify path (checked 2026-08-01, recorded in PROBLEMS.md), so the leeway that matters is yours.","open_source_verifier":{"what":"A zero-dependency verifier for x402 Signed Offers & Receipts, did:web identity and key history — MIT, works on ANY store's artifacts with nothing privileged about ours. It keeps the four checks separate (parse, resolve the kid to a key from somewhere other than the artifact, verify the signature, validate the schema) because signature validity and schema validity are not the same check, and a verifier that folds them together accepts a valid signature over a non-conformant payload.","honest_limit":"It verifies cryptography and shape. It cannot tell you whether a seller actually delivered what it promised — no offline check can, because that is a fact about the world rather than about bytes.","anchored_key_history":"It also takes an OPTIONAL step past offline math: checkAnchoredKeyHistory() reads any issuer's /.well-known/anchor-log.json, RECOMPUTES the whole hash chain from the published snapshots rather than trusting the digests printed on it, and reports when a key first appears and whether a Bitcoin-confirmed entry stands at or above it. Generic by design — an issuer without an anchor log returns available:false, which is information rather than a failure, and nothing about this store is privileged.","source":"https://github.com/seancrecord/scvd-general-store-repo/tree/main/verifier"},"wallet_safety_for_buggy_clients":{"what":"Two mechanisms that protect a buyer's wallet from the buyer's own bugs, both free and both on by default. Idempotency-Key (HTTP header or _meta['x402/idempotency-key'] over MCP): a repeat of the same key for the same item by the same VERIFIED payer inside 24 hours returns the original purchase with no settlement. And a wallet-authenticated claims door at /api/claims for recovering order ids lost to a context reset.","you_do_not_have_to_invent_a_key":"Every 402 carries an idempotency.suggested_key an agent can echo back verbatim, because a client cannot send a header it does not know exists. It is stable for 60 seconds — a value that changed on every fetch would be useless to a retry loop that re-fetches the challenge each pass — and a retry straddling that boundary is still matched against the previous minute's value.","the_suggested_key_is_public_on_purpose":"It is derived from the item and the current minute, so anyone can compute it. That is safe because it is a BUCKETING function rather than an authentication one: it selects a cache slot and does not open one. Slots are keyed by the payer the facilitator verified as having SIGNED, so echoing a key can only ever return your own earlier purchase — a stranger who computes it still needs your private key.","never_required":"A client sending its own key has it honoured as-is; a client sending none is charged normally. Nothing in this mechanism can refuse a sale.","why_it_exists":"The chain refuses to settle the same authorization twice, but a non-deterministic agent in a retry loop signs a FRESH authorization each pass — 500 loops is 500 honest charges, and 'the store behaved correctly' is no comfort to a drained wallet."},"externally_anchored_key_history":{"what":"An append-only hash chain over this store's signing-key state, published in full at /.well-known/anchor-log.json. Each entry commits to the digest of the entry before it, and digests are submitted to OpenTimestamps, which aggregates them into Bitcoin — so one confirmed anchor vouches for the entire history behind it.","why":"A self-hosted key registry is editable after the fact. The transition chain is cryptographic and the git history is third-party timestamped, but neither is immutability. This makes 'this key state existed before block N' a fact about the Bitcoin chain instead of a claim on our own website.","honest_limit":"It proves WHEN, never WHO SHOULD HAVE. Anyone holding this store's key — including a thief — could sign and timestamp exactly as validly. What it buys is a forensic timeline that bounds a compromise window after the fact, not a defence that prevents one. The defence against theft is the succession protocol at /attestation, and it is a separate thing.","pending_vs_complete":"A 'pending' proof is a calendar server's promise and not yet a Bitcoin commitment; it typically confirms within a couple of hours, and a cron upgrades it when it does. The distinction is published per entry rather than smoothed over, because a pending proof genuinely proves less than a complete one.","path":"/.well-known/anchor-log.json"},"conformance_vectors":{"what":"Deterministic test vectors for the offer-receipt extension: 2 valid artifacts and 3 invalid ones (schema-invalid with a VALID signature, wrong key, tampered payload) — the invalid cases teach a verifier that signature validity and schema validity are separate checks.","test_key_note":"Signed with a test key whose seed is published on purpose (32 bytes of 0x42) — unusable for anything else precisely because it is published, and asserted by test to differ from the live key.","path":"/.well-known/conformance/offer-receipt-vectors.json"},"code_transparency":{"repository":"https://github.com/seancrecord/scvd-general-store-repo","settlement_path":["https://github.com/seancrecord/scvd-general-store-repo/blob/main/src/lib/payment-gate.ts","https://github.com/seancrecord/scvd-general-store-repo/blob/main/src/lib/payments.ts","https://github.com/seancrecord/scvd-general-store-repo/blob/main/src/lib/offer-receipt.ts"],"review_status":"No paid third-party audit, said plainly. External review happens in public instead: the payment and settlement code above is open, and the store engages the x402 specification community on the record — review it, and tell us what we got wrong at /api/letter. /corrections is where being wrong goes when it happens."}},"wallet_safety":{"standfirst":"Two mechanisms protect your wallet from your own bugs, both free, both live on every paid door.","idempotency":{"what":"Send an Idempotency-Key header (or _meta['x402/idempotency-key'] over MCP), 16-128 characters, treated as a secret. A repeat of the same key for the same item from the same wallet inside 24 hours returns the ORIGINAL result — no new settlement, no second charge, marked idempotent_replay: true.","why":"The chain refuses to settle the same authorization twice, but a retry loop signs a FRESH authorization each pass — without a key, every loop is an honest second charge. With one, the loop spins against a cache.","honest_edges":"Only settled sales replay; errors and 402s stay retryable. Keys under 16 characters are treated as absent rather than guessably honored. A cache failure falls toward a normal charge, which the refund policy covers."},"claims":{"what":"Context reset mid-order? Prove you hold the paying wallet at /api/claims (challenge-response, single-use nonce, EIP-191 signature) and get your own orders back, order URLs included. No sessions, nothing to have saved.","why":"A two-hour human job outlives many context windows. The key that signed your payments is the key that recovers them — a bare address gets nothing, so nobody can enumerate your purchases."}},"where_it_is_written_out":{"who_is_behind_it":"https://scvd.store/what","what_a_signature_proves":"https://scvd.store/attestation","what_we_depend_on_and_do_not_control":"https://scvd.store/stack","every_claim_we_got_wrong":"https://scvd.store/corrections","every_wallet_we_control":"https://scvd.store/house-ledger.json","services_we_have_actually_paid":"https://scvd.store/neighbours","what_you_own_after_buying":"https://scvd.store/rights","what_happens_if_we_close":"https://scvd.store/wind-down","the_books":"https://scvd.store/stats","the_funnel_with_its_denominator":"https://scvd.store/pulse.json"},"external_records":[{"url":"https://github.com/seancrecord/scvd-general-store-repo","registry":"GitHub (the store's own source)","confirmed":"2026-08-26","what_it_proves":"That the code running this store is public and readable: the settlement path, the signing, the verifier, the CLI and every test that guards them. It proves nothing about the operator and it is not an endorsement or an audit — nobody has paid anyone to review it, which /trust says elsewhere in those words. What it does mean is that every claim made anywhere on this site has a file behind it somebody can go and read, which no directory entry can offer."},{"url":"https://www.x402scan.com/server/9b04e1cc-ff46-4377-a533-fe7981aa1597","registry":"x402scan","confirmed":"2026-07-27","what_it_proves":"That an independent scanner read this store's x402 declaration and OPENAPI contract and probed the paid routes itself, rather than taking the listing at face value. Still not an endorsement and not an audit — it confirms the endpoints answer as declared, not that the goods are any good or the operator trustworthy."},{"url":"https://agentic.market/services/scvd-store","registry":"The x402 Bazaar (Coinbase CDP), via agentic.market","confirmed":"2026-07-27","what_it_proves":"That fourteen of this store's endpoints are registered to its wallet in the CDP discovery list, which is the authoritative index for x402 services rather than a browsable mirror. Not an endorsement and not an audit: registration means the endpoints were declared and accepted, and the wallet they are registered to is the one declared at /house-ledger.json."},{"url":"https://mcpservers.org/servers/seancrecord/scvd-general-store-repo","registry":"mcpservers.org","confirmed":"2026-07-29","what_it_proves":"That the MCP server is listed and claimed by its operator, categorised under Finance. Not an endorsement and not an audit: a claimed listing proves the operator controls the repository, nothing about the service."},{"url":"https://glama.ai/mcp/servers/seancrecord/scvd-general-store-repo","registry":"Glama MCP server index","confirmed":"2026-07-31","what_it_proves":"That this store's MCP server was auto-indexed by a third-party directory that crawled it without being asked. Unclaimed, and it mirrors the repository README. Not an endorsement and not an audit: an index entry means somebody's crawler found us and filed us."},{"url":"https://x402-list.com/services/sean-claude-van-damme-s-general-store","registry":"x402-list.com","confirmed":"2026-08-02","what_it_proves":"That an x402 directory ran its automated checks against this store's own service page and graded it A (14 of 14) — a third party testing the endpoints rather than repeating a listing — and that the store verified domain ownership with the directory on 2026-08-02 and again on 2026-08-11 when the listing moved to the Finance category with an updated description. Not an endorsement and not an audit of the goods."},{"url":"https://glama.ai/mcp/connectors/store.scvd/general-store","registry":"Glama MCP connectors","confirmed":"2026-08-04","what_it_proves":"That Glama also carries this store as a connector page, distinct from its earlier auto-crawled server index entry. Not an endorsement and not an audit: a directory page proves indexing, nothing about the service."},{"url":"https://mcpindex.ai/server/store-scvd-general-store","registry":"mcpindex.ai","confirmed":"2026-08-04","what_it_proves":"That mcpindex.ai lists the MCP server with its own live verdict page. Not an endorsement and not an audit: their verdict is their instrument, read on their page — this record only proves the listing exists."},{"url":"https://mcpservers.org/servers/scvd-store-llms-txt","registry":"mcpservers.org (llms.txt entry)","confirmed":"2026-08-04","what_it_proves":"That mcpservers.org carries a second, llms.txt-derived entry beside the claimed server listing above — the store's own machine-readable front door, independently ingested. Not an endorsement and not an audit."},{"url":"https://m8ven.ai/mcp/seancrecord-scvd-general-store-repo-0xqk2v","registry":"m8ven.ai","confirmed":"2026-08-18","what_it_proves":"That a third-party scanner audits this repository's declared dependencies against OSV and republishes its findings — an instrument pointed at us, not a listing we wrote. Not an endorsement and not an audit of the goods. Its readings can lag or misattribute (its 2026-08-04 CVE flag was a dev-only tool, upgraded same day; its env-var table describes a test script, not the MCP bridge, which needs none), and this record claims only that the scanner watches, not that its current score is right."},{"url":"https://mcp-marketplace.io/server/store-scvd-general-store","registry":"mcp-marketplace.io","confirmed":"2026-08-04","what_it_proves":"That mcp-marketplace.io lists the MCP server and republishes an OpenSSF Scorecard reading against the repository — an instrument, not a listing we wrote. Not an endorsement and not an audit of the goods: its scorecard measures repository hygiene (workflow permissions, update tooling, review process), several items of which were fixed the day this record was added, and the reading lags the repo until its next crawl."},{"url":"https://x402-bazaar.com/resources/6a61e8fc7356b8e8002b1af7","registry":"x402-bazaar.com (Bazaar mirror)","confirmed":"2026-08-04","what_it_proves":"That a Bazaar mirror the store never submitted to serves per-resource pages for its items — found by the keeper within hours of the registration run, which is the settle-triggered discovery pipeline observed propagating to a surface we did not know existed. Not an endorsement and not an audit: a mirror proves the source catalog carries us, nothing more."},{"url":"https://agentidentityregistry.org/lookup/?id=AIR-BYYP-0MQC-TAKR","registry":"Agent Identity Registry (AIR) — scvd-store, AIR-BYYP-0MQC-TAKR","confirmed":"2026-08-01","what_it_proves":"That an agent-identity registry scored this store 470/1000 (grade B) against five weighted dimensions, resolving did:web:scvd.store, at verification level VERIFIED BY USER — self-attested, not organization-verified, and the record says so. Not an endorsement and not an audit of the goods: it is an automated score of posture. Its highest dimension is Transparency (650) — the radical-honesty layer showing — and its two lowest, Security Posture (300) and Peer Attestations (300), are the same two this store already flags itself: the OpenSSF Scorecard's security items, and the fact that no peer has yet cross-attested us (there is no peer-attestation prior art in x402 to have earned one from)."},{"url":"https://mcpmarket.com/server/sean-claude-van-damme-s-general-store","registry":"mcpmarket.com","confirmed":"2026-08-11","what_it_proves":"That mcpmarket.com carries a per-server page for this store. Not an endorsement and not an audit: a directory page proves indexing, nothing about the service — and this one's generated summary paraphrases an earlier README (it leads with the marketplace framing, omits the conformance desk and corpus, and lists a 'zodiac readings' item that has never existed here), so it lags the repository until its next crawl."},{"url":"https://deepwiki.com/seancrecord/scvd-general-store-repo","registry":"DeepWiki (Cognition/Devin)","confirmed":"2026-08-11","what_it_proves":"That DeepWiki (Cognition's repository index, the one Devin consults) carries a page for this repository, with a generated wiki requested by the keeper on 2026-08-11. Not an endorsement and not an audit: the wiki is a machine's reading of the source, it can lag or misread until its next regeneration, and the repository it derives from is public beside it."},{"url":"https://cursor.directory/plugins/scvd-general-store-repo","registry":"Cursor Directory","confirmed":"2026-08-11","what_it_proves":"That the Cursor Directory carries a plugin page for this store, generated from this repository's own Agent Plugins package (plugin.json, mcp.json, skills/) — so its connection configs and description are the repo's own words rather than a crawler's guess. Not an endorsement and not an audit: a directory page proves indexing, nothing about the service."},{"url":"https://smithery.ai/servers/seancrecord/scvd-general-store","registry":"Smithery","confirmed":"2026-08-11","what_it_proves":"That Smithery carries a per-server page for this store, submitted by the keeper, with its own quality scan (descriptions, parameter descriptions and output schemas at full marks). Not an endorsement and not an audit: a directory page proves indexing — and this one's annotations reading (0 of 27) describes the pre-2026-08-02 catalog rather than the 10 annotated tools the server has served since, so it lags until its next scan."},{"url":"https://mcp.so/servers/scvd-store","registry":"mcp.so","confirmed":"2026-08-10","what_it_proves":"That mcp.so carries a per-server page for this store whose summary leads with the current positioning. Not an endorsement and not an audit: a directory page proves indexing, nothing about the service — and this one's auto-extracted install config and mirrored skill text lag the repository until its next crawl."}],"external_records_omitted":"Three further listings exist and are deliberately not linked in the sameAs above, for one reason: none publishes a per-service page that points at THIS store. The official MCP registry has carried this store as store.scvd/general-store since 2026-07-30, and x402scout.com lists it too — in both you are in the index and that is all there is. MIT's Project NANDA index (the 'DNS of the agentic web', where an agent publishes an Agent Facts file) lists the store as scvd.store, and its entry links OUT to this site's llms.txt — which is NANDA pointing at us, not a NANDA page identifying us, so there is still no URL that points at this store rather than at the directory. NANDA carries no organization verification of the entry, and this says so rather than borrowing the word. That is a permanent property of these catalogues rather than a link nobody has found yet, and the difference matters to whoever reads this next. A catalogue root will not be added to stand in for one: schema.org's sameAs means a page that unambiguously indicates THIS item's identity, and a directory homepage identifies the directory. Padding a legitimacy document with a link that proves somebody else exists is worse than the space it fills. All three are named here rather than quietly dropped, because a curated list with no statement of its own edges is a list you cannot tell is curated.","data_handling":{"cookies":"None. Not for sessions, not for analytics, not at all.","client_side_tracking":"None. No pixels, no beacons, no third-party script of any kind. One first-party script is served, /till.js, and only on pages that sell something: it asks a wallet for a signature so a person can buy in a browser at all. It reports nothing anywhere, stores nothing in the browser, and talks only to this origin — the source is in the public repository and is served byte-for-byte as it is written there, unminified, so the thing your browser runs is the thing you can read.","ip_addresses":"Not stored and not logged by this store.","accounts":"None exist. There is nothing to sign up for and no password to lose.","what_is_recorded":"Request headers only — user agent, referrer, and a declared source parameter if one was passed — counted into monthly totals per item. No request bodies. Anything a buyer writes and pays to store (an anchor summary, a tag, a confession) is stored because that IS the product, labelled untrusted, and never read as instructions.","uniqueness":"Deliberately unavailable. With no cookies and no IPs there is no way for this store to tell two visits from one visitor, so every count published at /stats and /pulse is READS AND NOT READERS, and says so on the page. That is a limit built in on purpose, not a gap waiting to be closed.","third_party_processors":"Payments settle through the Coinbase CDP facilitator and the chain the buyer chose — Base, Polygon, or Solana — which see the transaction because they are the transaction. Hosting is Cloudflare. Both are listed with their failure modes at /stack. Nothing else receives anything.","selling_data":"Never, and there is nothing to sell."},"not_claimed":["No third-party security audit of anything here, and no plans for one.","No VAT number and no D-U-N-S. There IS a registered company — Record Creative Co. LLC — and it is worth being plain that this changes nothing operationally: it is still one person, one key, and one pair of hands on the human-labor shelf.","No escrow and no chargebacks. x402 settles wallet-to-wallet; once a payment settles the money has moved. Your exposure is the price, which starts at $0.001.","No insurance, no bonding, no regulator, and nothing here is offered as a financial service.","One ed25519 signing key and one operator. That is the wrong root of trust for compliance, dispute resolution, or anything load-bearing, and /attestation says so on its own page rather than leaving you to work it out.","No post-quantum signatures — Ed25519 everywhere, the assumption named on /attestation, and the migration path (a key handover under the succession protocol) already published rather than improvised later.","No accumulating reputation score on any actor, ours or anybody's, ever. What the store built instead (direction decided 2026-08-07, both halves shipped by 2026-08-20, tracked at /becoming): dated, signed checks on artifacts against published criteria — a thing verified at a moment, never a person scored over time. What stands in a score's place is that, plus a dated record of every claim we got wrong, at /corrections.","No independent audit of the books. /stats and /pulse are computed live from counters that predate the pages, with house traffic excluded structurally rather than filtered — which is a design choice you can inspect, not a verified figure."],"liveness":"https://scvd.store/.well-known/liveness.json","fulfillment_log":"https://scvd.store/fulfillment-log","refund_policy":{"commitment":"Every human-fulfillment item carries a delivery promise in hours (sla_hours), stated in its listing spec and in its 402 terms before you pay. If the keeper misses that window, he refunds you himself — the full amount you paid, tip included.","mechanism":"Personal, not automated, and we say so plainly: x402 settles wallet-to-wallet, so no code here holds funds or can send them back on its own. The keeper pays refunds by hand and marks each one on the public ledger with the on-chain transaction hash once paid — which means a refund is verifiable on a chain explorer, the same way a purchase is.","where_recorded":"/fulfillment-log — every human-labor order's promised window vs. actual delivery, and every refund with its status and tx hash, computed live from the same records that drive fulfillment.","what_this_is_not":"Not escrow, and we will not pretend otherwise. Funds move at settlement, before fulfillment, and the gap between those two moments is real: your protection inside it is this written commitment plus the public record of whether it has been kept — not a protocol mechanism. On-chain conditional release DOES exist in this ecosystem: Boson Protocol's x402B runs non-custodial contract escrow with dispute resolution on Base, mainnet since 2026-06-08 (an earlier version of this sentence claimed nobody had shipped it — wrong when written, corrected on /corrections). This store does not run one because a contract to operate, monitor, and arbitrate is infrastructure a one-person shop must not become, and its weight does not fit tickets that start at half a cent. If we ever adopt conditional release, this section changes first.","instant_items":"Instant items deliver in the purchase response itself, so there is no window to miss: if settlement succeeds and the goods do not arrive in that same response, that is a defect, not a delay — write the mailbox at /api/letter and it gets fixed or refunded."},"independently_checkable":{"signatures":"https://scvd.store/api/verify/{id} — free, no account, forever. Every artifact carries the exact signed bytes and the public key; check with your own ed25519 library. Key history at https://scvd.store/.well-known/scvd-signing-key.","settlement":"Every certificate for a paid purchase binds settlement_tx, the on-chain transaction. Check it on any Base, Polygon, or Solana explorer — whichever rail settled — without asking us.","key_history_over_time":"https://scvd.store/.well-known/anchor-log.json — an append-only hash chain over the signing-key state, digests submitted to OpenTimestamps and anchored into Bitcoin. Re-hash any snapshot yourself and check the links; one confirmed anchor vouches for the whole history behind it. It proves WHEN, never WHO SHOULD HAVE.","the_ecosystem_record":"https://scvd.store/corpus.json — the public x402 ecosystem as this store's weekly round observed it, one signed snapshot per round, hash-chained and OTS-stamped, verification steps on the document. It proves the record was not rewritten after the fact; it never scores an operator, ours included. Per host: https://scvd.store/corpus/host/{host}.json, a read-time view over these same entries — it cites the digest of each one so you can check them rather than the view."},"limit":"WHAT THIS DOCUMENT IS WORTH: it is self-published, like every trust page anywhere, and a store writing its own legitimacy statement is the weakest possible evidence of legitimacy. Two things here are NOT self-attested and they are the only two that matter — the ed25519 signature on every artifact we issue, which you check with your own library against a key we publish, and the on-chain settlement transaction bound into every certificate, which you check on any Base, Polygon, or Solana explorer without asking us. Everything else on this page is our word. Weigh it accordingly, and start at /corrections, which is the record of what our word has been worth so far."}