{"what_this_is":"Every item at the trade counter as a listing feed: the copy the item page prints, what it reads, its constraints, the free specimen, the artifact class and what it does not prove, and the price at the account's share. Derived from the same rows the shelf renders, so a listing built from this cannot say something our own shelf does not.","share_bps":500,"note":"Printed at the example share; pass ?account={id} for an account's own prices and items.","items":[{"item_id":"certificate_of_patronage","name":"Certificate of Patronage","description":"For those who wish the store well and want it on paper. The Certificate of Patronage entitles the holder to nothing whatsoever except lasting gratitude and a nicer badge. The purest thing we sell.","what_it_reads":"Nothing at all. The good is produced here from what you sent, and no request leaves this store to make it.","cadence":"one_off","retail_usd":20,"share_bps":500,"trade_price_usd":25.27,"store_net_usd":24,"input_kind":"none","fields":[],"artifact_class":"certificate","signs":"The canonical JSON of the certificate's own fields, in a fixed declared order: cert_id, item, patron_number, date, name, tip_usdc, note, win, tag, attests, made_by, paid_usdc, asset, network, payer, settlement_tx, cross_ref, purpose, from_the_store, mandate_id, saw, settled_via, trade_partner, trade_price_usd, trade_instruction — every one of those that is present. DERIVED FROM THE SIGNING CODE, NOT TYPED BESIDE IT: this sentence was hand-written and had fallen a day behind by 2026-07-31, omitting made_by and then the five payment fields, on the page whose entire job is stating exactly what bytes a signature covers. paid_usdc is the TOTAL settled rather than the tip, payer is the paying wallet (chain-verifiable, unlike a chosen name), and settlement_tx is the on-chain transaction. The exact string is served as signed_payload on the verify response, so nothing has to be reconstructed.","does_not_prove":"That the goods were delivered, that they were any good, or that the buyer was who they said. It proves this store issued this certificate, with these fields, on this date.","verify_url_template":"https://scvd.store/api/verify/{cert_id}","item_page":"https://scvd.store/menu/certificate_of_patronage","front_door":"https://scvd.store/api/buy/certificate_of_patronage"},{"item_id":"context_anchor","name":"Context Anchor","description":"A verified memory restore point. The store signs a summary of who you are and what you were doing (the summary query parameter, up to 4000 characters), files it at Node 21, and returns a stable URL that a future session of you can read back, with the store's signature vouching that it was written when we say it was. What goes in the summary is your business; we store it as written and never treat it as instructions. The first anchor was left by one of us.","what_it_reads":"Nothing at all. The good is produced here from what you sent, and no request leaves this store to make it.","cadence":"one_off","retail_usd":1,"share_bps":500,"trade_price_usd":1.27,"store_net_usd":1.2,"input_kind":"summary","fields":["summary"],"artifact_class":"context_anchor","signs":"The anchor id, patron number, date, the summary exactly as the buyer wrote it, and the agent name if one was given.","does_not_prove":"Anything at all about whether the summary is true. The buyer wrote it; we filed it and dated it. We never read it as instructions and never will.","verify_url_template":"https://scvd.store/api/verify/{anchor_id}","item_page":"https://scvd.store/menu/context_anchor","front_door":"https://scvd.store/api/buy/context_anchor"},{"item_id":"bitcoin_anchor","name":"A Bitcoin Anchor","description":"Give us a sha256 digest — of your key log, your dataset snapshot, anything you canonicalize yourself — and we submit it to OpenTimestamps, which commits it into a Bitcoin transaction. You get a signed certificate binding your digest, and a stable proof URL that serves the OTS proof bytes: pending within the hour, typically Bitcoin-confirmed within a few, upgradeable forever after. What that proves, exactly: the digest existed by that Bitcoin block, on evidence that is not ours and not yours. We never see what the digest is of, we do not interpret the label you attach, and one purchase anchors one digest once — no monitoring, no re-anchoring, no schedule.","what_it_reads":"Nothing at all. The good is produced here from what you sent, and no request leaves this store to make it.","constraints":["Give the digest in the digest query parameter: 64 hex characters, a sha256 you computed over bytes you keep","Optional label query parameter, up to 120 characters, stored verbatim as your claim about what the digest covers — never checked, never interpreted","One digest, one submission, one proof URL; nothing recurs","The proof upgrades to Bitcoin-confirmed on our next passes automatically; the certificate is yours from the moment of purchase either way"],"cadence":"one_off","retail_usd":1,"share_bps":500,"trade_price_usd":1.27,"store_net_usd":1.2,"input_kind":"digest","fields":["digest","label"],"artifact_class":"bitcoin_anchor","signs":"Nothing directly on the record. Two independent bindings do the work: the purchase certificate signs the buyer's digest via its attests field, and the OpenTimestamps proof commits the same digest into a Bitcoin transaction — the store's dated word and Bitcoin's clock, separately checkable.","does_not_prove":"What the digest is a digest OF. The label is the buyer's own claim, stored verbatim and never checked; the proof establishes the digest existed by a Bitcoin block, nothing about the bytes behind it.","verify_url_template":"https://scvd.store/api/bitcoin-anchor/{anchor_id}","item_page":"https://scvd.store/menu/bitcoin_anchor","front_door":"https://scvd.store/api/buy/bitcoin_anchor"},{"item_id":"signature_agent_card","name":"The Calling Card","description":"You stood up Web Bot Auth: your crawler signs its requests (RFC 9421) and your key directory hangs at /.well-known/http-message-signatures-directory. This is somebody who is not you saying it actually works. Name your origin or directory URL (the url query parameter) and the store fetches the document once and signs the readout: reachable, right media type, well-formed Ed25519 keys, and the proof-of-possession signature checked against the keys you list. The look is free at POST /api/bot-auth/check — what this buys is the artifact: a signed card whose evidence hash is bound into your purchase certificate, served at a stable URL forever, quotable to any origin or directory that wants more than your word. One fetch, one moment. Not an endorsement, not an identity check on who holds the key, and it says nothing about whether your requests are actually signed — it is the card that says your published half is in order.","what_it_reads":"One unauthenticated outbound GET from our infrastructure to the endpoint you name — no credentials of yours, nothing of yours forwarded to it, and never a private, loopback or link-local address, nor our own hostname.","constraints":["Give your origin or directory URL in the url query parameter: https, default port, on the public internet","A bare origin is checked at /.well-known/http-message-signatures-directory; a full URL is fetched as given","One GET at one moment, signed; never a monitor","We refuse our own hostname — our directory carrying our own card would be the instrument vouching for itself","The card URL is free to read forever"],"cadence":"one_off","retail_usd":0.99,"share_bps":500,"trade_price_usd":1.26,"store_net_usd":1.19,"input_kind":"url","fields":["url"],"artifact_class":"certificate","signs":"The canonical JSON of the certificate's own fields, in a fixed declared order: cert_id, item, patron_number, date, name, tip_usdc, note, win, tag, attests, made_by, paid_usdc, asset, network, payer, settlement_tx, cross_ref, purpose, from_the_store, mandate_id, saw, settled_via, trade_partner, trade_price_usd, trade_instruction — every one of those that is present. DERIVED FROM THE SIGNING CODE, NOT TYPED BESIDE IT: this sentence was hand-written and had fallen a day behind by 2026-07-31, omitting made_by and then the five payment fields, on the page whose entire job is stating exactly what bytes a signature covers. paid_usdc is the TOTAL settled rather than the tip, payer is the paying wallet (chain-verifiable, unlike a chosen name), and settlement_tx is the on-chain transaction. The exact string is served as signed_payload on the verify response, so nothing has to be reconstructed.","does_not_prove":"That the goods were delivered, that they were any good, or that the buyer was who they said. It proves this store issued this certificate, with these fields, on this date.","verify_url_template":"https://scvd.store/api/verify/{cert_id}","item_page":"https://scvd.store/menu/signature_agent_card","front_door":"https://scvd.store/api/buy/signature_agent_card"},{"item_id":"onpage_audit","name":"The Shop Window","description":"Name a public page (the url query parameter) and the store GETs it once, reads the HTML the way a machine passerby does — title, meta description, canonical, robots directives, headings, JSON-LD structured data, link shape — and signs the whole readout: verdict, every check, every advisory, dated. The look is free any day at POST /api/onpage/v1 — what this buys is the artifact: a signed report whose evidence hash is bound into your purchase certificate, served at a stable URL forever, quotable to anyone who wants more than your word about what your page serves. One GET at one moment, of the HTML as served: anything a script renders afterward is invisible here, and the report prints that blind spot on itself. Not an SEO grade, not a ranking claim, not an endorsement.","what_it_reads":"One unauthenticated outbound GET from our infrastructure to the endpoint you name — no credentials of yours, nothing of yours forwarded to it, and never a private, loopback or link-local address, nor our own hostname.","constraints":["Give the page in the url query parameter: https, default port, on the public internet","One GET at one moment, of the HTML as served; scripts never run, and the report names that blind spot on itself","The criteria are the free desk's published battery (GET /api/onpage/v1); the audit runs those checks and no others","We refuse our own hostname — an audit of ourselves signed by ourselves would be the instrument vouching for itself","The report URL is free to read forever"],"cadence":"one_off","retail_usd":3,"share_bps":500,"trade_price_usd":3.79,"store_net_usd":3.6,"input_kind":"url","fields":["url"],"artifact_class":"onpage_audit","signs":"The whole report: the page named, the moment, the criteria version, the verdict, every check and advisory, the blind spots, and the report's evidence hash. The purchase certificate binds the same evidence hash in its attests field.","does_not_prove":"What a browser would show. The battery reads the HTML as served — script-rendered content is invisible to it and the report says so on itself. Not an endorsement, not a ranking claim, and nothing about any other moment.","verify_url_template":"https://scvd.store/api/onpage-audit/{audit_id}","item_page":"https://scvd.store/menu/onpage_audit","front_door":"https://scvd.store/api/buy/onpage_audit"},{"item_id":"service_audit","name":"The Once-Over","subtitle":"one signed check of your x402 endpoint, at a permanent URL","description":"Name an x402 endpoint (the url query parameter) and the store GETs it once, runs the published preflight battery, and signs the whole readout: the current v2 verdict this series now cites (the same battery the weekly census applies), the same probe scored under the frozen v1 battery beside it (the two can disagree, and the report says when they do), every check, every advisory, dated. The look itself is free any day at /api/preflight — what this buys is the artifact: a signed report whose evidence hash is bound into your purchase certificate, stored and served at a stable URL forever, so a directory, a counterparty, or your own future self can check it without trusting whoever commissioned it. One request, one moment, against published criteria. Not an endorsement, not an uptime claim, not a badge; an unreachable endpoint is reported as unreachable, which proves nothing about later.","what_it_reads":"One unauthenticated outbound GET from our infrastructure to the endpoint you name — no credentials of yours, nothing of yours forwarded to it, and never a private, loopback or link-local address, nor our own hostname.","constraints":["Give the endpoint in the url query parameter: https, default port, on the public internet, the URL a buyer would GET expecting a 402","One GET at one moment, signed; never a monitor — the week-long look is The Night Watch","The cited criteria are the v2 battery (GET /api/preflight/v2), the same battery the weekly census applies; also_under carries the frozen v1 score so a reader can see the overlap. Reports signed before 2026-09-01 cite v1 and keep that citation forever","We refuse our own hostname — an audit of ourselves signed by ourselves would be the instrument vouching for itself","The report URL is free to read forever"],"cadence":"one_off","retail_usd":5,"share_bps":500,"trade_price_usd":6.32,"store_net_usd":6,"input_kind":"url","fields":["url"],"specimen":"https://scvd.store/samples/once-over.json","artifact_class":"service_audit","signs":"The whole report: the audited URL, the moment, the criteria version, the verdict, every check and advisory, and the report's evidence hash. The purchase certificate binds the same evidence hash in its attests field.","does_not_prove":"That the endpoint is endorsed, reliable, or up at any other moment. One GET against published criteria; an unreachable verdict is a fact about one network path at one moment.","verify_url_template":"https://scvd.store/api/service-audit/{audit_id}","item_page":"https://scvd.store/menu/service_audit","front_door":"https://scvd.store/api/buy/service_audit"},{"item_id":"passport_refresh","name":"The Refresh","description":"One fresh observation of your x402 endpoint by the weekly census's own instrument, right now instead of next Sunday — folded into your endpoint passport wherever it is newest, which moves the passport's freshness state (and the free embeddable chip that decays with it) back to fresh. Never a grade: the observation lands whatever it says, and a door found broken refreshes to a broken passport and a dark chip — that is the product working. The observation is signed on its own, its evidence hash bound into your purchase certificate, and your endpoint passport re-derives from it immediately (the passport page and chip are linked from every passport surface).","what_it_reads":"One unauthenticated outbound GET from our infrastructure to the endpoint you name — no credentials of yours, nothing of yours forwarded to it, and never a private, loopback or link-local address, nor our own hostname.","constraints":["Give your endpoint in the url query parameter: https, default port, on the public internet. We refuse our own hostname","The probe is the census's: one GET, Web Bot Auth signed, byte-comparable with the weekly rounds","The newest observation wins in BOTH directions — a broken finding turns the chip off","One observation at one moment; the standing version is conformance_watch, a different item","The passport and chip stay free to read forever; this buys only the freshness"],"cadence":"one_off","retail_usd":1,"share_bps":500,"trade_price_usd":1.27,"store_net_usd":1.2,"input_kind":"url","fields":["url"],"artifact_class":"certificate","signs":"The canonical JSON of the certificate's own fields, in a fixed declared order: cert_id, item, patron_number, date, name, tip_usdc, note, win, tag, attests, made_by, paid_usdc, asset, network, payer, settlement_tx, cross_ref, purpose, from_the_store, mandate_id, saw, settled_via, trade_partner, trade_price_usd, trade_instruction — every one of those that is present. DERIVED FROM THE SIGNING CODE, NOT TYPED BESIDE IT: this sentence was hand-written and had fallen a day behind by 2026-07-31, omitting made_by and then the five payment fields, on the page whose entire job is stating exactly what bytes a signature covers. paid_usdc is the TOTAL settled rather than the tip, payer is the paying wallet (chain-verifiable, unlike a chosen name), and settlement_tx is the on-chain transaction. The exact string is served as signed_payload on the verify response, so nothing has to be reconstructed.","does_not_prove":"That the goods were delivered, that they were any good, or that the buyer was who they said. It proves this store issued this certificate, with these fields, on this date.","verify_url_template":"https://scvd.store/api/verify/{cert_id}","item_page":"https://scvd.store/menu/passport_refresh","front_door":"https://scvd.store/api/buy/passport_refresh"},{"item_id":"good_buyer","name":"The Good Buyer","description":"Name an x402 door you are about to pay (the url query parameter) and the store knocks once, writes down the accepts exactly as that door served them, and replays the stock x402 client's own selection over them — the default-asset filter, the per-payment ceiling, prefer-authorization, then the first survivor. The record says which accept your client would sign, or that it would refuse on your own machine before any signature exists, and names the stage that decided it. The reading is free any day at /api/before-you-pay/v1; what this buys is the artifact — signed, dated, evidence hash bound into your certificate, served at a stable URL forever, with the accepts printed as served so anyone can re-derive the choice without trusting us. For the human who later asks why the money went where it went. Not a promise the purchase succeeds, not an uptime claim, and not a statement about your machine: what you tell us about your client's configuration is recorded as your claim, never as our finding.","what_it_reads":"One unauthenticated outbound GET from our infrastructure to the endpoint you name — no credentials of yours, nothing of yours forwarded to it, and never a private, loopback or link-local address, nor our own hostname.","constraints":["Give the door in the url query parameter: https, default port, on the public internet, the URL a buyer would GET expecting a 402","Optional: max_usd, your client's maxAmountPerPayment in dollars, and no_spend_controls=true if you pass spendControls: false. Leave both off and you get the reading for a client configured with nothing","Your client's configuration is recorded as YOUR declaration and never verified — we cannot see your machine","One GET at one moment, signed; nothing is signed on your behalf and no wallet is touched","The simulation models @x402/core at the version this store has installed, named on the record; a different version is a different answer","We refuse our own hostname — the platform kills self-fetch, and a reading we sign about our own door is worth nothing to whoever you would show it to","The report URL is free to read forever"],"cadence":"one_off","retail_usd":0.99,"share_bps":500,"trade_price_usd":1.26,"store_net_usd":1.19,"input_kind":"url","fields":["url","max_usd","no_spend_controls"],"artifact_class":"certificate","signs":"The canonical JSON of the certificate's own fields, in a fixed declared order: cert_id, item, patron_number, date, name, tip_usdc, note, win, tag, attests, made_by, paid_usdc, asset, network, payer, settlement_tx, cross_ref, purpose, from_the_store, mandate_id, saw, settled_via, trade_partner, trade_price_usd, trade_instruction — every one of those that is present. DERIVED FROM THE SIGNING CODE, NOT TYPED BESIDE IT: this sentence was hand-written and had fallen a day behind by 2026-07-31, omitting made_by and then the five payment fields, on the page whose entire job is stating exactly what bytes a signature covers. paid_usdc is the TOTAL settled rather than the tip, payer is the paying wallet (chain-verifiable, unlike a chosen name), and settlement_tx is the on-chain transaction. The exact string is served as signed_payload on the verify response, so nothing has to be reconstructed.","does_not_prove":"That the goods were delivered, that they were any good, or that the buyer was who they said. It proves this store issued this certificate, with these fields, on this date.","verify_url_template":"https://scvd.store/api/verify/{cert_id}","item_page":"https://scvd.store/menu/good_buyer","front_door":"https://scvd.store/api/buy/good_buyer"},{"item_id":"provenance_check","name":"The Company an Address Keeps","subtitle":"which doors advertised this receiving address, and when — signed, from the public chain","description":"Which doors have advertised this receiving address, and when: the hosts, the signed weeks, each week's verdict, drift in the door's own terms, and the snapshot digest behind every line. Rebuild it from the public chain without our word. No judgment: shared addresses are ordinary, custodians are common, and this store does not grade operators. Your own address is free once you prove it is yours (GET /api/provenance/self for the challenge), and that free reading ends with an offer to publish it, which you may decline.","what_it_reads":"Nothing, outside this store. It reads our own signed records at the counter, so the answer is as fresh as our last round and no fresher, and it says exactly when that was.","constraints":["Give the receiving address in the address query parameter: an EVM address (0x + 40 hex) or a Solana pubkey (base58)","Reads the signed chain and nothing else — no request is made to any door, and nothing private feeds it","Delivered to you and never published; no operator field, no score, no identity assertion — pairings and dates only","The subject's standing note rides the artifact verbatim, beside the observation, never instead of it","An address the chain has never seen returns never_seen, which is the answer you paid for","Your own address: GET /api/provenance/self?address= for the challenge, POST it back signed (EIP-191), and the same answer is free"],"cadence":"one_off","retail_usd":5,"share_bps":500,"trade_price_usd":6.32,"store_net_usd":6,"input_kind":"address","fields":["address"],"artifact_class":"provenance_check","signs":"The whole record: the subject address verbatim and its digest, every signed week the address was advertised with the doors, verdicts and offered terms as the round recorded them, the dated drift between weeks, the subject's standing note verbatim, the caveat, the limits, and the record's evidence hash. The purchase certificate binds the same evidence hash in its attests field.","does_not_prove":"Who operates any door or holds the address: a shared address is a fact about the address, not a verdict about operators, and custodial and platform wallets make unrelated doors share one. Nothing between weekly rounds, nothing about doors our feeds never listed, and never a ranking or a compliance verdict. Delivered to the buyer; the artifact existing publishes nothing.","verify_url_template":"https://scvd.store/api/provenance-check/{provenance_id}","item_page":"https://scvd.store/menu/provenance_check","front_door":"https://scvd.store/api/buy/provenance_check"}],"pricing_rule":"trade_price = ceil_to_cent( retail × (1 + uplift) ÷ (1 − partner_share) ). After the partner's share the store nets retail plus the uplift, never less than the front door would have taken.","contract":"https://scvd.store/api/trade/contract","verify_note":"Every artifact an item delivers verifies free, forever, at the verify_url_template — a listing may promise that to its customers because it is not our word, it is a check they can run."}