agent-receipt-verify 0.2.3 → 0.2.5

package/vectors/acceptance-binding/real-record-with-producer-key.json

@@ -0,0 +1,66 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "receipt-to-acceptance",
+  "requires_chain_read": false,
+  "provenance": [
+    "trilatic.acceptance-receipt/1.2, live record fetched from https://api.babyblueviper.com/work-acceptance/record/4c7273afcdb5333586b0a41c4238a968f3dedc23f66f71c5a1928ff3d279ab3d on 18 October 2026",
+    "the two binding keys were specified by babyblueviper1 in erc-8004/erc-8004-contracts#99 on 18 October 2026",
+    "the record is issued by invinoveritas, not by us; it is copied here as test material"
+  ],
+  "id": "acceptance-binding-real-record-with-producer-key",
+  "encodes": "The positive control, and at the same time the exact one-field diff that makes the record auditable.",
+  "description": "Byte-identical to real-record-as-issued except that parties.producer.key_id is set to a distinct key. Now the checker and the producer are both named in the same namespace and differ, so a third party can verify the independence claim instead of accepting it. This must link. Without this vector the set would only contain refusals, which proves nothing about the harness.",
+  "input": {
+    "doc": {
+      "record": {
+        "receipt": {
+          "schema": "trilatic.acceptance-receipt/1.2",
+          "receipt_id": "INV-WA-aa4b8bc740bc2524",
+          "issuer": "invinoveritas",
+          "issued_utc": "2026-10-18T00:52:09Z",
+          "criteria": {
+            "id": "invinoveritas-p1-selftest",
+            "sha256": "d74ad7d7492908f1146b233e89db6ca205065c67f02d33758ff0aa9f8b9e02fc",
+            "committed_at": "2026-10-18T00:52:03Z"
+          },
+          "files": {
+            "remediated": {
+              "name": "refund-policy.txt",
+              "bytes": 121,
+              "sha256": "9c27eee03d50f4ff00fb60a1551a03d7311dbed257b7b943b3ff5d13eb30c083"
+            }
+          },
+          "parties": {
+            "checker": {
+              "name": "invinoveritas",
+              "key_id": "invinoveritas-checker-a4cecab2"
+            },
+            "producer": {
+              "name": "Example Vendor (self-test)",
+              "key_id": "example-vendor-producer-7f31aa02"
+            }
+          },
+          "independence": "independent",
+          "verdict": "pass"
+        }
+      },
+      "bindings_sidecar": {
+        "version": "invinoveritas.work-acceptance-bindings/v0",
+        "receipt_sha256": "4c7273afcdb5333586b0a41c4238a968f3dedc23f66f71c5a1928ff3d279ab3d",
+        "criteria_id": "d74ad7d7492908f1146b233e89db6ca205065c67f02d33758ff0aa9f8b9e02fc",
+        "bindings": {}
+      }
+    },
+    "receiptSha256": "4c7273afcdb5333586b0a41c4238a968f3dedc23f66f71c5a1928ff3d279ab3d",
+    "deliverableSha256": "9c27eee03d50f4ff00fb60a1551a03d7311dbed257b7b943b3ff5d13eb30c083"
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED",
+    "independence": "VERIFIEERBAAR_ONAFHANKELIJK"
+  },
+  "limits": [
+    "The signature on the record is not checked here, and neither are its criteria. That is the issuing checker's own verifier.",
+    "A LINKED verdict says the two artifacts are about the same thing, not that the acceptance record itself is sound."
+  ]
+}

package/vectors/acceptance-binding/real-record-x402-keys-match.json

@@ -0,0 +1,76 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "receipt-to-acceptance",
+  "requires_chain_read": false,
+  "provenance": [
+    "trilatic.acceptance-receipt/1.2, live record fetched from https://api.babyblueviper.com/work-acceptance/record/4c7273afcdb5333586b0a41c4238a968f3dedc23f66f71c5a1928ff3d279ab3d on 18 October 2026",
+    "the two binding keys were specified by babyblueviper1 in erc-8004/erc-8004-contracts#99 on 18 October 2026",
+    "the record is issued by invinoveritas, not by us; it is copied here as test material"
+  ],
+  "id": "acceptance-binding-real-record-x402-keys-match",
+  "encodes": "Both payment keys present and each compared against its own counterpart. The positive control for the two-key split.",
+  "description": "The sidecar carries the commitment in the commitment key and the nonce in the nonce key, both matching the receipt. This must link, and a verifier should report which pairs it actually compared, so that a reader can tell a full comparison from a record that simply carried neither key.",
+  "input": {
+    "doc": {
+      "record": {
+        "receipt": {
+          "schema": "trilatic.acceptance-receipt/1.2",
+          "receipt_id": "INV-WA-aa4b8bc740bc2524",
+          "issuer": "invinoveritas",
+          "issued_utc": "2026-10-18T00:52:09Z",
+          "criteria": {
+            "id": "invinoveritas-p1-selftest",
+            "sha256": "d74ad7d7492908f1146b233e89db6ca205065c67f02d33758ff0aa9f8b9e02fc",
+            "committed_at": "2026-10-18T00:52:03Z"
+          },
+          "files": {
+            "remediated": {
+              "name": "refund-policy.txt",
+              "bytes": 121,
+              "sha256": "9c27eee03d50f4ff00fb60a1551a03d7311dbed257b7b943b3ff5d13eb30c083"
+            }
+          },
+          "parties": {
+            "checker": {
+              "name": "invinoveritas",
+              "key_id": "invinoveritas-checker-a4cecab2"
+            },
+            "producer": {
+              "name": "Example Vendor (self-test)",
+              "key_id": "example-vendor-producer-7f31aa02"
+            }
+          },
+          "independence": "independent",
+          "verdict": "pass"
+        }
+      },
+      "bindings_sidecar": {
+        "version": "invinoveritas.work-acceptance-bindings/v0",
+        "receipt_sha256": "4c7273afcdb5333586b0a41c4238a968f3dedc23f66f71c5a1928ff3d279ab3d",
+        "criteria_id": "d74ad7d7492908f1146b233e89db6ca205065c67f02d33758ff0aa9f8b9e02fc",
+        "bindings": {
+          "x402_receipt_commitment": "0xe04421456465df1012f416b72aece3401f9e3d5be5bd78280324a031efe1d40f",
+          "x402_authorization_nonce": "0x43457c8e57b7c4ff92d716350c61c88c8f3b644d09d7c813d5a7ee6450a843da"
+        }
+      }
+    },
+    "receipt": {
+      "format": "eip712",
+      "authorizationNonce": "0x43457c8e57b7c4ff92d716350c61c88c8f3b644d09d7c813d5a7ee6450a843da",
+      "authorizationCommitment": "0xe04421456465df1012f416b72aece3401f9e3d5be5bd78280324a031efe1d40f"
+    },
+    "receiptSha256": "4c7273afcdb5333586b0a41c4238a968f3dedc23f66f71c5a1928ff3d279ab3d",
+    "deliverableSha256": "9c27eee03d50f4ff00fb60a1551a03d7311dbed257b7b943b3ff5d13eb30c083"
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED",
+    "compared": [
+      "COMMITMENT",
+      "AUTHORIZATION"
+    ]
+  },
+  "limits": [
+    "Linking the payment to the acceptance record does not prove the payment settled. That is the receipt-to-settlement question and it needs a chain read."
+  ]
+}

package/vectors/settlement-link-kanon/README.md

@@ -0,0 +1,69 @@
+# The settlement-link vectors, in Kanon's shape
+
+This directory is generated. Do not edit the files by hand; run
+`node tools/naar-kanon-vorm.mjs` and commit the result. `npm test` checks that what is
+on disk is byte-identical to what the converter would write today, so a stale copy
+cannot sit here unnoticed.
+
+## Why it exists
+
+The author of the Kanon vectors wrote in
+[x402#3396](https://github.com/x402-foundation/x402/issues/3396) on 17 October 2026:
+
+> if you want receipt-to-settlement vectors in Kanon's shape, I'm open to that, with the
+> part that needs a chain read marked as such.
+
+This is that. The source corpus lives in `../settlement-link` and is the same twelve
+cases; these are the same cases in their field layout, with the chain-reading one
+marked.
+
+## What these cover, and what they do not
+
+Kanon covers the buyer's authorization **before** settlement: validity window, signature
+malleability, domain replay across chain and contract, nonce reuse, amount. These cover
+the other end: does a salted commitment inside a **signed receipt** open onto exactly one
+settlement on chain. The two sets nowhere overlap, which is why this is a complement and
+not a merge, and why every file here carries `verifies: "receipt-to-settlement"`.
+
+That also means Kanon's existing runner cannot execute these as they stand. Their input
+is `payload.authorization`; ours is a receipt plus a salt plus an asset. The shape is
+theirs so the two corpora can sit in one place and be read by one reader. The content is
+a different axis, and pretending otherwise would waste somebody's afternoon.
+
+## The two fields we added, both additive
+
+- `verifies` — which axis the vector tests. Without it, two corpora in one directory are
+  indistinguishable.
+- `requires_chain_read` — present and `true` on exactly one vector. The other eleven run
+  offline, with no account, no key and no network. A runner that does not know this field
+  ignores it; a runner that does knows to expect an RPC.
+
+## The one place the shape does not fit, and it is the interesting one
+
+Kanon's `expected` is `{ valid, reason_code }`. Three of our four outcomes map onto that
+cleanly:
+
+| our outcome | expected |
+|---|---|
+| `LINKED` | `valid: true`, `reason_code: LINKED` |
+| `NOT_LINKED` | `valid: false`, `reason_code: NOT_LINKED` |
+| `AMBIGUOUS` | `valid: false`, `reason_code: AMBIGUOUS` |
+| `NOT_MEASURED` | **no `valid` at all**, `measurable: false` |
+
+The fourth has no slot, and we left the hole visible rather than filling it. A receipt
+whose candidate set could not be obtained has not been rejected: our chain read did not
+happen, and that says nothing about the receipt. Writing `valid: false` there would
+blame an honest seller for our own failed RPC. A missing field is a question for a
+reader; a false is an accusation.
+
+That is the third-outcome gap the same thread discussed, and the Kanon author said in
+the same comment he would look at adding an optional third outcome without weakening the
+accept and reject cases. One file in this directory is what that gap looks like in
+practice: `no-candidates-not-measured.json`.
+
+## Provenance
+
+The Kanon vectors themselves are in `../kanon`, pinned at commit `0d5a7461e996`,
+Apache-2.0, redistributed unmodified with attribution. The vectors here are ours, built
+from three real payments on Base Sepolia; the receipts, salts and nonces in them are real
+and the commitments re-derive from the signed receipts rather than being copied in.

package/vectors/settlement-link-kanon/find-candidates-onchain.json

@@ -0,0 +1,43 @@
+{
+  "id": "x402-evm-settlement-link-find-candidates-onchain",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "The chain-reading half of the walk, marked as such.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "The full section 5.6.4 walk, starting from only the receipt, the salt and the asset: find the nonces this payer consumed in a window, then open the commitment on exactly one. Requires an archive-capable RPC for Base Sepolia. Included so the chain-dependent half is named rather than hidden, but a runner without RPC access should skip it and report that, not fail it.",
+  "requires_chain_read": true,
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792187030,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0x5c35a61a09a566a9c284fad18a70ac2ddfff34d01d2a3ce776ce94e8d5b38ff8"
+      },
+      "signature": "0x78615cb22986af0aad6e08b74ca78773bb58ece21660e84e4b35b3e5c1841b0075238ca9bfdf0f969ad3f2903af8f391fafd1b3fc7ebbf1fb5c949a3948fccde1c"
+    },
+    "authorizationSalt": "0xea85b2473363fd8fff1ccdd7f8638be8b47c7c05023e3e2e3f81bebb085ba2ad",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+  },
+  "context": {
+    "rpc": "any Base Sepolia endpoint that serves eth_getLogs over the window around the receipt issuedAt",
+    "expected_candidate_count": 2,
+    "note": "The candidate count is what the window actually produced on 2026-10-18 and will grow as this payer makes more payments; a runner should assert \"exactly one opens\", not the count."
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED"
+  }
+}

package/vectors/settlement-link-kanon/no-candidates-not-measured.json

@@ -0,0 +1,42 @@
+{
+  "id": "x402-evm-settlement-link-no-candidates-not-measured",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "An incomplete check must be distinguishable from a failed one.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "No candidate set could be obtained, for example because no chain access was available or the lookup window produced nothing. The correct answer is NOT_MEASURED and explicitly not NOT_LINKED: a check that could not run is not a receipt that fails. This is the third outcome a two-valued vocabulary cannot express.",
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792187030,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0x5c35a61a09a566a9c284fad18a70ac2ddfff34d01d2a3ce776ce94e8d5b38ff8"
+      },
+      "signature": "0x78615cb22986af0aad6e08b74ca78773bb58ece21660e84e4b35b3e5c1841b0075238ca9bfdf0f969ad3f2903af8f391fafd1b3fc7ebbf1fb5c949a3948fccde1c"
+    },
+    "authorizationSalt": "0xea85b2473363fd8fff1ccdd7f8638be8b47c7c05023e3e2e3f81bebb085ba2ad",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    "candidates": null
+  },
+  "context": {
+    "note": "candidates is null rather than an empty list, and the two mean different things: null is \"we did not obtain a list\", empty is \"we obtained a list and it was empty\"."
+  },
+  "expected": {
+    "measurable": false,
+    "reason_code": "NOT_MEASURED",
+    "note": "Deliberately carries no `valid`. The candidate set could not be obtained, so this says nothing about the receipt. Writing valid:false here would blame an honest seller for a failed chain read. This is the third-outcome gap discussed in x402#3396."
+  }
+}

package/vectors/settlement-link-kanon/opens-live-2.json

@@ -0,0 +1,47 @@
+{
+  "id": "x402-evm-settlement-link-opens-live-2",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "Receipt-to-settlement binding verified offline against a supplied candidate set.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "A version 2 receipt whose authorizationCommitment opens on exactly one of the candidate nonces supplied with it. No chain access is needed because the candidates are given; this is the arithmetic half of section 5.6.4.",
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792187518,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0xfecee93e1aec7d6858a218bf324f23e2a4eed07925d8d4542b9662c5026e3d22"
+      },
+      "signature": "0x02f5ba0d2b7928a2dbb1d8845b664a79d38eebcd0a2c4532ed3c6b922051bf8d47c8aafb0520a875a708e3ed480d84a537962ea90d66ce2ee3811f4229aa8b401b"
+    },
+    "authorizationSalt": "0x63072ea656fe922bf04c9cefc4275314d695fff01e5b57f6628c8df0252cc5dc",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    "candidates": [
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x515895dfac6f148a4cfdf5c4f8266b7859dbd6534cdf77104b1be9f484eb5005"
+      }
+    ]
+  },
+  "context": {
+    "note": "Real payment on Base Sepolia to https://api.tokenizen.nl/api/paid/verify-ownership. Buyer and seller are the same party, which proves the chain closes end to end and nothing about adoption.",
+    "settlement_transaction": "0x2898d0ceb97ddf60af98e19c94fc0adddbdf1e64f9032e62454085e37acfe36b"
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED"
+  }
+}

package/vectors/settlement-link-kanon/opens-live-3.json

@@ -0,0 +1,47 @@
+{
+  "id": "x402-evm-settlement-link-opens-live-3",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "Receipt-to-settlement binding verified offline against a supplied candidate set.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "A version 2 receipt whose authorizationCommitment opens on exactly one of the candidate nonces supplied with it. No chain access is needed because the candidates are given; this is the arithmetic half of section 5.6.4.",
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792188211,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0xea8dd34b8beac90f021a4e8d893a689c25249f86947770c8e6647c1cde206008"
+      },
+      "signature": "0x5b3a70cce6978ab44e51828b5ebbc55522e98b015045d94559d369420698da3b5309b28050dcb00ce14d65c8b230a273f8ff5ebff6410c6ae2a308e422ed5a611b"
+    },
+    "authorizationSalt": "0x349ddb90f38a3119817c5fc9cc253a2c20bcbe44aa845302df76889082b314d8",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    "candidates": [
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x4b133bbec3ce0d8177a9010784faedb459f04384b45316bb526a5f96c90a70de"
+      }
+    ]
+  },
+  "context": {
+    "note": "Real payment on Base Sepolia to https://api.tokenizen.nl/api/paid/verify-ownership. Buyer and seller are the same party, which proves the chain closes end to end and nothing about adoption.",
+    "settlement_transaction": "0x2a9e95d63a5af8210767baa69143b364dad51caffc29a152c77e03bc508d7199"
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED"
+  }
+}

package/vectors/settlement-link-kanon/opens-live.json

@@ -0,0 +1,47 @@
+{
+  "id": "x402-evm-settlement-link-opens-live",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "Receipt-to-settlement binding verified offline against a supplied candidate set.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "A version 2 receipt whose authorizationCommitment opens on exactly one of the candidate nonces supplied with it. No chain access is needed because the candidates are given; this is the arithmetic half of section 5.6.4.",
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792187030,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0x5c35a61a09a566a9c284fad18a70ac2ddfff34d01d2a3ce776ce94e8d5b38ff8"
+      },
+      "signature": "0x78615cb22986af0aad6e08b74ca78773bb58ece21660e84e4b35b3e5c1841b0075238ca9bfdf0f969ad3f2903af8f391fafd1b3fc7ebbf1fb5c949a3948fccde1c"
+    },
+    "authorizationSalt": "0xea85b2473363fd8fff1ccdd7f8638be8b47c7c05023e3e2e3f81bebb085ba2ad",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    "candidates": [
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x1120412c78ea1b2e8bf9eacfc3264c71a23ecd9b1fa579eb16030693344d5dfe"
+      }
+    ]
+  },
+  "context": {
+    "note": "Real payment on Base Sepolia to https://api.tokenizen.nl/api/paid/verify-ownership. Buyer and seller are the same party, which proves the chain closes end to end and nothing about adoption.",
+    "settlement_transaction": "0xed87b09bfb20a8c8b69908e163fcea6432d193d389640c0465afcb5561dfeb30"
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED"
+  }
+}

package/vectors/settlement-link-kanon/two-identical-payments.json

@@ -0,0 +1,76 @@
+{
+  "id": "x402-evm-settlement-link-two-identical-payments",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "Disambiguation of two otherwise indistinguishable payments.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "Two payments with identical terms (same payer, same asset, same amount, same resource) each open on their own settlement and on no other. Given both candidate sets together, each receipt selects exactly one.",
+  "input": {
+    "receipts": [
+      {
+        "receipt": {
+          "format": "eip712",
+          "payload": {
+            "version": 2,
+            "network": "eip155:84532",
+            "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+            "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+            "issuedAt": 1792187030,
+            "transaction": "",
+            "authorizationMethod": "eip3009",
+            "authorizationCommitment": "0x5c35a61a09a566a9c284fad18a70ac2ddfff34d01d2a3ce776ce94e8d5b38ff8"
+          },
+          "signature": "0x78615cb22986af0aad6e08b74ca78773bb58ece21660e84e4b35b3e5c1841b0075238ca9bfdf0f969ad3f2903af8f391fafd1b3fc7ebbf1fb5c949a3948fccde1c"
+        },
+        "authorizationSalt": "0xea85b2473363fd8fff1ccdd7f8638be8b47c7c05023e3e2e3f81bebb085ba2ad",
+        "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+      },
+      {
+        "receipt": {
+          "format": "eip712",
+          "payload": {
+            "version": 2,
+            "network": "eip155:84532",
+            "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+            "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+            "issuedAt": 1792187518,
+            "transaction": "",
+            "authorizationMethod": "eip3009",
+            "authorizationCommitment": "0xfecee93e1aec7d6858a218bf324f23e2a4eed07925d8d4542b9662c5026e3d22"
+          },
+          "signature": "0x02f5ba0d2b7928a2dbb1d8845b664a79d38eebcd0a2c4532ed3c6b922051bf8d47c8aafb0520a875a708e3ed480d84a537962ea90d66ce2ee3811f4229aa8b401b"
+        },
+        "authorizationSalt": "0x63072ea656fe922bf04c9cefc4275314d695fff01e5b57f6628c8df0252cc5dc",
+        "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+      }
+    ],
+    "candidates": [
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x1120412c78ea1b2e8bf9eacfc3264c71a23ecd9b1fa579eb16030693344d5dfe"
+      },
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x515895dfac6f148a4cfdf5c4f8266b7859dbd6534cdf77104b1be9f484eb5005"
+      }
+    ]
+  },
+  "context": {
+    "note": "Both are real payments on Base Sepolia with the same terms. Without the salt these two could not be told apart by any later reader.",
+    "settlements": [
+      "0xed87b09bfb20a8c8b69908e163fcea6432d193d389640c0465afcb5561dfeb30",
+      "0x2898d0ceb97ddf60af98e19c94fc0adddbdf1e64f9032e62454085e37acfe36b"
+    ]
+  },
+  "expected": {
+    "valid": true,
+    "reason_code": "LINKED"
+  }
+}

package/vectors/settlement-link-kanon/wrong-nonce-live-2.json

@@ -0,0 +1,46 @@
+{
+  "id": "x402-evm-settlement-link-wrong-nonce-live-2",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "A candidate that is not this payment must not satisfy the commitment.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "The correct receipt and salt, but a candidate nonce that belongs to a different settlement by the same payer. The commitment must not open on it.",
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792187518,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0xfecee93e1aec7d6858a218bf324f23e2a4eed07925d8d4542b9662c5026e3d22"
+      },
+      "signature": "0x02f5ba0d2b7928a2dbb1d8845b664a79d38eebcd0a2c4532ed3c6b922051bf8d47c8aafb0520a875a708e3ed480d84a537962ea90d66ce2ee3811f4229aa8b401b"
+    },
+    "authorizationSalt": "0x63072ea656fe922bf04c9cefc4275314d695fff01e5b57f6628c8df0252cc5dc",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    "candidates": [
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x1120412c78ea1b2e8bf9eacfc3264c71a23ecd9b1fa579eb16030693344d5dfe"
+      }
+    ]
+  },
+  "context": {
+    "note": "Both nonces were really consumed by this payer; only one belongs to this receipt."
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "NOT_LINKED"
+  }
+}

package/vectors/settlement-link-kanon/wrong-nonce-live-3.json

@@ -0,0 +1,46 @@
+{
+  "id": "x402-evm-settlement-link-wrong-nonce-live-3",
+  "schema_version": "3.0.0",
+  "protocol": "x402",
+  "scheme": "exact",
+  "network": "eip155:84532",
+  "asset_transfer_method": "eip3009",
+  "verifies": "receipt-to-settlement",
+  "encodes": "A candidate that is not this payment must not satisfy the commitment.",
+  "provenance": [
+    "x402 offer-receipt extension section 5.6.4, as proposed in pull request 3827 at commit 0e492d6 and not on main",
+    "EIP-3009"
+  ],
+  "description": "The correct receipt and salt, but a candidate nonce that belongs to a different settlement by the same payer. The commitment must not open on it.",
+  "input": {
+    "receipt": {
+      "format": "eip712",
+      "payload": {
+        "version": 2,
+        "network": "eip155:84532",
+        "resourceUrl": "https://api.tokenizen.nl/api/paid/verify-ownership",
+        "payer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "issuedAt": 1792188211,
+        "transaction": "",
+        "authorizationMethod": "eip3009",
+        "authorizationCommitment": "0xea8dd34b8beac90f021a4e8d893a689c25249f86947770c8e6647c1cde206008"
+      },
+      "signature": "0x5b3a70cce6978ab44e51828b5ebbc55522e98b015045d94559d369420698da3b5309b28050dcb00ce14d65c8b230a273f8ff5ebff6410c6ae2a308e422ed5a611b"
+    },
+    "authorizationSalt": "0x349ddb90f38a3119817c5fc9cc253a2c20bcbe44aa845302df76889082b314d8",
+    "asset": "0x036CbD53842c5426634e7929541eC2318f3dCF7e",
+    "candidates": [
+      {
+        "authorizer": "0x87f344b6Ec48A936373d774D3De8649DEEB66Ee1",
+        "nonce": "0x1120412c78ea1b2e8bf9eacfc3264c71a23ecd9b1fa579eb16030693344d5dfe"
+      }
+    ]
+  },
+  "context": {
+    "note": "Both nonces were really consumed by this payer; only one belongs to this receipt."
+  },
+  "expected": {
+    "valid": false,
+    "reason_code": "NOT_LINKED"
+  }
+}