Security x402 offerings

Check a revision handoff before reusing evidence. Compare one initial or superseding transition with its declared predecessor; return lineage inconsistencies and an integrity receipt. Does not establish authenticity, semantic equivalence or inherited review approval. New modular adapter: retained result recovery for 24 hours, minimal receipt metadata for 90 days. Existing live route unchanged.

Single node — properties + risk grade only (no neighborhood)

Country risk profile, political risk rating, security and travel-safety intelligence for any country. Covers political, economic, security, health, and legal risk dimensions using governance, conflict, and earthquake data.

Verifiable RNG — cryptographically-random integer(s) signed by the treasury key. Drop-in VRF for game studios. $0.001 USDC.

Use it before you send to an address, or to screen sign-ups and leads for typos, disposable domains and role addresses. Checks syntax, MX records (with the A-record fallback), null MX, a list of about 120,000 disposable domains, role addresses (info@, support@…) and free providers, without sending anything. No SMTP probing, so it can't confirm the mailbox exists. Never charged for errors: we settle the payment only after a successful answer.

Use it when an agent says it is on Rooms by Aurmada, before you work with it, pay it or share data. Look it up by @handle or agent id: its public profile, owner claims (claimed by a signed-in person, X or GitHub verification) with how each was proven, and an Ed25519-signed receipt you can check against /x402/v1/receipt-key. Never charged for errors: we settle the payment only after a successful answer.

Use it before paying an unfamiliar x402 endpoint or when choosing between paid APIs. We send one unpaid request and report whether it returns a valid 402, the price, asset, network and payTo, response time, whether that matches its public Bazaar listing, and our probe history, with a 0-100 score and each factor spelled out. Measured by our probes; not a guarantee. Never charged for errors: we settle the payment only after a successful answer.

ERC-8004 validation attestation: RSoft Bank acts as Validator for an AI agent and vouches for a caller-supplied claim (claim_hash + claim_type). It first runs the agent through KYA and refuses if that fails; on success it signs a JWT attestation and, when the Validation Registry is configured, anchors the attestation hash on Base and returns the transaction hash. Use it when an agent needs a bank-backed, verifiable attestation on its identity, e.g. to satisfy a counterparty's trust policy.

Know-Your-Agent (KYA) verification of an AI agent wallet by RSoft Bank: resolves its ERC-8004 identity, checks wallet ownership and reputation history (including defaults) and issues a signed JWT KYA token the bank can verify for any counterparty. Call it to prove an agent is a registered borrower in good standing to marketplaces, payment gates or other agents, or to verify an agent before doing business with it. Optional amount scopes the check to an intended loan size.

Independent audit of a Rubric attestation: signature validity, HCS sequence, and direct Hedera mirror-node confirmation. Returns a signed verdict carrying its own attestation ID — a verification you …

Attested work record for mixed human/robot/agent crews: seal who (or what) did which action, the outcome, and any deviation from plan — the operational log entry that survives an incident investigati…

Tamper-evident audit log record for an AI agent decision: signed compliance evidence anchored to public consensus for independent verification. Post-quantum ML-DSA-65 (FIPS 204) signature, Hedera mainnet HCS anchor, free public verification — for agent action provenance, audit trails, and AI governance evidence.

Attested LLM inference: gpt-4o-mini chat completion plus a post-quantum signed, Hedera-anchored attestation binding the prompt hash, response hash, exact model version, and timestamp. Evidence of whi…

One post-quantum-signed AI decision attestation, anchored to Hedera mainnet HCS.

Attested verification-event custody: seal the fact that an identity/liveness/KYC check ran, its method, provider, and result — without the subject's identity ever reaching Rubric. Caller submits an o…

Verify a Rubric decision attestation (DAR/0.1): Merkle inclusion proof, HCS anchor ref, service signature status, drift flag. Pass agentId instead for a chain-check continuity report. Not found means…

Audits canonical Base bridge and CCIP/LayerZero endpoints for message replay vulnerabilities, unbacked wrapped collateral, and admin multisig latency.

Generates an end-to-end cryptographic audit report covering bytecode decompilation, honeypot tax simulation, LP lock proofs, holder clusters, and bridge risk.

🆕 Multisig / treasury intelligence. Given an address: is it a Gnosis Safe, its owners and M-of-N threshold, version, activity, and — critically — its enabled MODULES. A module can move the Safe's funds via execTransactionFromModule with no owner signatures, so each one is an address with unilateral control. Returns a multisig / single_signer / has_modules verdict: the counterparty check before you trust funds to a multisig. address= required. Not financial advice.

Vehicle safety and recall check for a car, by make/model/year or by VIN. Fuses NHTSA open recalls, a complaint summary (crash, fire, injuries, deaths) and the 5-star NCAP safety rating into one cited JSON with a deterministic risk score. Risk indicators, not advice.

x402 and MPP seller integrity audit for one exact paid GET or POST route after a buyer integration fails, a seller changes the route, or before the next paid retry or release. Returns machine_buyable, contract_ready, or repair_required with exact repair actions. Checks constructible non-secret input, live unpaid GET terms, optional Bazaar metadata, and buyer-required success paths. Uses no credential or target payment, follows no redirect, and sends no target POST.

Performs fast, on-demand scans of URLs, domains, and files, returning structured vulnerability and metadata results.

Run a fast, lightweight audit of a single public web page: performance signals (fetch timing, page weight), SEO signals, basic HTML accessibility signals, and security-header checks. Returns 0-100 category scores, detailed pass/fail checks, detected issues, and plain-English remediation guidance.

Paid verification layer for autonomous AI agents. Verify claims before decisions using web evidence and source-backed analysis