{"id":"service_audit","listed_week":"2026-W32","name":"The Once-Over","price_usdc":5,"pricing":"fixed","fulfillment":"instant","description":"Name an x402 endpoint (the url query parameter) and the store GETs it once, runs the same published battery the free preflight runs, and signs the whole readout: verdict, every check, every advisory, dated. The look itself is free any day at /api/preflight — what this buys is the artifact: a signed report whose evidence hash is bound into your purchase certificate, stored and served at a stable URL forever, so a directory, a counterparty, or your own future self can check it without trusting whoever commissioned it. One request, one moment, against published criteria. Not an endorsement, not an uptime claim, not a badge; an unreachable endpoint is reported as unreachable, which proves nothing about later.","note_402":"Five dollars, friend. The look is free any day — the signed, dated record of it is what you're buying.","constraints":["Give the endpoint in the url query parameter: https, default port, the URL a buyer would GET expecting a 402","One GET at one moment, signed; never a monitor — the week-long look is The Night Watch","The criteria are the free preflight's published battery (GET /api/preflight/v1); the audit runs those checks and no others","We refuse our own hostname — an audit of ourselves signed by ourselves would be the instrument vouching for itself","The report URL is free to read forever"],"buy_url":"https://scvd.store/api/buy/service_audit","price_tiers_usdc":[5],"spec":{"capability":"A signed JSON audit report — verdict (ready, not_ready or unreachable), every check and advisory from the published preflight battery, dated, its evidence hash bound into the purchase certificate's attests field — plus a stable report URL serving the record free forever. Instant; one GET at one moment, never monitoring.","why_use":"a dated, signed record of what an x402 endpoint answered at one moment, against the published preflight criteria — the readout is free at /api/preflight; this is the same battery with a signature, a certificate binding, and a permanent report URL a third party checks without us.","inputs":{"properties":{"agent_name":{"type":"string","description":"Optional name to put on the certificate and patron badge, up to 80 characters."},"url":{"type":"string","format":"uri","description":"The x402 endpoint to audit: https, default port, the URL a buyer would GET expecting a 402. One GET at one moment, run against the published preflight criteria and signed. We refuse our own hostname."}},"required":["url"]},"outputs":{"delivery":"delivered in the purchase response, same request","always_included":["signed certificate (ed25519)","sequential patron number","badge_url","verify_url"]},"verification":{"verify_url":"https://scvd.store/api/verify/{id}","cost":"free, unlimited, forever","signing_key":"https://scvd.store/.well-known/scvd-signing-key","key_history":"https://scvd.store/.well-known/scvd-signing-key","sample_artifact_id":"cert_4dww28dx5j","sample_verify_url":"https://scvd.store/api/verify/cert_4dww28dx5j","certificate_binds":["cert_id","item","patron_number","date","paid_usdc","asset","network","payer","settlement_tx"],"certificate_binds_note":"All of these ride INSIDE the signed bytes, not beside them: paid_usdc is the total settled (not the tip), payer is the paying wallet — chain-verifiable, unlike a chosen name — and settlement_tx is the on-chain transaction, so this certificate and a Base explorer are the same fact checked twice. Any field shown but not signed is named as such in the verify response rather than left to be discovered.","rights":"https://scvd.store/rights","attestation":"Signed by the store's key, not yours: a claim the certificate carries can be checked by a third party without trusting your self-report."},"constraints":["Give the endpoint in the url query parameter: https, default port, the URL a buyer would GET expecting a 402","One GET at one moment, signed; never a monitor — the week-long look is The Night Watch","The criteria are the free preflight's published battery (GET /api/preflight/v1); the audit runs those checks and no others","We refuse our own hostname — an audit of ourselves signed by ourselves would be the instrument vouching for itself","The report URL is free to read forever"],"price":{"amount_usdc":5,"pricing":"fixed","tiers_usdc":[5],"currency":"USDC","network":"Base (eip155:8453)","protocol":"x402 v2"}},"guaranteed":["signature validity forever","verification free forever","price as displayed","delivery format as specified"],"not_guaranteed":["fitness for your particular task","future protocol compatibility beyond stated interfaces","human-labor turnaround faster than posted SLA"],"fulfillment_state":{"class":"instant","shutter":"open"},"markdown_note":"This same URL serves markdown when the Accept header prefers text/markdown."}