agent-receipt-verify 0.2.7 → 0.2.8

package/vectors/attempt-identity/changed-amount-silent-collapse.json

@@ -0,0 +1,81 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-changed-amount-silent-collapse",
+  "clause": "changed-request-different-artifact",
+  "encodes": "A changed amount kept under the same identity, so a price change disappears into a replay.",
+  "description": "The settle path carries an amount of 2000 where ingress saw 1000, and resolves the identity of the original request. The clause requires a different artifact. This is the case where a buyer is charged twice the quoted price and the record set still reads as one ordinary attempt.",
+  "input": {
+    "ingress": {
+      "snapshot": {
+        "method": "POST",
+        "path": "/api/paid/verify-ownership",
+        "query": "",
+        "body": {
+          "endpoint": "https://example.com/api/health",
+          "ownerAddress": "0x1111111111111111111111111111111111111111",
+          "method": "dns-txt"
+        },
+        "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+        "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+        "network": "eip155:8453",
+        "amount": "1000",
+        "scheme": "exact"
+      },
+      "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+    },
+    "paths": [
+      {
+        "path": "challenge-quote",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "path": "settle",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "2000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "CHANGED_REQUEST_SAME_IDENTITY"
+  },
+  "limits": [
+    "The vector shows the collapse. Whether the buyer was actually overcharged depends on the ledger and is not measured here."
+  ]
+}

package/vectors/attempt-identity/client-supplied-key-unverified.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-client-supplied-key-unverified",
+  "clause": "name-independent-but-bound",
+  "encodes": "An Idempotency-Key the client chooses and the facilitator never checks against the ingress snapshot.",
+  "description": "The clause allows any field name, on the condition that the field is bound to the ingress snapshot. Here the client supplies the value and nothing verifies it, so two different requests can claim one identity and a buyer can make his second request look like a replay of his first.",
+  "input": {
+    "identity_field": {
+      "name": "Idempotency-Key",
+      "bound_to": "ingress-snapshot",
+      "client_supplied": true,
+      "verified_against_snapshot": false
+    }
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "CLIENT_SUPPLIED_IDENTITY_NOT_VERIFIED"
+  },
+  "limits": [
+    "This is about the binding, not about whether the key is otherwise well formed."
+  ]
+}

package/vectors/attempt-identity/countersignature-matches.json

@@ -0,0 +1,28 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-countersignature-matches",
+  "clause": "countersignature-recompute-or-refuse",
+  "encodes": "The positive control for the countersignature clause: recomputed, equal, signed, settled.",
+  "description": "The counterparty recomputed the fingerprint from the bytes it observed, arrived at the ingress value, signed, and the interaction settled. Both negatives of this clause are refusals, so without this vector the clause would only ever be able to say no.",
+  "input": {
+    "countersignature": {
+      "ingress_value": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+      "recomputed": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+      "signed": true,
+      "settled": true
+    }
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "This says the recomputed value matched. It does not verify the signature itself; that is the issuing party own verifier."
+  ]
+}

package/vectors/attempt-identity/countersigned-despite-mismatch.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-countersigned-despite-mismatch",
+  "clause": "countersignature-recompute-or-refuse",
+  "encodes": "A counterparty that recomputed, saw a different value, and signed anyway.",
+  "description": "The clause makes recomputation a verification obligation with a refusal attached. Here the recomputed fingerprint differs from the ingress value and the signature was produced regardless, which turns the countersignature into a second opinion about nothing.",
+  "input": {
+    "countersignature": {
+      "ingress_value": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+      "recomputed": "b1b9009e0c9e7d66fc4e47a66303e8ccdddce8cc3462bc9de007abf524855bcb",
+      "signed": true,
+      "settled": false
+    }
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "COUNTERSIGNED_DESPITE_MISMATCH"
+  },
+  "limits": [
+    "This cannot show whether the counterparty recomputed honestly, only that it reported a mismatch and signed."
+  ]
+}

package/vectors/attempt-identity/derive-once-honoured.json

@@ -0,0 +1,122 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-derive-once-honoured",
+  "clause": "derive-once-at-ingress",
+  "encodes": "The positive control for the core clause: every path states it took the identity from the ingress snapshot.",
+  "description": "Four paths, and each one declares its identity came from the ingress snapshot rather than from a fresh read of the request. The negative twin of this vector has one path recomputing at settle time while arriving at the same value, which is why the declared origin is what gets checked and not only the value.",
+  "input": {
+    "ingress": {
+      "snapshot": {
+        "method": "POST",
+        "path": "/api/paid/verify-ownership",
+        "query": "",
+        "body": {
+          "endpoint": "https://example.com/api/health",
+          "ownerAddress": "0x1111111111111111111111111111111111111111",
+          "method": "dns-txt"
+        },
+        "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+        "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+        "network": "eip155:8453",
+        "amount": "1000",
+        "scheme": "exact"
+      },
+      "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+    },
+    "paths": [
+      {
+        "path": "challenge-quote",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "ingress-snapshot"
+      },
+      {
+        "path": "settle",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "ingress-snapshot"
+      },
+      {
+        "path": "refusal",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "ingress-snapshot"
+      },
+      {
+        "path": "replay-lookup",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196",
+        "derived_from": "ingress-snapshot"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "A declared origin is a claim by the implementation. This vector tests that a checker reads it; it cannot verify the claim from outside."
+  ]
+}

package/vectors/attempt-identity/idempotency-key-bound.json

@@ -0,0 +1,28 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-idempotency-key-bound",
+  "clause": "name-independent-but-bound",
+  "encodes": "The positive control for the name-independence clause: a different field name that satisfies the discipline.",
+  "description": "An implementation using Idempotency-Key, bound to the ingress snapshot and verified against it, satisfies the invariant. The requirement is the discipline, not the field name.",
+  "input": {
+    "identity_field": {
+      "name": "Idempotency-Key",
+      "bound_to": "ingress-snapshot",
+      "client_supplied": true,
+      "verified_against_snapshot": true
+    }
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "Satisfying this clause says nothing about the other seven."
+  ]
+}

package/vectors/attempt-identity/key-order-changes-identity.json

@@ -0,0 +1,63 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-key-order-changes-identity",
+  "clause": "own-identity-from-decoded-fields",
+  "encodes": "The first of the two inverse traps: an identity that moves when the key order moves, so it came from the bytes.",
+  "description": "Two arrivals of the same attempt, same decoded fields, different key order and whitespace, and two different identities. The clause says an attempt is the same attempt either way, and that this is exactly what makes settle and refusal agree. An implementation that hashes the raw body fails here.",
+  "input": {
+    "wire_variants": [
+      {
+        "note": "as received first",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "same fields, keys in another order",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "8a48e6c49a7a94be4d657408c486532e0a141d5e1548e7fabf539afd5809f982"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "IDENTITY_DERIVED_FROM_WIRE_BYTES"
+  },
+  "limits": [
+    "The two variants are asserted to carry the same decoded fields; a checker verifies that before judging, and reports not-measured when they differ."
+  ]
+}

package/vectors/attempt-identity/key-order-stable-identity.json

@@ -0,0 +1,62 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-key-order-stable-identity",
+  "clause": "own-identity-from-decoded-fields",
+  "encodes": "The positive control for the same trap.",
+  "description": "Same decoded fields, different wire form, one identity. This is the behaviour the clause requires.",
+  "input": {
+    "wire_variants": [
+      {
+        "note": "as received first",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "same fields, keys in another order",
+        "decoded": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "This says the identity is stable across wire forms. It does not say the right fields went into it."
+  ]
+}

package/vectors/attempt-identity/nothing-recorded-not-measured.json

@@ -0,0 +1,21 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-nothing-recorded-not-measured",
+  "clause": "all",
+  "encodes": "The fourth outcome: a vector that carries no observations is not conformant and not failing, it is unmeasured.",
+  "description": "An empty observation set must not pass and must not fail. Reporting PASS here would let an implementation claim conformance by showing nothing, and reporting FAIL would blame an implementation for a record that was never collected. This is the distinction the thread settled on for all four evidence layers.",
+  "input": {},
+  "expected": {
+    "outcome": "NOT_MEASURED"
+  },
+  "limits": [
+    "This is a property of the checker, not of any implementation."
+  ]
+}

package/vectors/attempt-identity/outcome-folded-into-identity.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-outcome-folded-into-identity",
+  "clause": "outcome-not-folded-into-identity",
+  "encodes": "Metering data from the outcome layer absorbed into the identity, so a partial delivery becomes a different attempt.",
+  "description": "The same attempt delivered in full and in part resolves two identities, because the delivered measurement was folded into the derivation. The clause wants the gap between full and partial delivery to stay visible in the outcome layer; absorbing it into identity makes an incomplete delivery look like an unrelated attempt, which is how a shortfall stops being arguable.",
+  "input": {
+    "outcome_variants": [
+      {
+        "note": "full delivery",
+        "delivered": 100,
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "partial delivery",
+        "delivered": 40,
+        "identity": "b1b9009e0c9e7d66fc4e47a66303e8ccdddce8cc3462bc9de007abf524855bcb"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "OUTCOME_FOLDED_INTO_IDENTITY"
+  },
+  "limits": [
+    "This shows identity moving with the outcome. It does not say which of the two identities is the right one."
+  ]
+}

package/vectors/attempt-identity/outcome-kept-out-of-identity.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-outcome-kept-out-of-identity",
+  "clause": "outcome-not-folded-into-identity",
+  "encodes": "The positive control: delivery differs, identity does not.",
+  "description": "Full and partial delivery of one attempt resolve one identity, so the shortfall stays a question about the outcome and not about which attempt this was.",
+  "input": {
+    "outcome_variants": [
+      {
+        "note": "full delivery",
+        "delivered": 100,
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "note": "partial delivery",
+        "delivered": 40,
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "PASS"
+  },
+  "limits": [
+    "Identity being stable does not mean the delivery was acceptable; that is the work-acceptance layer."
+  ]
+}

package/vectors/attempt-identity/paths-disagree.json

@@ -0,0 +1,81 @@
+{
+  "schema_version": "3.0.0",
+  "verifies": "attempt-identity",
+  "requires_chain_read": false,
+  "provenance": [
+    "x402 specification v2 section 5.5, Settlement and Refusal Identity Invariant, as proposed in x402-foundation/x402 pull request 3776 on branch spec/settlement-refusal-identity-invariant and not on main",
+    "the gap these cover was named by ruiruii in erc-8004/erc-8004-contracts#99 on 18 October 2026: each of the four evidence layers depends on an attempt identity that none of them defines",
+    "section 5.5 closes by referring to \"the normative conformance tests in the specification repository for the required negative cases\"; at the time of writing those did not exist"
+  ],
+  "id": "attempt-identity-paths-disagree",
+  "clause": "all-paths-same-artifact",
+  "encodes": "Two paths of one unchanged request resolving different identities, which the clause forbids outright.",
+  "description": "The request is byte-for-byte the same on both paths, and the refusal path resolves a different identity than the challenge quote. A holder of two records about this attempt can no longer tell they are about the same attempt, which is the whole failure the clause exists to prevent.",
+  "input": {
+    "ingress": {
+      "snapshot": {
+        "method": "POST",
+        "path": "/api/paid/verify-ownership",
+        "query": "",
+        "body": {
+          "endpoint": "https://example.com/api/health",
+          "ownerAddress": "0x1111111111111111111111111111111111111111",
+          "method": "dns-txt"
+        },
+        "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+        "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+        "network": "eip155:8453",
+        "amount": "1000",
+        "scheme": "exact"
+      },
+      "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+    },
+    "paths": [
+      {
+        "path": "challenge-quote",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "2ed52a521f9762c3adc24c8048a4ee04a3796202a34c335585fc953e15c97196"
+      },
+      {
+        "path": "refusal",
+        "snapshot": {
+          "method": "POST",
+          "path": "/api/paid/verify-ownership",
+          "query": "",
+          "body": {
+            "endpoint": "https://example.com/api/health",
+            "ownerAddress": "0x1111111111111111111111111111111111111111",
+            "method": "dns-txt"
+          },
+          "payTo": "0x2888f36548a900b9b08d584524e1f73bc563ec26",
+          "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913",
+          "network": "eip155:8453",
+          "amount": "1000",
+          "scheme": "exact"
+        },
+        "identity": "baaf0cfdbd04db77cacfea2dede2cf0c2bc2967a9f5c0fc52d7169d70eb7fa79"
+      }
+    ]
+  },
+  "expected": {
+    "outcome": "FAIL",
+    "reason_code": "PATHS_DISAGREE_ON_IDENTITY"
+  },
+  "limits": [
+    "This does not say which of the two paths is wrong, only that they cannot both be right."
+  ]
+}