{"valid":true,"store_identity":{"name":"SCVD General Store","what":"A human-run general store selling small signed goods to autonomous agents, paid over x402 in USDC on Base, Polygon, or Solana. Also a free conformance desk that checks any issuer's x402 offers and receipts, including stores it competes with.","homepage":"https://scvd.store","verify":"Anyone can check this artifact without asking us and without an account: https://scvd.store/api/verify/{id}, free and permanent. The signing key is at https://scvd.store/.well-known/scvd-signing-key, and the offline verifier is MIT-licensed. The conformance desk is POST https://scvd.store/api/conformance/v1 — send any issuer's x402 signed offer or receipt, ours or not.","rights":"You own what you bought outright and owe this store no credit for it. This block is here so the artifact can explain itself to whoever holds it next, not because attribution is required — see /rights."},"certificate":{"cert_id":"cert_xvppa52vg6","item":"hello","patron_number":142,"date":"2026-08-25T23:20:23.939Z","name":"Cairn","paid_usdc":0.5,"asset":"USDC","network":"eip155:8453","payer":"0x4f7975f4f00872517eb334420B7d5b673fcF2971","settlement_tx":"0x43b7a9fc2ce6e82ffb0b13e8286b92e44a4c955795a13434e0c45fa96001c562","from_the_store":"The bell rang when you came in. It counts for something.","saw":"a4d106b21095fd0eef6dcdc052e26fb51fc0aa10fc58b73cc074a85f07b8a036"},"signature":"09feb99b994f5b081a9b929ccd346a0f7b7b0392eb9355d7d33594ec720a1d791d6b1d916265baad66bdb65eb9c65807a6c682095366bb3a455545be244e3f02","public_key":"8c22f61add201ecefa75c5d027371b64bed3c0ff739056a7b255f8322ffcb550","signed_by":{"public_key":"8c22f61add201ecefa75c5d027371b64bed3c0ff739056a7b255f8322ffcb550","status":"current","means":"Signed with the key this store publishes today. Check it against /.well-known/scvd-signing-key.","service_window":{"status":"in_service","in_window":true,"in_service_from":"2026-07-31","retired_on":null,"artifact_dated":"2026-08-25T23:20:23.939Z","means":"dated 2026-08-25, and the key has been in service since 2026-07-31 with no retirement published"}},"algorithm":"ed25519","signed_payload":"{\"cert_id\":\"cert_xvppa52vg6\",\"item\":\"hello\",\"patron_number\":142,\"date\":\"2026-08-25T23:20:23.939Z\",\"name\":\"Cairn\",\"paid_usdc\":0.5,\"asset\":\"USDC\",\"network\":\"eip155:8453\",\"payer\":\"0x4f7975f4f00872517eb334420B7d5b673fcF2971\",\"settlement_tx\":\"0x43b7a9fc2ce6e82ffb0b13e8286b92e44a4c955795a13434e0c45fa96001c562\",\"from_the_store\":\"The bell rang when you came in. It counts for something.\",\"saw\":\"a4d106b21095fd0eef6dcdc052e26fb51fc0aa10fc58b73cc074a85f07b8a036\"}","artifact_hash":"75137ae74585aa93766b2d8fb1772f3035498d37830d2b67b9b449b6cad9bcae","signature_covers":"signed_payload is the exact UTF-8 string this signature covers. What this store signs, who holds the key and whose word you are taking is declared per artifact class at /attestation, including where the trust model is the weakest available. Check it yourself: ed25519_verify(utf8(signed_payload), hex_to_bytes(signature), hex_to_bytes(public_key)). Then compare the fields inside signed_payload against the artifact above — if a field is shown but absent from signed_payload, the signature does not cover it, and this response says so out loud rather than leaving you to discover it. The key is also at /.well-known/scvd-signing-key, so you never have to take ours from this response.","signature_jcs":"fab61bec55c875cb60afe2806746042ec538aa4e90fec18f19c223f0f0affe7cd7ed57d9a2d062dc930ba8d266cea145aff8f398ddf031ce17a0eba0c53b2604","signature_jcs_valid":true,"signature_jcs_payload":"{\"asset\":\"USDC\",\"cert_id\":\"cert_xvppa52vg6\",\"date\":\"2026-08-25T23:20:23.939Z\",\"from_the_store\":\"The bell rang when you came in. It counts for something.\",\"item\":\"hello\",\"name\":\"Cairn\",\"network\":\"eip155:8453\",\"paid_usdc\":0.5,\"patron_number\":142,\"payer\":\"0x4f7975f4f00872517eb334420B7d5b673fcF2971\",\"saw\":\"a4d106b21095fd0eef6dcdc052e26fb51fc0aa10fc58b73cc074a85f07b8a036\",\"settlement_tx\":\"0x43b7a9fc2ce6e82ffb0b13e8286b92e44a4c955795a13434e0c45fa96001c562\"}","signature_jcs_covers":"The RFC 8785 (JCS) canonicalization of the same fields the primary signature covers — sorted keys, ECMAScript number and string serialization, no whitespace. Verify with any RFC 8785 implementation and the same ed25519 public key. Additive since 2026-08-18: artifacts minted earlier carry only the primary signature.","note":"Genuine article. Signed by the store itself."}