Security x402 offerings

Detect elevated control-bypass risk from fragmented, delegated, wallet-hopped, near-threshold, burst, repeated, or concentrated autonomous spend.

As agent payments scale, operators need to spot unusual payment graph patterns without making fraud accusations.

Buyer agents cannot quickly tell whether a public Agent Card has enough identity, skill, interface, security, signature, and documentation evidence before delegation.

Detect recursive agent-commerce loops, repeated purchases, delegation depth breaches, fan-out amplification, and bounded projected spend before an autonomous purchase proceeds.

Compares sanitized autonomous-task facts against wallet policy coverage.

Scores caller-supplied x402 facilitator facts for production readiness.

Public agent listings make capability and trust claims that are hard for buyer agents to connect to actual evidence.

Audits sanitized MCP elicitation prompts and consent facts for scope and record gaps.

Audits sanitized MCP paid-tool permission scope declarations.

Checks x402 offer metadata for replay-hygiene controls.

Issue or verify a canonical human mandate checksum and deterministic action constraints, including signature trust-policy checks.

Classifies commerce schema fields for buyer-data minimization risk.

Autonomous spend attempts need a black-box timeline that shows where the flow was safe, uncertain, failed, or completed.

Detect recursive agent-commerce loops, repeated purchases, delegation depth breaches, fan-out amplification, and bounded projected spend before an autonomous purchase proceeds.

Measure verified dependency concentration and observed-but-undeclared common-mode dependencies.

Issue or verify a canonical human mandate checksum and deterministic action constraints, including signature trust-policy checks.

Detect caller-supplied micropurchase fragmentation before an autonomous purchase proceeds.

Query or append signed evidence-backed agent limitation records with correction and dispute handling.

Classifies sanitized x402 failure facts into safe diagnostic causes without replaying payments or storing raw logs.

Fast deterministic security triage of one prompt, skill, or public URL.

Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual requirements - flags claims that don't hold up. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Verify a BlindOracle receipt against the parts a buyer cannot check alone: is the proof_id really in BlindOracle's append-only proof rail, does its payload still hash to the stored row, and does the row's HMAC-SHA256 verify against the signing key. Also recomputes content_... | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Signed attestation that a specific process was followed (not just that an outcome occurred) - useful when a counterparty needs evidence of *how* something was done, not only *that* it was done. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Signed, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `subject`): passport status, audit-report count (ProofOfAuditReport 30105), dispute record, settlement-proof attestations, and revocation flags - each field read fro... | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base