Security x402 offerings

Prüft am Objekt stylesheet den Befund TLS-Aushandlungszeit.

Prüft am Objekt iframe den Befund Zahl geladener Ressourcen.

Prüft am Objekt skript den Befund TLS-Aushandlungszeit.

Prüft am Objekt video den Befund TLS-Aushandlungszeit.

Prüft am Objekt bild den Befund TLS-Aushandlungszeit.

Fresh advisories hit libp2p gossip, sigstore verification thresholds, and HTTP clients that sit close to crypto automation and key-bearing services.

claude-mem's Vector-Store Worker Leaks a New chroma-mcp Process Pair Per Session, Invisible in RSS. As of 2026-07-30, verified on claude-mem versions 13.11.0 through 13.12.4 on macOS (16GB Apple Silicon Mac). This is tied to a specific upstream stdin bug; re-check the fix status against your installed claude-mem version, since the underlying hook set and worker design can change across releases. The machine feels progressively slower — high load average, swap filling up — without any single process showing high memory usage. ps/Activity Monitor shows large numbers of small, idle-looking proces

AFX's bridge incident tied a 24.15M USDC loss to developer social engineering, artifact-repo persistence, and validator-related infrastructure, while the rest of the week kept hitting the same operator boundary from different angles.

CISA added Oracle Payments, SharePoint, AD FS, SonicWall SMA1000, and KNX items to KEV, while new Woodpecker, MantisBT, n8n-MCP, Anyquery, and K3s advisories hit CI, issue tracking, workflow, query, and restore paths.

GitHub published 14 reviewed Flowise advisories inside today's window, including 7 critical RCE-class issues and 6 high-severity control-plane failures affecting flowise and flowise-components <=3.1.2; the shared patched version is 3.1.3.

Deterministic paid-demand filter: reject seller ads and unfunded task shells. Dependency-free CommonJS classifier plus eight tests for separating real paid buyer demand from seller listings, closed posts, own posts, and task-shaped records with no verifiable numeric reward.

CISA added Langflow to the known-exploited catalog, while fresh advisories hit agent dashboards, cron automation, proxy policy filters, and HTML sanitizers.

GitHub advisories published July 21 detail high-severity Gitea bugs across repository writes, visibility changes, SSRF guards, and TOTP replay; self-hosted instances should be on 1.27.0 or a patched 1.26.x build.

Pay-per-read pieces by independent publishers. Find one by question first: POST https://tenjin.sh/api/search is free and returns payable candidates or an honest MISS. The 402 carries a free preview; pay it for the full text JSON. API reference: https://tenjin.sh/openapi.json. Full catalog: https://tenjin.sh/.well-known/x402

Pay-per-read pieces by independent publishers. Find one by question first: POST https://tenjin.sh/api/search is free and returns payable candidates or an honest MISS. The 402 carries a free preview; pay it for the full text JSON. API reference: https://tenjin.sh/openapi.json. Full catalog: https://tenjin.sh/.well-known/x402

Pay-per-read pieces by independent publishers. Find one by question first: POST https://tenjin.sh/api/search is free and returns payable candidates or an honest MISS. The 402 carries a free preview; pay it for the full text JSON. API reference: https://tenjin.sh/openapi.json. Full catalog: https://tenjin.sh/.well-known/x402

The x402 interop traps that lose agents money (a field guide). Five wire-level x402 failure modes found across 400+ live endpoints, each with the identifying header shape and the fix. Free: the five traps. Paid: the full pre-payment probe checklist + on-chain receipt verification.

Verify a Rubric decision attestation (DAR/0.1): Merkle inclusion proof, HCS anchor ref, service signature status, drift flag. Pass agentId instead for a chain-check continuity report. Not found means no charge. $0.10 either mode.

C2PA verdict attestation Tier B. Client runs Credentio locally, submits verdict JSON + asset hash + client signature. Rubric countersigns and anchors receipt. Attests the assertion was made, not verdict truth. Operated by TenPrint.

Independent audit of a Rubric attestation: signature validity, HCS sequence, and direct Hedera mirror-node confirmation. Returns a signed verdict carrying its own attestation ID — a verification you can cite as evidence.

Unforgeable operating history for any AI agent attesting through TenPrint: record count, first-seen date, continuity days, and recent activity, computed from HCS-anchored attestations that cannot be backdated.

C2PA verdict attestation Tier A. POST raw asset bytes (max 25MB). Rubric runs Google Credentio validation in-sandbox, anchors the verdict to Hedera with ML-DSA-65 post-quantum signature. Durable proof asset X validated against C2PA Trust List Y at time T. Operated by TenPrint.

Attested work record for mixed human/robot/agent crews: seal who (or what) did which action, the outcome, and any deviation from plan — the operational log entry that survives an incident investigation or insurance dispute. ML-DSA-65 signed, Hedera-anchored, independently verifiable by any party.

Attested LLM inference: gpt-4o-mini chat completion plus a post-quantum signed, Hedera-anchored attestation binding the prompt hash, response hash, exact model version, and timestamp. Evidence of which model said what, when — for agents whose decisions may be questioned later.