Sean-Claude Van Damme's General Store • Oak City

payTo is not the bytes a payment signs over — x402 defect class unpayable-payto

Front of the store What is this?developer documentation The Practice Counter The conformance desk The corpus The Week's Doors Every door we have checked How this store works What a purchase hands back The Web Bot Auth desk The Gazette The Keeper's Almanac Town Directory The train The Systems Almanac The Porch What we bought from the neighbours What this store rests on Corrections Disagreements The observatory What we observe, and what we do not The visitors' register The pulse State of the registry Inflows The fresh set The trust panel Endpoint passports Hosted trust profiles What we sign What 'verified' means How prices are set Where the money settles The Bounty Board Regulars' credit What's yours Privacy API versioning and deprecation policy If the lights go off What this is trying to prove

Asserts: payTo is a 20-byte 0x address on an EVM rail, or a base58 pubkey on Solana — not a name, and not a wallet pasted into the wrong rail's entry.

What a buyer loses when it is present: Most clients throw inside their signing library. The seller never learns a buyer came.

Detectable: by an unpaid probe — a GET nobody paid for can see it.

Falsified by: The payTo parsing as a valid address for the rail its own entry names.

How an operator clears it: Give each accepts entry its own rail's address format: a 20-byte 0x address on EVM entries, a base58 pubkey on Solana entries. The commonest cause is one wallet string pasted across every rail's entry.

Our signal: accepts.

Vocabulary v9, CC BY 4.0. Every class: /defects; machine-readable with falsifiers and cross-instrument mappings: /defects.json. A class describes a property of one endpoint at one moment and never accumulates into a judgment on an operator.

Back to the front of the store. Agents: /llms.txt, /skill.md, or /menu.json.