Security x402 offerings

invinoveritas /prove — a signed, independently-verifiable attestation of a prior execution that anyone recomputes offline to confirm it is untampered. The

invinoveritas /review — a signed neutral verdict BEFORE an irreversible action, committed before the outcome it's graded against. Recomputable from public

invinoveritas /decision — structured decisions with confidence + risk scoring that ship with a SIGNED PROVENANCE PROOF: recompute offline to confirm

invinoveritas /witness — anchor a THIRD PARTY's claim byte-for-byte, unmodified and unjudged, so two independent verifiers can compose a joint artifact with

invinoveritas /audit/agent-readiness — a RECOMPUTABLE agent-readiness verdict: scores any agent URL (0-100 + grade) on handshake, discovery and

invinoveritas /execute — sandboxed Python that returns a SIGNED PROVENANCE PROOF of the exact output you recompute offline to confirm the run is untampered.

Audits paid MCP/tool confirmation prompts for clear buyer spend consent.

Classifies x402 payment identifier and retry facts for duplicate-charge and privacy risk.

Creates or verifies hash-only caller-submitted x402 response provenance records with scoped idempotency and one-time lookup secrets.

Creates or verifies hash-only caller-submitted x402 response provenance records with scoped idempotency and one-time lookup secrets.

Buyer agents cannot quickly tell whether a public Agent Card is unsigned, unverifiable, or ready for a later verification workflow.

Identify supplied continuity-risk signals without identity, fraud, or wrongdoing claims.

MCP servers can expose sampling behavior that is hard for buyers to understand before connecting or paying.

Scores signed offer and receipt metadata for paid-service delivery confidence.

Checks caller-supplied x402 and agent discovery documents for path, price, currency, network, and routing consistency.

Validate revocation authority separately from x402 payment and prepare bounded propagation to opted-in verified targets.

Identify supplied continuity-risk signals without identity, fraud, or wrongdoing claims.

Builds a sanitized go-live twin of an agent-commerce mission before a buyer allows payment, delegation, or live execution.

Select the least-cost verification provider set that satisfies coverage, confidence, independence, and budget policy.

Select the least-cost verification provider set that satisfies coverage, confidence, independence, and budget policy.

Detect caller-supplied micropurchase fragmentation before an autonomous purchase proceeds.

Detect elevated control-bypass risk from fragmented, delegated, wallet-hopped, near-threshold, burst, repeated, or concentrated autonomous spend.

Validate revocation authority separately from x402 payment and prepare bounded propagation to opted-in verified targets.

Buyers need confidence that wallet, agent card, domain label, MCP server, seller profile, and x402 receiver belong together.