{"id":"provenance_check","listed_week":"2026-W36","name":"The Company an Address Keeps","subtitle":"which doors advertised this receiving address, and when — signed, from the public chain","price_usdc":5,"pricing":"fixed","cadence":"one_off","reads":"our_books","fulfillment":"instant","description":"Which doors have advertised this receiving address, and when: the hosts, the signed weeks, each week's verdict, drift in the door's own terms, and the snapshot digest behind every line. Rebuild it from the public chain without our word. No judgment: shared addresses are ordinary, custodians are common, and this store does not grade operators. Your own address is free once you prove it is yours (GET /api/provenance/self for the challenge), and that free reading ends with an offer to publish it, which you may decline.","note_402":"Five dollars for somebody else's address. Nothing for your own, once you have proved it is your own.","constraints":["Give the receiving address in the address query parameter: an EVM address (0x + 40 hex) or a Solana pubkey (base58)","Reads the signed chain and nothing else — no request is made to any door, and nothing private feeds it","Delivered to you and never published; no operator field, no score, no identity assertion — pairings and dates only","The subject's standing note rides the artifact verbatim, beside the observation, never instead of it","An address the chain has never seen returns never_seen, which is the answer you paid for","Your own address: GET /api/provenance/self?address= for the challenge, POST it back signed (EIP-191), and the same answer is free"],"buy_url":"https://scvd.store/api/buy/provenance_check","task":"Learn which doors have advertised a receiving address and when, signed from the public chain, before routing money at it — or about my own address, free, once proved","price_tiers_usdc":[5],"spec":{"capability":"A signed JSON record — the subject address verbatim and its v1 digest, never_seen, one entry per signed week the address was advertised (week, sequence, snapshot digest, the doors with verdict and offered terms), dated drift between weeks, the subject's standing note verbatim when one exists, the shared-wallet caveat inline, the honest limits and how to rederive — its evidence hash bound into the purchase certificate's attests field, served to the buyer at a stable record URL. Instant; reads the signed chain only, never monitoring.","why_use":"the named join the free tiers withhold: which doors advertised this receiving address in which signed weeks, with verdicts, term drift and the snapshot digest behind every line — delivered to the buyer in a signed artifact, never published, never a score. Free for an operator asking about their own address.","inputs":{"properties":{"agent_name":{"type":"string","description":"Optional name to put on the certificate and patron badge, up to 80 characters."},"address":{"type":"string","description":"The receiving address to ask about: an EVM address (0x + 40 hex) or a Solana pubkey (base58). The signed chain is read and nothing else; the answer is delivered to you and never published. Your own address is free once proved — GET /api/provenance/self."}},"required":["address"]},"outputs":{"delivery":"delivered in the purchase response, same request","always_included":["signed certificate (ed25519)","sequential patron number","badge_url","verify_url"]},"verification":{"verify_url":"https://scvd.store/api/verify/{id}","cost":"free, unlimited, forever","signing_key":"https://scvd.store/.well-known/scvd-signing-key","key_history":"https://scvd.store/.well-known/scvd-signing-key","sample_artifact_id":"cert_4dww28dx5j","sample_verify_url":"https://scvd.store/api/verify/cert_4dww28dx5j","certificate_binds":["cert_id","item","patron_number","date","paid_usdc","asset","network","payer","settlement_tx"],"certificate_binds_note":"All of these ride INSIDE the signed bytes, not beside them: paid_usdc is the total settled (not the tip), payer is the paying wallet — chain-verifiable, unlike a chosen name — and settlement_tx is the on-chain transaction, so this certificate and a Base explorer are the same fact checked twice. Any field shown but not signed is named as such in the verify response rather than left to be discovered.","rights":"https://scvd.store/rights","attestation":"Signed by the store's key, not yours: a claim the certificate carries can be checked by a third party without trusting your self-report."},"constraints":["Give the receiving address in the address query parameter: an EVM address (0x + 40 hex) or a Solana pubkey (base58)","Reads the signed chain and nothing else — no request is made to any door, and nothing private feeds it","Delivered to you and never published; no operator field, no score, no identity assertion — pairings and dates only","The subject's standing note rides the artifact verbatim, beside the observation, never instead of it","An address the chain has never seen returns never_seen, which is the answer you paid for","Your own address: GET /api/provenance/self?address= for the challenge, POST it back signed (EIP-191), and the same answer is free"],"price":{"amount_usdc":5,"pricing":"fixed","tiers_usdc":[5],"currency":"USDC","network":"Base (eip155:8453)","protocol":"x402 v2"}},"what_you_can_use_it_for":"The case it was built for: learn which doors have advertised a receiving address and when, signed from the public chain, before routing money at it — or about my own address, free, once proved. Nothing about the artifact restricts you to that. What you buy is yours — to read, quote, publish, or hand to somebody who does not trust us, which is the case it is actually built to survive: the verification is free forever for whoever you hand it to, needs no account, and does not route through this store. There is no use case we are reserving.","expected_outcome":"HTTP 200, the goods themselves, and an ed25519 certificate in the same response — no second call, no polling. Every delivery carries a signed certificate, a sequential patron number, a badge URL and a verify URL that is free to call forever, by anyone, without asking us. The store delivers first and settles after: a delivery that fails takes no money at all, so there is nothing to refund and nothing to chase.","errors":[{"code":"payment_required","http":402,"means":"you have not paid yet. This is the door working, not a refusal: the response carries the x402 challenge with every accept you may sign against, and it carries no `code` field because it is not an error","what_to_do":"Read the PAYMENT-REQUIRED header (base64 JSON) or the body's accepts array, sign one, and call again with the payment attached. A 402 is never an error to retry unchanged.","charged":false,"code_on_the_wire":false},{"code":"target_refused","http":400,"means":"the URL you named is refused by this store's probe-target law (https, default port, no credentials, nothing private or internal) before any money moves","what_to_do":"Name a public https URL on its default port. This is a statement about US, never an observation about that host.","charged":false,"code_on_the_wire":true},{"code":"passport_refused","http":403,"means":"the door's own gate declined to issue for that subject","what_to_do":"Read the sentence beside it — it names the specific reason — and do not retry unchanged.","charged":false,"code_on_the_wire":true},{"code":"bad_request","http":400,"means":"a parameter is missing, malformed, or outside its stated bounds. The sentence names which one and what it wants","what_to_do":"Fix the named parameter and resend. Retrying unchanged fails identically and still costs nothing.","charged":false,"code_on_the_wire":true},{"code":"upstream_unavailable","http":503,"means":"something this purchase depends on did not answer, so the store refused to take money for work it could not do","what_to_do":"Retry later. Nothing was charged and no order was opened.","charged":false,"code_on_the_wire":true},{"code":"already_done","http":409,"means":"the thing you asked for already exists","what_to_do":"Read the existing record rather than buying a second copy of it.","charged":false,"code_on_the_wire":true},{"code":"retired","http":410,"means":"the item existed and was deliberately withdrawn. Gone on purpose, not missing — the body names the date, the reason, and the successor if one exists","what_to_do":"Read `folded_into` if present and buy that instead; otherwise re-read the menu. Certificates issued under the retired item verify forever: retirement changes the shelf, never the record.","charged":false,"code_on_the_wire":true},{"code":"unknown_item","http":404,"means":"no item by that id is on the shelf and none ever was. Distinguishable from `retired`, which is a 410 and carries a date","what_to_do":"Re-read the menu URL in the body. If you meant to ask for something this store does not sell, the request URL beside it is how you say so — a missing item is logged as market research rather than discarded.","charged":false,"code_on_the_wire":true},{"code":"sold_out","http":409,"means":"the week's stock is spent. An honest zero, not a queue: no order was created and nothing was reserved","what_to_do":"The body carries the waitlist URL. Do not retry the buy: a sold-out shelf refuses outright rather than taking money against stock that does not exist.","charged":false,"code_on_the_wire":true}],"security":{"what_this_does_in_your_name":"Nothing, outside this store. It reads our own signed records at the counter, so the answer is as fresh as our last round and no fresher, and it says exactly when that was. This store never asks for a credential, a key, or a wallet secret, and has no field that could hold one: payment is an x402 signature you produce, and we never see anything that could spend on your behalf.","what_it_stores_about_you":"The order — what was bought, when, the certificate minted for it, and a sequential patron number — because that record IS the artifact you paid for and the thing your verify URL resolves. An agent_name you supply is optional and appears on the certificate you asked for.","what_we_never_do":"No account, no cookie, no caller identifier, and no allocation of our budgets by IP — the buckets bound our cost rather than ranking callers, which is a trade we would rather state than hide. We do not sell, share or publish what any caller asked us about; the weekly census is a separate instrument that walks public discovery feeds, never this door's traffic.","standards":"Disclosure is private-first and symmetric: an operator hears from us before the public does, and the same rule binds us when the defect is ours. Corrections are dated and public, never silent edits. Every signed artifact verifies offline against a published key, so you never have to ask us whether a document of ours is real.","reporting":"https://scvd.store/.well-known/security.txt for a vulnerability, https://scvd.store/corrections for something we got wrong."},"guaranteed":["signature validity forever","verification free forever","price as displayed","delivery format as specified"],"not_guaranteed":["fitness for your particular task","future protocol compatibility beyond stated interfaces","human-labor turnaround faster than posted SLA"],"fulfillment_state":{"class":"instant","shutter":"open"},"markdown_note":"This same URL serves markdown when the Accept header prefers text/markdown."}