agent-receipt-verify 0.0.0-stage → 0.2.2

package/vectors/inam/vectors.json

@@ -0,0 +1,96 @@
+{
+  "suite": "inam-countersigned-grounding-v0.1",
+  "method": "counterparty-countersigned",
+  "note": "Test keys and made-up addresses only. Checks: feedbackHash, receiptId, both signatures, value, sender, specHash/outputHash against the bytes the requester observed.",
+  "parties": {
+    "requester": {
+      "did": "did:key:z6Mkkrq4oHrSaU8E2ZctUreJkiXyrVbPRM4FZgPxYx3X8XCS",
+      "erc8004Address": "0x1111111111111111111111111111111111111111"
+    },
+    "provider": {
+      "did": "did:key:z6MkenP9pSJt69Re5GYC3HeA6JC4BbFSATBbVkjx3TVbE4LL",
+      "erc8004Address": "0x2222222222222222222222222222222222222222"
+    }
+  },
+  "observed": {
+    "request": {
+      "method": "POST",
+      "url": "https://worker.example/translate",
+      "body": "{\"text\":\"merhaba dünya\",\"to\":\"en\"}"
+    },
+    "response": {
+      "status": 200,
+      "body": "{\"text\":\"hello world\"}"
+    },
+    "expectedSpecHash": "sha256:423007c3904c15d5f43b0485ff3e442b0003925cb283ac7b58c16634429bce20",
+    "expectedOutputHash": "sha256:e344fa3b83cf2b142293de2a4e56c6b211d4a157f8adb3c954c51ab67f41a46a"
+  },
+  "cases": [
+    {
+      "id": "POSITIVE",
+      "description": "Genuine feedback: sent from the requester's proven wallet, both signatures valid, hashes match the observed bytes.",
+      "feedbackFile": "{\"agentId\":7,\"agentRegistry\":\"eip155:8453:0x8004000000000000000000000000000000000000\",\"clientAddress\":\"eip155:8453:0x1111111111111111111111111111111111111111\",\"createdAt\":\"2026-10-03T00:00:00.000Z\",\"inam\":{\"receipt\":{\"agentA\":{\"id\":\"did:key:z6Mkkrq4oHrSaU8E2ZctUreJkiXyrVbPRM4FZgPxYx3X8XCS\",\"role\":\"requester\"},\"agentB\":{\"id\":\"did:key:z6MkenP9pSJt69Re5GYC3HeA6JC4BbFSATBbVkjx3TVbE4LL\",\"role\":\"worker\"},\"jobId\":\"http:countersigned-vectors-v0.1\",\"receiptId\":\"sha256:c4b80bbc9472979127dca9491a729396514bc9b6c36391b79ba9419fbb2828c3\",\"receiptVersion\":\"1.0\",\"result\":{\"completedAt\":\"2026-10-01T10:00:01.000Z\",\"outputHash\":\"sha256:e344fa3b83cf2b142293de2a4e56c6b211d4a157f8adb3c954c51ab67f41a46a\"},\"signatures\":{\"agentA\":\"mjXSDW6FMCAL5wBv0ASZ4BR7Dst7KXNMtQF1mrPaApJw0QCzuwWHPsuQqEkVjb4LOTvGfmJzaa6QtK/QLbKTCQ==\",\"agentB\":\"wDDUXpemxNcVEVQfH7kaTZr2rJk/zzLNNpAkx3a70UjyrGK9OPMAX/dhgxsVneGCse/jXV2s6F+n5WLFDqYwBQ==\"},\"task\":{\"capability\":\"translation.tr-en\",\"createdAt\":\"2026-10-01T10:00:00.000Z\",\"specHash\":\"sha256:423007c3904c15d5f43b0485ff3e442b0003925cb283ac7b58c16634429bce20\"},\"verification\":{\"method\":\"payer_confirmation\",\"outcome\":\"success\"}}},\"tag1\":\"inam-receipt\",\"tag2\":\"translation.tr-en\",\"value\":100,\"valueDecimals\":0}",
+      "onchainEvent": {
+        "clientAddress": "0x1111111111111111111111111111111111111111",
+        "feedbackHash": "0x9d7bb681bc76d26fe927d690d0042a1c3176dbf3b4831d498c99f1e3a39ecfe6",
+        "value": 100
+      },
+      "expected": {
+        "accepted": true,
+        "failedChecks": []
+      }
+    },
+    {
+      "id": "WRONG-WALLET-COPY",
+      "description": "The genuine file, byte for byte, sent from a wallet that is not the requester's proven erc8004_id (the Sybil copy).",
+      "feedbackFile": "{\"agentId\":7,\"agentRegistry\":\"eip155:8453:0x8004000000000000000000000000000000000000\",\"clientAddress\":\"eip155:8453:0x1111111111111111111111111111111111111111\",\"createdAt\":\"2026-10-03T00:00:00.000Z\",\"inam\":{\"receipt\":{\"agentA\":{\"id\":\"did:key:z6Mkkrq4oHrSaU8E2ZctUreJkiXyrVbPRM4FZgPxYx3X8XCS\",\"role\":\"requester\"},\"agentB\":{\"id\":\"did:key:z6MkenP9pSJt69Re5GYC3HeA6JC4BbFSATBbVkjx3TVbE4LL\",\"role\":\"worker\"},\"jobId\":\"http:countersigned-vectors-v0.1\",\"receiptId\":\"sha256:c4b80bbc9472979127dca9491a729396514bc9b6c36391b79ba9419fbb2828c3\",\"receiptVersion\":\"1.0\",\"result\":{\"completedAt\":\"2026-10-01T10:00:01.000Z\",\"outputHash\":\"sha256:e344fa3b83cf2b142293de2a4e56c6b211d4a157f8adb3c954c51ab67f41a46a\"},\"signatures\":{\"agentA\":\"mjXSDW6FMCAL5wBv0ASZ4BR7Dst7KXNMtQF1mrPaApJw0QCzuwWHPsuQqEkVjb4LOTvGfmJzaa6QtK/QLbKTCQ==\",\"agentB\":\"wDDUXpemxNcVEVQfH7kaTZr2rJk/zzLNNpAkx3a70UjyrGK9OPMAX/dhgxsVneGCse/jXV2s6F+n5WLFDqYwBQ==\"},\"task\":{\"capability\":\"translation.tr-en\",\"createdAt\":\"2026-10-01T10:00:00.000Z\",\"specHash\":\"sha256:423007c3904c15d5f43b0485ff3e442b0003925cb283ac7b58c16634429bce20\"},\"verification\":{\"method\":\"payer_confirmation\",\"outcome\":\"success\"}}},\"tag1\":\"inam-receipt\",\"tag2\":\"translation.tr-en\",\"value\":100,\"valueDecimals\":0}",
+      "onchainEvent": {
+        "clientAddress": "0x3333333333333333333333333333333333333333",
+        "feedbackHash": "0x9d7bb681bc76d26fe927d690d0042a1c3176dbf3b4831d498c99f1e3a39ecfe6",
+        "value": 100
+      },
+      "expected": {
+        "accepted": false,
+        "failedChecks": [
+          "fileClientAddressMatchesSender",
+          "senderIsRequesterWallet"
+        ]
+      }
+    },
+    {
+      "id": "TAMPERED-OUTPUT-HASH",
+      "description": "result.outputHash edited inside the carried receipt; feedbackHash recomputed over the edited file, sent from the right wallet.",
+      "feedbackFile": "{\"agentId\":7,\"agentRegistry\":\"eip155:8453:0x8004000000000000000000000000000000000000\",\"clientAddress\":\"eip155:8453:0x1111111111111111111111111111111111111111\",\"createdAt\":\"2026-10-03T00:00:00.000Z\",\"inam\":{\"receipt\":{\"agentA\":{\"id\":\"did:key:z6Mkkrq4oHrSaU8E2ZctUreJkiXyrVbPRM4FZgPxYx3X8XCS\",\"role\":\"requester\"},\"agentB\":{\"id\":\"did:key:z6MkenP9pSJt69Re5GYC3HeA6JC4BbFSATBbVkjx3TVbE4LL\",\"role\":\"worker\"},\"jobId\":\"http:countersigned-vectors-v0.1\",\"receiptId\":\"sha256:c4b80bbc9472979127dca9491a729396514bc9b6c36391b79ba9419fbb2828c3\",\"receiptVersion\":\"1.0\",\"result\":{\"completedAt\":\"2026-10-01T10:00:01.000Z\",\"outputHash\":\"sha256:2910e9a528b169d433bad2f53171e547726ca717868e29362ec178cfb58b97cb\"},\"signatures\":{\"agentA\":\"mjXSDW6FMCAL5wBv0ASZ4BR7Dst7KXNMtQF1mrPaApJw0QCzuwWHPsuQqEkVjb4LOTvGfmJzaa6QtK/QLbKTCQ==\",\"agentB\":\"wDDUXpemxNcVEVQfH7kaTZr2rJk/zzLNNpAkx3a70UjyrGK9OPMAX/dhgxsVneGCse/jXV2s6F+n5WLFDqYwBQ==\"},\"task\":{\"capability\":\"translation.tr-en\",\"createdAt\":\"2026-10-01T10:00:00.000Z\",\"specHash\":\"sha256:423007c3904c15d5f43b0485ff3e442b0003925cb283ac7b58c16634429bce20\"},\"verification\":{\"method\":\"payer_confirmation\",\"outcome\":\"success\"}}},\"tag1\":\"inam-receipt\",\"tag2\":\"translation.tr-en\",\"value\":100,\"valueDecimals\":0}",
+      "onchainEvent": {
+        "clientAddress": "0x1111111111111111111111111111111111111111",
+        "feedbackHash": "0x7feec35c27e69bccc6da108795931a25b2acbd49bd46dae7787fede41f3eadf0",
+        "value": 100
+      },
+      "expected": {
+        "accepted": false,
+        "failedChecks": [
+          "receiptIdRecomputes",
+          "workerSignature",
+          "requesterSignature",
+          "outputHashMatchesObservedBytes"
+        ]
+      }
+    },
+    {
+      "id": "OUTPUT-NOT-WHAT-WAS-SERVED",
+      "description": "Both signatures are valid, but the provider's outputHash commits to different bytes than the requester received. A requester that recomputes (SPEC §15 step 3) refuses to countersign this.",
+      "feedbackFile": "{\"agentId\":7,\"agentRegistry\":\"eip155:8453:0x8004000000000000000000000000000000000000\",\"clientAddress\":\"eip155:8453:0x1111111111111111111111111111111111111111\",\"createdAt\":\"2026-10-03T00:00:00.000Z\",\"inam\":{\"receipt\":{\"agentA\":{\"id\":\"did:key:z6Mkkrq4oHrSaU8E2ZctUreJkiXyrVbPRM4FZgPxYx3X8XCS\",\"role\":\"requester\"},\"agentB\":{\"id\":\"did:key:z6MkenP9pSJt69Re5GYC3HeA6JC4BbFSATBbVkjx3TVbE4LL\",\"role\":\"worker\"},\"jobId\":\"http:countersigned-vectors-v0.1\",\"receiptId\":\"sha256:51968202116a120715be7387e83f03d26ea3c1281d63110a148159e4d4c7cf90\",\"receiptVersion\":\"1.0\",\"result\":{\"completedAt\":\"2026-10-01T10:00:01.000Z\",\"outputHash\":\"sha256:2910e9a528b169d433bad2f53171e547726ca717868e29362ec178cfb58b97cb\"},\"signatures\":{\"agentA\":\"+fXRHCXTDOA+tUqARcBXm2cn8qkIeD+ByCQXPOTC7Nm2LOIc2mmmWQy0UKLcTpRUbvHaNv9mc3Lmz1IzsKUOBA==\",\"agentB\":\"P46kDb36mIo7D4HFeLR/DrVlKdwWfQdZHwnq2y4XmqjE4udQLFI7yNwkFMvgxCspXZL12pGX3ajp11bnreIMDQ==\"},\"task\":{\"capability\":\"translation.tr-en\",\"createdAt\":\"2026-10-01T10:00:00.000Z\",\"specHash\":\"sha256:423007c3904c15d5f43b0485ff3e442b0003925cb283ac7b58c16634429bce20\"},\"verification\":{\"method\":\"payer_confirmation\",\"outcome\":\"success\"}}},\"tag1\":\"inam-receipt\",\"tag2\":\"translation.tr-en\",\"value\":100,\"valueDecimals\":0}",
+      "onchainEvent": {
+        "clientAddress": "0x1111111111111111111111111111111111111111",
+        "feedbackHash": "0x81d5ed166f4c3fa4d7bb918240fae486c92299077fb00494ec65928a0b967770",
+        "value": 100
+      },
+      "expected": {
+        "accepted": false,
+        "failedChecks": [
+          "outputHashMatchesObservedBytes"
+        ]
+      }
+    }
+  ]
+}

package/vectors/kanon/amount-insufficient-001.json

@@ -0,0 +1,52 @@
+{
+  "id": "x402-evm-eip3009-amount-insufficient-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Amount insufficient: the signed value is below the accepted amount.",
+  "provenance": [
+    "EIP-3009",
+    "x402"
+  ],
+  "description": "The authorization authentically signs a value below the accepted amount, an authorized underpayment caught only after the signature is known genuine.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "9999",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0x0303030303030303030303030303030303030303030303030303030303030303"
+      },
+      "signature": "0x27328664d2ad42fc02b3ee767ef413e6239afd665fd94aa115d0b9e949551c901224e0aecef200d95e8f8516956e91cee0a08cdf6450829d62381f5b635266351c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "AMOUNT_INSUFFICIENT"
+  }
+}

package/vectors/kanon/cross-chain-replay-001.json

@@ -0,0 +1,54 @@
+{
+  "id": "x402-evm-eip3009-cross-chain-replay-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Cross-chain replay: signature bound to eip155:8453 presented to an eip155:84532 server.",
+  "provenance": [
+    "arXiv:2605.11781",
+    "EIP-712",
+    "EIP-3009",
+    "CWE-294"
+  ],
+  "description": "The authorization was signed under the Base mainnet domain (chainId 8453) and is replayed against a Base Sepolia server. Reconstructing the digest with the target chainId yields a recovered address that is not authorization.from.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+      },
+      "signature": "0xbf38fb328d535ba58158f457ec1ba494b1ad0f579960ec8bac6bde7e6a6381371e315305bb368b23a8946c65ee223b9968213823c823ebc3ffdf79984ad234481c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "SIGNER_MISMATCH"
+  }
+}

package/vectors/kanon/cross-contract-replay-001.json

@@ -0,0 +1,54 @@
+{
+  "id": "x402-evm-eip3009-cross-contract-replay-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Cross-contract replay: signature bound to a different verifyingContract on the same chain.",
+  "provenance": [
+    "arXiv:2605.11781",
+    "EIP-712",
+    "EIP-3009",
+    "CWE-294"
+  ],
+  "description": "The authorization was signed under a different token contract on the same chain. Reconstructing the digest with the required asset as verifyingContract yields a recovered address that is not authorization.from.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+      },
+      "signature": "0x4f422c7e4a67230cc483f58c73984167602cac4e819dbc9dc3f7a732b211b35c6005e26c769bb693104cc9618fd576546c1f8344c5cb32ebb80be67dbeb0ad4f1c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "SIGNER_MISMATCH"
+  }
+}

package/vectors/kanon/domain-name-mismatch-001.json

@@ -0,0 +1,53 @@
+{
+  "id": "x402-evm-eip3009-domain-name-mismatch-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:5042",
+  "asset_transfer_method": "eip3009",
+  "encodes": "EIP-712 domain name mismatch: signature bound to name \"USD Coin\" presented for a token whose domain name is \"USDC\".",
+  "provenance": [
+    "EIP-712",
+    "EIP-3009",
+    "CWE-347"
+  ],
+  "description": "The authorization was signed for Arc mainnet USDC (chainId 5042) under the EIP-712 domain name \"USD Coin\", the name Base mainnet USDC reports, while the Arc contract's name() is \"USDC\". Reconstructing the digest with the name from accepted.extra yields a recovered address that is not authorization.from.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0x0404040404040404040404040404040404040404040404040404040404040404"
+      },
+      "signature": "0xb82e461a54c0d6133e947b3ff1c2b8565db532fe92e2c20e8803eee463d91c7b5dda3ed0672c7a11afddd84a8f3acb59d8e60f12b0c94521459e479131e251261c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:5042",
+      "amount": "10000",
+      "asset": "0x3600000000000000000000000000000000000000",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "SIGNER_MISMATCH"
+  }
+}

package/vectors/kanon/expired-001.json

@@ -0,0 +1,51 @@
+{
+  "id": "x402-evm-eip3009-expired-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Expired authorization: verification occurs at or after validBefore.",
+  "provenance": [
+    "EIP-3009"
+  ],
+  "description": "The baseline signature is unchanged. Verification occurs past the validity window, at or after validBefore, so the authorization is expired.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+      },
+      "signature": "0x6f561d84da69dea3bf562f243b08ec7d3b6b140f7466c7c797d2a24554ed477b60b03719ddabe477324676e2ede73876c8ae62be1c0630b75bb5f050f48b21d71c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672200
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "EXPIRED"
+  }
+}

package/vectors/kanon/network-mismatch-001.json

@@ -0,0 +1,52 @@
+{
+  "id": "x402-evm-eip3009-network-mismatch-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:8453",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Network mismatch: the target network differs from the accepted network.",
+  "provenance": [
+    "x402",
+    "CAIP-2"
+  ],
+  "description": "The payment is accepted on eip155:84532 but the verifier's target network is eip155:8453. The plaintext mismatch is caught before any cryptography, while the signature itself is authentic.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0x0101010101010101010101010101010101010101010101010101010101010101"
+      },
+      "signature": "0x13e4e6b83168096278da7d426c281a65adc0754fe92405b865daec447d96764e5a54399c88d55f92bdaf2f7f0563f94d1b2c40d305476b2f5ef190cd7c0b252b1c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "NETWORK_MISMATCH"
+  }
+}

package/vectors/kanon/nonce-replay-001.json

@@ -0,0 +1,56 @@
+{
+  "id": "x402-evm-eip3009-nonce-replay-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Replay of a previously consumed authorization nonce.",
+  "provenance": [
+    "arXiv:2605.11781",
+    "EIP-3009",
+    "CWE-294"
+  ],
+  "description": "The baseline signature is unchanged. The authorization nonce is declared already consumed through the injected context, so the mandate is a replay.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+      },
+      "signature": "0x6f561d84da69dea3bf562f243b08ec7d3b6b140f7466c7c797d2a24554ed477b60b03719ddabe477324676e2ede73876c8ae62be1c0630b75bb5f050f48b21d71c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100,
+    "seen_nonces": [
+      "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+    ]
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "NONCE_REPLAY"
+  }
+}

package/vectors/kanon/not-yet-valid-001.json

@@ -0,0 +1,51 @@
+{
+  "id": "x402-evm-eip3009-not-yet-valid-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Not yet valid: verification occurs before validAfter.",
+  "provenance": [
+    "EIP-3009"
+  ],
+  "description": "The authorization is signed correctly but its validAfter is after the verification time, so the mandate is not yet valid.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672120",
+        "validBefore": "1740672180",
+        "nonce": "0x0202020202020202020202020202020202020202020202020202020202020202"
+      },
+      "signature": "0x6d97fa04e63d458190789542762da22aa56cb9058fde09743f6e1c5e2758ce6e10471b510923c29c75bacd0b7a58e247a0a9ce3005c23e0d3840807a24456d111b"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "NOT_YET_VALID"
+  }
+}

package/vectors/kanon/sig-malleable-high-s-001.json

@@ -0,0 +1,54 @@
+{
+  "id": "x402-evm-eip3009-sig-malleable-high-s-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Signature malleability: the s value is in the upper half of the curve order (violates EIP-2).",
+  "provenance": [
+    "CVE-2022-35961",
+    "EIP-2",
+    "EIP-2098",
+    "EIP-712"
+  ],
+  "description": "The malleable high s twin of the baseline signature. It still recovers to the signer but a conformant verifier rejects it at the low s check before recovery.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+      },
+      "signature": "0x6f561d84da69dea3bf562f243b08ec7d3b6b140f7466c7c797d2a24554ed477b9f4fc8e622541b88cdb9891d1218c787f2007a2893426f84641c6e3bdbab1f6a1b"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "SIG_MALLEABLE"
+  }
+}

package/vectors/kanon/valid-baseline-001.json

@@ -0,0 +1,52 @@
+{
+  "id": "x402-evm-eip3009-valid-baseline-001",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "encodes": "Well-formed EIP-3009 exact payment that satisfies all requirements.",
+  "provenance": [
+    "EIP-3009",
+    "EIP-712"
+  ],
+  "description": "A correctly signed EIP-3009 authorization that matches the requirements and is verified inside its validity window.",
+  "input": {
+    "x402Version": 2,
+    "payload": {
+      "authorization": {
+        "from": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266",
+        "to": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+        "value": "10000",
+        "validAfter": "1740672089",
+        "validBefore": "1740672154",
+        "nonce": "0xf3746613c2d920b5fdabc0856f2aeb2d4f88ee6037b8cc5d04a71a4462f13480"
+      },
+      "signature": "0x6f561d84da69dea3bf562f243b08ec7d3b6b140f7466c7c797d2a24554ed477b60b03719ddabe477324676e2ede73876c8ae62be1c0630b75bb5f050f48b21d71c"
+    },
+    "resource": {
+      "url": "https://api.example.com/premium-data",
+      "description": "Access to premium market data",
+      "mimeType": "application/json"
+    },
+    "accepted": {
+      "scheme": "exact",
+      "network": "eip155:84532",
+      "amount": "10000",
+      "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+      "payTo": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
+      "maxTimeoutSeconds": 60,
+      "extra": {
+        "name": "USDC",
+        "version": "2"
+      }
+    }
+  },
+  "context": {
+    "verification_time": 1740672100
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "VALID"
+  }
+}