agent-receipt-verify 0.0.0-stage → 0.2.1

package/bin/cli.mjs

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+// Een commando in plaats van een document.
+//
+// WAAROM DIT BESTAAT. Niemand neemt een meetlat over omdat die in een bestand staat.
+// Mensen nemen hem over als het makkelijkste wat ze kunnen doen een regel is die hun
+// eigen eindpunt nakijkt. Dan is de ladder de norm geworden zonder dat er ooit over
+// gestemd is.
+//
+// BEWUST GEEN NPM-PUBLICATIE NODIG. npx kan een pakket rechtstreeks uit een git-repo
+// draaien, dus dit werkt zonder dat er iets op npm staat:
+//
+//   npx github:holistis/agent-receipt-verify https://een-eindpunt.example/pad
+//
+// Dat is geen trucje maar een echte eigenschap van npx, en het haalt een hele
+// publicatie-stap plus een naamclaim weg. Het betekent ook dat niemand een
+// tussenversie van ons kan uitgeven: wat je draait is wat er in de repo staat.
+//
+// ethers is OPTIONEEL. Zonder ethers kan trede 2 van een eip712-aanbod niet
+// gecontroleerd worden, en dan zegt de uitslag ONGEMETEN in plaats van stil een
+// zwakkere controle te doen. Een jws-aanbod werkt wel zonder ethers, want dat gaat
+// op ingebouwde crypto.
+
+const args = process.argv.slice(2)
+const eerste = args[0]
+
+function gebruik() {
+  console.log('agent-receipt-verify, een onafhankelijke controle op bonnetjes van agent-betalingen')
+  console.log('')
+  console.log('  npx github:holistis/agent-receipt-verify <url> [url ...]')
+  console.log('        meet een x402-eindpunt tegen de ladder in CONFORMANCE.md (trede 0 tot 2,')
+  console.log('        zonder te betalen). Trede 3 tot 5 vereisen een echte afrekening en komen')
+  console.log('        terug als ONGEMETEN, nooit als afgekeurd.')
+  console.log('')
+  console.log('  npx github:holistis/agent-receipt-verify census [uit.json]')
+  console.log('        telt een discovery-index per host in plaats van per resource.')
+  console.log('')
+  console.log('  npx github:holistis/agent-receipt-verify link --receipt=<bestand>')
+  console.log('        zoekt bij een bonnetje van versie 2 de bijbehorende afrekening op de keten.')
+  console.log('')
+  console.log('  npx github:holistis/agent-receipt-verify mcp')
+  console.log('        draait als MCP-server over stdio, zodat een agent deze controle AANROEPT')
+  console.log('        in plaats van hem aanbevolen te krijgen. Twee gereedschappen: controleer een')
+  console.log('        eindpunt voor je betaalt, en link een bonnetje aan een echte afrekening.')
+  console.log('')
+  console.log('  npx github:holistis/agent-receipt-verify inam <vectors.json>')
+  console.log('        controleert countersigned bonnetjes tegen gepubliceerde vectoren.')
+  console.log('')
+  console.log('Wat dit NIET doet: het oordeelt over de VORM van een bonnetje, niet over de')
+  console.log('eerlijkheid van de partij die het afgaf. Zie CONFORMANCE.md voor wat met opzet')
+  console.log('niet gemeten wordt.')
+  console.log('')
+  console.log('  npx github:holistis/agent-receipt-verify kanon')
+  console.log('        cross-check our independent EIP-3009 verifier against the ten published')
+  console.log('        vectors of iamonuwa/kanon, offline, no account and no key.')
+}
+
+// Het argument bepaalt welke module draait. De modules zijn ook los te draaien en te
+// importeren; dit bestand voegt alleen een ingang toe, geen tweede implementatie,
+// want twee plekken die hetzelfde doen lopen altijd uit elkaar.
+const onderdelen = {
+  mcp: '../src/mcp-server.mjs',
+  census: '../src/x402-discovery-census.mjs',
+  link: '../src/x402-link-onchain.mjs',
+  inam: '../src/inam-countersigned.mjs',
+  liveness: '../src/x402-index-liveness.mjs',
+  kanon: '../src/eip3009-autorisatie.mjs',
+}
+
+if (!eerste || eerste === '--help' || eerste === '-h' || eerste === 'help') {
+  gebruik()
+  process.exitCode = eerste ? 0 : 2
+} else if (onderdelen[eerste]) {
+  // De doorgegeven argumenten zo neerzetten dat de module zijn eigen cli-tak kiest:
+  // die kijkt naar process.argv[1], dus die moet naar de module zelf wijzen.
+  const { fileURLToPath } = await import('node:url')
+  const pad = fileURLToPath(new URL(onderdelen[eerste], import.meta.url))
+  process.argv = [process.argv[0], pad, ...args.slice(1)]
+  await import(onderdelen[eerste])
+} else if (/^https?:\/\//.test(eerste)) {
+  const { fileURLToPath } = await import('node:url')
+  const pad = fileURLToPath(new URL('../src/x402-conformance-check.mjs', import.meta.url))
+  process.argv = [process.argv[0], pad, ...args]
+  await import('../src/x402-conformance-check.mjs')
+} else {
+  console.log('onbekend: ' + eerste)
+  console.log('')
+  gebruik()
+  process.exitCode = 2
+}

package/examples/receipt-live-base-sepolia-2.json

@@ -0,0 +1,21 @@
+{
+  "note": "The second of two payments with IDENTICAL terms: same payer, same payee, same amount, same resource, minutes apart. Without a commitment these two receipts cannot be told apart. Each one still resolves to its own settlement.",
+  "source": "A real payment to https://api.tokenizen.nl/api/paid/verify-ownership on Base Sepolia, 2026-10-16. Buyer and seller are both us.",
+  "network": "eip155:84532",
+  "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+  "authorizationSalt": "0x63072ea656fe922bf04c9cefc4275314d695fff01e5b57f6628c8df0252cc5dc",
+  "receipt": {
+    "format": "eip712",
+    "payload": {
+      "version": 2,
+      "network": "eip155:84532",
+      "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+      "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+      "issuedAt": 1792187518,
+      "transaction": "",
+      "authorizationMethod": "eip3009",
+      "authorizationCommitment": "0xfecee93e1aec7d6858a218bf324f23e2a4eed07925d8d4542b9662c5026e3d22"
+    },
+    "signature": "0x02f5ba0d2b7928a2dbb1d8845b664a79d38eebcd0a2c4532ed3c6b922051bf8d47c8aafb0520a875a708e3ed480d84a537962ea90d66ce2ee3811f4229aa8b401b"
+  }
+}

package/examples/receipt-live-base-sepolia-3.json

@@ -0,0 +1,21 @@
+{
+  "note": "A third payment on the same terms, so an independent implementation has more than one case to reach the same settlement on. Holds only what section 5.6.4 says a later verifier has: the receipt, its salt, and the asset that was paid.",
+  "source": "A real payment to https://api.tokenizen.nl/api/paid/verify-ownership on Base Sepolia, 2026-10-17. Buyer and seller are both us.",
+  "network": "eip155:84532",
+  "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+  "authorizationSalt": "0x349ddb90f38a3119817c5fc9cc253a2c20bcbe44aa845302df76889082b314d8",
+  "receipt": {
+    "format": "eip712",
+    "payload": {
+      "version": 2,
+      "network": "eip155:84532",
+      "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+      "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+      "issuedAt": 1792188211,
+      "transaction": "",
+      "authorizationMethod": "eip3009",
+      "authorizationCommitment": "0xea8dd34b8beac90f021a4e8d893a689c25249f86947770c8e6647c1cde206008"
+    },
+    "signature": "0x5b3a70cce6978ab44e51828b5ebbc55522e98b015045d94559d369420698da3b5309b28050dcb00ce14d65c8b230a273f8ff5ebff6410c6ae2a308e422ed5a611b"
+  }
+}

package/examples/receipt-live-base-sepolia.json

@@ -0,0 +1,21 @@
+{
+  "note": "The first of two payments with IDENTICAL terms. This file holds exactly what section 5.6.4 says a later verifier has: the receipt, its salt, and the asset that was paid. The settlement nonce and transaction hash are deliberately NOT here; finding them is what the tool has to do.",
+  "source": "A real payment to https://api.tokenizen.nl/api/paid/verify-ownership on Base Sepolia, 2026-10-16. Buyer and seller are both us, so this proves the chain closes end to end, not that anyone else uses it.",
+  "network": "eip155:84532",
+  "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+  "authorizationSalt": "0xea85b2473363fd8fff1ccdd7f8638be8b47c7c05023e3e2e3f81bebb085ba2ad",
+  "receipt": {
+    "format": "eip712",
+    "payload": {
+      "version": 2,
+      "network": "eip155:84532",
+      "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+      "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+      "issuedAt": 1792187030,
+      "transaction": "",
+      "authorizationMethod": "eip3009",
+      "authorizationCommitment": "0x5c35a61a09a566a9c284fad18a70ac2ddfff34d01d2a3ce776ce94e8d5b38ff8"
+    },
+    "signature": "0x78615cb22986af0aad6e08b74ca78773bb58ece21660e84e4b35b3e5c1841b0075238ca9bfdf0f969ad3f2903af8f391fafd1b3fc7ebbf1fb5c949a3948fccde1c"
+  }
+}

package/package.json

@@ -1,6 +1,61 @@
 {
   "name": "agent-receipt-verify",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.1",
+  "description": "Checks x402 endpoint conformance before an agent pays, and links the receipt to its settlement.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "test": "node test/interop.mjs && node test/canonical.mjs && node test/link-onchain.mjs && node test/profiel.mjs && node test/eip3009.mjs && node test/conformance.mjs && node test/jws-offer.mjs && node test/census.mjs && node test/poortwachters.mjs && node test/metingen-bundel.mjs && node test/mcp-server.mjs && node test/cli.mjs && node test/bundel.mjs",
+    "link-example": "node src/x402-link-onchain.mjs --receipt=examples/receipt-live-base-sepolia.json && node src/x402-link-onchain.mjs --receipt=examples/receipt-live-base-sepolia-2.json && node src/x402-link-onchain.mjs --receipt=examples/receipt-live-base-sepolia-3.json",
+    "conformance": "node src/x402-conformance-check.mjs",
+    "bench": "node bench/robustness.mjs",
+    "census": "node src/x402-discovery-census.mjs",
+    "liveness": "node src/x402-index-liveness.mjs",
+    "poortwachters": "node src/x402-poortwachters.mjs",
+    "metingen-bundel": "node src/x402-metingen-bundel.mjs",
+    "mcp": "node src/mcp-server.mjs",
+    "bundel": "node tools/bundel-bouw.mjs build/bundle",
+    "kanon": "node src/eip3009-autorisatie.mjs --vectoren"
+  },
+  "optionalDependencies": {
+    "ethers": "^6.17.0"
+  },
+  "bin": {
+    "agent-receipt-verify": "bin/cli.mjs"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "profiles/",
+    "vectors/",
+    "examples/",
+    "NOTICE",
+    "CONFORMANCE.md",
+    "README.md",
+    "tools/"
+  ],
+  "author": "Abdellah Ouadoudi (https://github.com/holistis)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/holistis/agent-receipt-verify.git"
+  },
+  "homepage": "https://github.com/holistis/agent-receipt-verify#readme",
+  "bugs": {
+    "url": "https://github.com/holistis/agent-receipt-verify/issues"
+  },
+  "keywords": [
+    "x402",
+    "mcp",
+    "model-context-protocol",
+    "conformance",
+    "receipts",
+    "agent-payments",
+    "eip-3009",
+    "erc-8004",
+    "base",
+    "verification"
+  ]
+}

package/profiles/profile.schema.json

@@ -0,0 +1,115 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://github.com/holistis/agent-receipt-verify/blob/main/profiles/profile.schema.json",
+  "title": "Deployed-endpoint conformance profile",
+  "description": "A versioned, declarative description of what can be checked on someone else's deployed endpoint from the response it already returns. A profile names the clause each check comes from, the input the check needs, and what to report when the check cannot decide. It does not describe how to run the check; that is the runner's job, and the evaluator field is the name that binds the two.",
+  "type": "object",
+  "required": ["profile", "version", "published", "intent", "outcomes", "specs", "checks"],
+  "additionalProperties": true,
+  "properties": {
+    "profile": { "type": "string", "description": "Stable name of the profile, independent of its version." },
+    "version": { "type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+$" },
+    "published": { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$", "description": "A profile without a date cannot be told apart from a later one, and then a published number cannot be traced back to the ladder it was measured on." },
+    "intent": { "type": "string", "minLength": 20 },
+    "notMeasured": { "type": "string", "description": "What this profile deliberately says nothing about. A profile that only lists what it checks invites the reader to assume the rest was fine." },
+    "outcomes": {
+      "type": "object",
+      "description": "Exactly four, and each one described. Three is the common mistake: it collapses 'we did not try' into 'we could not decide', and a reader cannot then tell a gap in the runner from a defect in the endpoint.",
+      "required": ["pass", "fail", "skip", "inconclusive"],
+      "additionalProperties": false,
+      "properties": {
+        "pass": { "type": "string", "minLength": 10 },
+        "fail": { "type": "string", "minLength": 10 },
+        "skip": { "type": "string", "minLength": 10 },
+        "inconclusive": { "type": "string", "minLength": 10 }
+      }
+    },
+    "wireStates": { "type": "object", "description": "Optional. How a particular runner's own state names map onto the four outcomes, so a consumer does not have to read that runner's source." },
+    "specs": {
+      "type": "object",
+      "description": "Every specification this profile cites, pinned. A clause reference without a pinned version is a reference to whatever the document says today.",
+      "minProperties": 1,
+      "additionalProperties": {
+        "type": "object",
+        "required": ["repo", "path", "commit", "state"],
+        "additionalProperties": true,
+        "properties": {
+          "repo": { "type": "string" },
+          "path": { "type": "string" },
+          "commit": { "type": "string", "minLength": 7 },
+          "state": { "type": "string", "enum": ["merged on main", "proposed, not merged"] },
+          "pullRequest": { "type": "integer" },
+          "retrieved": { "type": "string", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}$" },
+          "warning": { "type": "string" }
+        }
+      }
+    },
+    "relatedWork": { "type": "object", "description": "Optional. Other vector or profile sets this one references instead of restating." },
+    "checks": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["id", "key", "level", "name", "requirement", "clause", "input", "assertion", "normative", "whenNotObservable"],
+        "additionalProperties": true,
+        "properties": {
+          "id": { "type": "string", "pattern": "^[A-Z]+-[A-Za-z0-9]+$" },
+          "key": { "type": "string", "description": "Short key a runner uses in its own output. Kept separate from id so a runner's existing output does not have to change when a profile is adopted." },
+          "level": { "type": "integer", "minimum": 0 },
+          "name": { "type": "string", "minLength": 5 },
+          "requirement": { "type": "string", "minLength": 20 },
+          "clause": {
+            "type": "array",
+            "minItems": 1,
+            "description": "Where the requirement comes from. Each entry names a key of specs, so the pin travels with the reference.",
+            "items": {
+              "type": "object",
+              "required": ["spec", "section"],
+              "additionalProperties": true,
+              "properties": {
+                "spec": { "type": "string" },
+                "section": { "type": "string", "minLength": 3 },
+                "quote": { "type": "string" }
+              }
+            }
+          },
+          "input": {
+            "type": "object",
+            "required": ["needs", "pays"],
+            "additionalProperties": true,
+            "properties": {
+              "needs": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+              "requests": { "type": "integer", "minimum": 0 },
+              "pays": { "type": "boolean", "description": "Whether the check needs a real settlement. A passive profile must skip these rather than fail them." }
+            }
+          },
+          "assertion": {
+            "type": "object",
+            "required": ["evaluator", "describes"],
+            "additionalProperties": false,
+            "properties": {
+              "evaluator": { "type": "string", "description": "Name of the routine that decides this check. Deliberately a name and not an expression language: the two checks that matter here involve signature recovery and a chain read, and pretending those fit in a data expression would mean either a dishonest profile or an expression language nobody else implements." },
+              "describes": { "type": "string", "minLength": 20, "description": "What is actually asserted, in plain words, so a second implementation can be written from the profile alone." }
+            }
+          },
+          "normative": { "type": "string", "enum": ["MUST", "SHOULD"] },
+          "whenNotObservable": { "type": "string", "enum": ["skip", "inconclusive"] },
+          "inconclusiveWhen": { "type": "array", "items": { "type": "string" } },
+          "relatedVectors": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": ["set", "id"],
+              "additionalProperties": true,
+              "properties": {
+                "set": { "type": "string" },
+                "id": { "type": "string" },
+                "subject": { "type": "string" }
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/profiles/x402-deployed-ladder-v1.json

@@ -0,0 +1,178 @@
+{
+  "$schema": "./profile.schema.json",
+  "profile": "x402-deployed-ladder",
+  "version": "1.0.0",
+  "published": "2026-10-17",
+  "intent": "Passive audit of a deployed third-party x402 endpoint from the response it already returns, without cooperation from its operator and without paying.",
+  "notMeasured": "Whether the party behind the endpoint is honest, whether the service does what it advertises, whether a price is fair, and anything that needs a settlement. See CONFORMANCE.md for the full list.",
+  "outcomes": {
+    "pass": "The check ran and the response satisfies it.",
+    "fail": "The check ran and the response does not satisfy it.",
+    "skip": "The check was deliberately not attempted, because this profile is passive and the check needs something a passive run will not do, such as paying.",
+    "inconclusive": "The check was attempted and could not decide, for example because a signature algorithm or a key location is outside what the runner supports. Never report this as fail: a runner's own gap is not a defect of the endpoint."
+  },
+  "wireStates": {
+    "note": "The reference runner in this repository emits three states for backward compatibility. This table maps them onto the four outcomes above, so a consumer of this profile can translate without reading our code.",
+    "HAALT": "pass",
+    "HAALT_NIET": "fail",
+    "ONGEMETEN": "skip when the check declares whenNotObservable skip, inconclusive otherwise"
+  },
+  "specs": {
+    "x402-http-v2": {
+      "repo": "x402-foundation/x402",
+      "path": "specs/transports-v2/http.md",
+      "commit": "faa1c694c66a",
+      "state": "merged on main",
+      "retrieved": "2026-10-17"
+    },
+    "offer-receipt": {
+      "repo": "x402-foundation/x402",
+      "path": "specs/extensions/extension-offer-and-receipt.md",
+      "commit": "faa1c694c66a",
+      "state": "merged on main",
+      "retrieved": "2026-10-17"
+    },
+    "offer-receipt-commitment": {
+      "repo": "x402-foundation/x402",
+      "path": "specs/extensions/extension-offer-and-receipt.md",
+      "commit": "0e492d6",
+      "state": "proposed, not merged",
+      "pullRequest": 3827,
+      "retrieved": "2026-10-17",
+      "warning": "Sections 5.6 through 5.6.5 do not exist in the version on main. They exist only on this pull request, which is open. The pinned commit is four commits ahead of main and is fetchable, but the section numbers can still move before it merges. Any check referencing this spec entry is measuring against a proposal, and a result carrying it should say so."
+    }
+  },
+  "relatedWork": {
+    "x402-core-vectors": {
+      "repo": "x402-foundation/x402",
+      "path": "conformance/vectors/x402-core/",
+      "pullRequest": 2776,
+      "state": "proposed, not merged",
+      "note": "That set names a requirement and the request that exercises it, for an implementer proving their own implementation. Its expected field is the same sentence on every vector, so it carries no machine-checkable expectation. This profile references its ids where the subject overlaps rather than restating the requirement, and adds the three things a passive run needs: which input the check requires, what is actually asserted, and what to report when the check cannot decide. Raised as a question in issue 3396."
+    }
+  },
+  "checks": [
+    {
+      "id": "ARV-L0",
+      "key": "t0",
+      "level": 0,
+      "name": "asks for payment the way x402 says",
+      "requirement": "HTTP 402 carrying accepts[] with scheme, network, payTo and an amount, in the body or in the Payment-Required header",
+      "clause": [
+        { "spec": "x402-http-v2", "section": "Payment Required Signaling" },
+        { "spec": "x402-http-v2", "section": "Header Summary" }
+      ],
+      "input": { "needs": ["response status", "response headers", "response body"], "requests": 1, "pays": false },
+      "assertion": {
+        "evaluator": "statusAndAccepts",
+        "describes": "status is 402, and an accepts entry is reachable either in the JSON body or base64 in the Payment-Required header, carrying all four fields"
+      },
+      "normative": "MUST",
+      "whenNotObservable": "inconclusive",
+      "relatedVectors": [
+        { "set": "x402-core-vectors", "id": "X4-001", "subject": "402 payment challenge headers present" }
+      ]
+    },
+    {
+      "id": "ARV-L1",
+      "key": "t1",
+      "level": 1,
+      "name": "declares the offer-receipt extension",
+      "requirement": "the 402 carries an offer-receipt entry in extensions",
+      "clause": [
+        { "spec": "offer-receipt", "section": "4.1 Placement", "quote": "extensions[\"offer-receipt\"].info.offers[]" }
+      ],
+      "input": { "needs": ["the same 402 as ARV-L0"], "requests": 0, "pays": false },
+      "assertion": {
+        "evaluator": "extensionDeclared",
+        "describes": "extensions carries an offer-receipt key, counted from either the object form or the array form"
+      },
+      "normative": "SHOULD",
+      "whenNotObservable": "inconclusive",
+      "relatedVectors": []
+    },
+    {
+      "id": "ARV-L2",
+      "key": "t2",
+      "level": 2,
+      "name": "signs its offer, and the signature verifies",
+      "requirement": "extensions[\"offer-receipt\"].info.offers[0] is a signed artifact whose signature verifies: either an eip712 artifact recovering to an address, or a jws with an EdDSA signature over the offer payload whose key resolves from its kid",
+      "clause": [
+        { "spec": "offer-receipt", "section": "3.1 Common Object Shape" },
+        { "spec": "offer-receipt", "section": "3.3 JWS Header Requirements" },
+        { "spec": "offer-receipt", "section": "4.3 EIP-712 Types for Offer (Normative Schema)" },
+        { "spec": "offer-receipt", "section": "4.5 Offer Verification" },
+        { "spec": "offer-receipt", "section": "4.5.1 Signer Authorization" }
+      ],
+      "input": { "needs": ["the same 402 as ARV-L0", "for a jws offer with a did:web kid: one https fetch of that did document"], "requests": 0, "pays": false },
+      "assertion": {
+        "evaluator": "offerSignatureVerifies",
+        "describes": "the artifact's format is recognised and its signature verifies over the offer payload"
+      },
+      "normative": "SHOULD",
+      "whenNotObservable": "inconclusive",
+      "inconclusiveWhen": [
+        "the signature algorithm is not one this runner implements",
+        "the key cannot be resolved, for example a did:web document that does not answer or whose publicKeyMultibase is not multibase over multicodec 0xed01",
+        "the optional ethers dependency is absent, which is what an eip712 recovery needs"
+      ],
+      "relatedVectors": []
+    },
+    {
+      "id": "ARV-L3",
+      "key": "t3",
+      "level": 3,
+      "name": "emits a receipt that verifies",
+      "requirement": "after payment, the settlement response carries a receipt whose signature recovers to the same signer",
+      "clause": [
+        { "spec": "offer-receipt", "section": "5.1 Placement", "quote": "extensions[\"offer-receipt\"].info.receipt" },
+        { "spec": "offer-receipt", "section": "5.5 Receipt Verification" }
+      ],
+      "input": { "needs": ["a settlement response from a paid request"], "requests": 1, "pays": true },
+      "assertion": {
+        "evaluator": "receiptSignatureVerifies",
+        "describes": "a receipt is present and its signature recovers to the signer that signed the offer"
+      },
+      "normative": "SHOULD",
+      "whenNotObservable": "skip",
+      "relatedVectors": []
+    },
+    {
+      "id": "ARV-L4",
+      "key": "t4",
+      "level": 4,
+      "name": "receipt is version 2 and the salt arrives where 5.6.3 says",
+      "requirement": "payload.version is 2 with both commitment fields, and the salt is at extensions[\"offer-receipt\"].info.authorizationSalt",
+      "clause": [
+        { "spec": "offer-receipt-commitment", "section": "5.6 Authorization Commitment (receipt version 2)" },
+        { "spec": "offer-receipt-commitment", "section": "5.6.3 Salt" }
+      ],
+      "input": { "needs": ["a settlement response from a paid request"], "requests": 0, "pays": true },
+      "assertion": {
+        "evaluator": "receiptVersionTwoAndSaltPlacement",
+        "describes": "payload.version is 2, both commitment fields are present, and the salt sits outside the signed payload at the declared location"
+      },
+      "normative": "MUST",
+      "whenNotObservable": "skip",
+      "relatedVectors": []
+    },
+    {
+      "id": "ARV-L5",
+      "key": "t5",
+      "level": 5,
+      "name": "the commitment opens against the chain to exactly one settlement",
+      "requirement": "section 5.6.4 run against live chain state resolves to exactly one AuthorizationUsed nonce",
+      "clause": [
+        { "spec": "offer-receipt-commitment", "section": "5.6.4 Linking a receipt to its settlement (eip3009)" }
+      ],
+      "input": { "needs": ["a receipt", "its authorization salt", "the asset that was paid", "a chain read"], "requests": 0, "pays": true },
+      "assertion": {
+        "evaluator": "commitmentOpensOnExactlyOneNonce",
+        "describes": "recomputing the commitment over candidate AuthorizationUsed nonces opens on exactly one; zero and more than one both fail closed"
+      },
+      "normative": "MUST",
+      "whenNotObservable": "skip",
+      "relatedVectors": []
+    }
+  ]
+}