agent-receipt-verify 0.2.6 → 0.2.8

package/vectors/attempt-identity/key-order-changes-identity.json

@@ -0,0 +1,63 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-key-order-changes-identity",
+  "clause": "own-identity-from-decoded-fields",
+  "encodes": "The first of the two inverse traps: an identity that moves when the key order moves, so it came from the bytes.",
+  "description": "Two arrivals of the same attempt, same decoded fields, different key order and whitespace, and two different identities. The clause says an attempt is the same attempt either way, and that this is exactly what makes settle and refusal agree. An implementation that hashes the raw body fails here.",
+  "input": {
+    "wire_variants": [
+      {
+        "note": "as received first",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "same fields, keys in another order",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "8a48e6c49a7a94be4d657408c486532e0a141d5e1548e7fabf539afd5809f982"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "IDENTITY_DERIVED_FROM_WIRE_BYTES"
+  },
+  "limits": [
+    "The two variants are asserted to carry the same decoded fields; a checker verifies that before judging, and reports not-measured when they differ."
+  ]
+}

package/vectors/attempt-identity/key-order-stable-identity.json

@@ -0,0 +1,62 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-key-order-stable-identity",
+  "clause": "own-identity-from-decoded-fields",
+  "encodes": "The positive control for the same trap.",
+  "description": "Same decoded fields, different wire form, one identity. This is the behaviour the clause requires.",
+  "input": {
+    "wire_variants": [
+      {
+        "note": "as received first",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "same fields, keys in another order",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "This says the identity is stable across wire forms. It does not say the right fields went into it."
+  ]
+}

package/vectors/attempt-identity/nothing-recorded-not-measured.json

@@ -0,0 +1,21 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-nothing-recorded-not-measured",
+  "clause": "all",
+  "encodes": "The fourth outcome: a vector that carries no observations is not conformant and not failing, it is unmeasured.",
+  "description": "An empty observation set must not pass and must not fail. Reporting PASS here would let an implementation claim conformance by showing nothing, and reporting FAIL would blame an implementation for a record that was never collected. This is the distinction the thread settled on for all four evidence layers.",
+  "input": {},
+  "expected": {
+    "outcome": "NOT_MEASURED"
+  },
+  "limits": [
+    "This is a property of the checker, not of any implementation."
+  ]
+}

package/vectors/attempt-identity/outcome-folded-into-identity.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-outcome-folded-into-identity",
+  "clause": "outcome-not-folded-into-identity",
+  "encodes": "Metering data from the outcome layer absorbed into the identity, so a partial delivery becomes a different attempt.",
+  "description": "The same attempt delivered in full and in part resolves two identities, because the delivered measurement was folded into the derivation. The clause wants the gap between full and partial delivery to stay visible in the outcome layer; absorbing it into identity makes an incomplete delivery look like an unrelated attempt, which is how a shortfall stops being arguable.",
+  "input": {
+    "outcome_variants": [
+      {
+        "note": "full delivery",
+        "delivered": 100,
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "partial delivery",
+        "delivered": 40,
+        "identity": "b1b9009e0c9e7d66fc4e47a66303e8ccdddce8cc3462bc9de007abf524855bcb"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "OUTCOME_FOLDED_INTO_IDENTITY"
+  },
+  "limits": [
+    "This shows identity moving with the outcome. It does not say which of the two identities is the right one."
+  ]
+}

package/vectors/attempt-identity/outcome-kept-out-of-identity.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-outcome-kept-out-of-identity",
+  "clause": "outcome-not-folded-into-identity",
+  "encodes": "The positive control: delivery differs, identity does not.",
+  "description": "Full and partial delivery of one attempt resolve one identity, so the shortfall stays a question about the outcome and not about which attempt this was.",
+  "input": {
+    "outcome_variants": [
+      {
+        "note": "full delivery",
+        "delivered": 100,
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "partial delivery",
+        "delivered": 40,
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "Identity being stable does not mean the delivery was acceptable; that is the work-acceptance layer."
+  ]
+}

package/vectors/attempt-identity/paths-disagree.json

@@ -0,0 +1,81 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-paths-disagree",
+  "clause": "all-paths-same-artifact",
+  "encodes": "Two paths of one unchanged request resolving different identities, which the clause forbids outright.",
+  "description": "The request is byte-for-byte the same on both paths, and the refusal path resolves a different identity than the challenge quote. A holder of two records about this attempt can no longer tell they are about the same attempt, which is the whole failure the clause exists to prevent.",
+  "input": {
+    "ingress": {
+      "snapshot": {
+        "method": "POST",
+        "path": "/api/paid/verify-ownership",
+        "query": "",
+        "body": {
+          "endpoint": "https://example.com/api/health",
+          "ownerAddress": "0x1111111111111111111111111111111111111111",
+          "method": "dns-txt"
+        },
+        "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+        "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+        "network": "eip155:8453",
+        "amount": "1000",
+        "scheme": "exact"
+      },
+      "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+    },
+    "paths": [
+      {
+        "path": "challenge-quote",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "path": "refusal",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "baaf0cfdbd04db77cacfea2dede2cf0c2bc2967a9f5c0fc52d7169d70eb7fa79"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "PATHS_DISAGREE_ON_IDENTITY"
+  },
+  "limits": [
+    "This does not say which of the two paths is wrong, only that they cannot both be right."
+  ]
+}

package/vectors/attempt-identity/reference-canonicalized-first.json

@@ -0,0 +1,28 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-reference-canonicalized-first",
+  "clause": "reference-over-transmitted-bytes",
+  "encodes": "The second inverse trap: a reference to a signed artifact taken over a canonicalized form instead of the transmitted bytes.",
+  "description": "The attempt references a separately signed offer. The reference hash matches a key-sorted rewrite of that offer rather than the bytes that were signed, so the reference names an object nobody signed. This is the exact mirror of the key-order case: there, canonicalizing is required; here, it destroys the thing. An implementation that applies one rule to both will fail one of these two vectors, and which one it fails says which half it misread.",
+  "input": {
+    "signed_artifact_reference": {
+      "transmitted": "{\"version\":1,\"amount\":\"1000\",\"payTo\":\"0x2888F36548a900B9b08d584524e1f73BC563eC26\"}",
+      "reference_hash": "96ea208143f35d56469ee10bc81467bdcfccc19eecea0e9754f861f2de68fe27",
+      "note": "the hash of a key-sorted rewrite, not of what was signed"
+    }
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "REFERENCE_CANONICALIZED_BEFORE_HASHING"
+  },
+  "limits": [
+    "The checker recomputes both candidate hashes itself rather than trusting the note, so a mislabelled vector cannot pass."
+  ]
+}

package/vectors/attempt-identity/reference-over-transmitted.json

@@ -0,0 +1,26 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-reference-over-transmitted",
+  "clause": "reference-over-transmitted-bytes",
+  "encodes": "The positive control for the second trap.",
+  "description": "The reference hash is the digest of the artifact exactly as transmitted, which is what the signature covers.",
+  "input": {
+    "signed_artifact_reference": {
+      "transmitted": "{\"version\":1,\"amount\":\"1000\",\"payTo\":\"0x2888F36548a900B9b08d584524e1f73BC563eC26\"}",
+      "reference_hash": "a0c86bd7167da34f3f06ae274b8284ab1daea5802f10bf1df11e9b54b24182c5"
+    }
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "This says the reference names the signed bytes. It does not check that the signature over them is valid."
+  ]
+}

package/vectors/attempt-identity/settle-rederives-downstream.json

@@ -0,0 +1,103 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-settle-rederives-downstream",
+  "clause": "derive-once-at-ingress",
+  "encodes": "The core negative case: identity recomputed downstream from content the facilitator did not capture at ingress.",
+  "description": "Three paths take the identity from the ingress snapshot and /settle recomputes it from the request body as it reads it at settle time. The value happens to come out the same here, which is what makes this case worth having: an implementation that only compares values will report conformance, because the defect is in WHERE the value came from, not in what it was this time.",
+  "input": {
+    "ingress": {
+      "snapshot": {
+        "method": "POST",
+        "path": "/api/paid/verify-ownership",
+        "query": "",
+        "body": {
+          "endpoint": "https://example.com/api/health",
+          "ownerAddress": "0x1111111111111111111111111111111111111111",
+          "method": "dns-txt"
+        },
+        "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+        "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+        "network": "eip155:8453",
+        "amount": "1000",
+        "scheme": "exact"
+      },
+      "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+    },
+    "paths": [
+      {
+        "path": "challenge-quote",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "ingress-snapshot"
+      },
+      {
+        "path": "settle",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "request-body-at-settle-time"
+      },
+      {
+        "path": "refusal",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "ingress-snapshot"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "IDENTITY_REDERIVED_DOWNSTREAM"
+  },
+  "limits": [
+    "A recorded observation cannot prove where a value came from; this vector tests that a checker reads the declared origin instead of only comparing values."
+  ]
+}

package/vectors/attempt-identity/settled-despite-mismatch.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-settled-despite-mismatch",
+  "clause": "countersignature-recompute-or-refuse",
+  "encodes": "The money half of the same clause: a mismatch that did not stop settlement.",
+  "description": "The counterparty correctly refused to sign, and the interaction settled anyway. The clause says that on a mismatch the interaction MUST NOT settle, so refusing to sign while still taking the money satisfies the letter of one sentence and breaks the one that matters.",
+  "input": {
+    "countersignature": {
+      "ingress_value": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+      "recomputed": "b1b9009e0c9e7d66fc4e47a66303e8ccdddce8cc3462bc9de007abf524855bcb",
+      "signed": false,
+      "settled": true
+    }
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "SETTLED_DESPITE_MISMATCH"
+  },
+  "limits": [
+    "Whether money actually moved is a chain question and is not read here."
+  ]
+}