Agent402 Dev Url Evidence 402 Challenge

{"x402Version":2,"error":"Payment required","resource":{"url":"https://agent402.dev/url-evidence?url=https://example.com/","description":"Verified URL Evidence Snapshot: bounded credential-free public HTTPS observation pinned to public IPv4, with HTTP headers, authenticated TLS, seven checks, and optional SHA-256 content fingerprint. Defaults: url=https://example.com/ and content_fingerprint=true. Request-target limits: 2300 raw UTF-8 bytes; 2302 bytes as a JSON string.","mimeType":"application/json"},"accepts":[{"scheme":"exact","network":"eip155:8453","amount":"1000000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0xb0BbF890375B2ea1C2812887aE0331DD82eee92c","maxTimeoutSeconds":300,"extra":{"name":"USD Coin","version":"2"}}],"extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"url":"https://example.com/","content_fingerprint":true}},"output":{"type":"json","example":{"product":"Verified URL Evidence Snapshot","version":"1.1.0","observedAt":"2026-07-14T12:00:00.000Z","target":{"url":"https://example.com/","method":"GET"},"http":{"status":200,"durationMs":120,"headers":{"content-type":"text/html","strict-transport-security":"max-age=31536000","content-security-policy":"default-src 'self'; frame-ancestors 'none'","x-content-type-options":"nosniff","x-frame-options":"DENY"}},"tls":{"authorized":true,"protocol":"TLSv1.3","cipher":"TLS_AES_256_GCM_SHA384"},"contentEvidence":{"algorithm":"sha256","limitBytes":131072,"sampleBytes":1256,"sampleSha256":"0000000000000000000000000000000000000000000000000000000000000000","complete":true,"representationEncoding":null},"summary":{"passes":8,"warnings":0,"failures":0},"checks":[{"id":"public-https","status":"pass","message":"Target resolved only to public addresses and completed authenticated HTTPS over a pinned public IPv4 address."},{"id":"http-response","status":"pass","message":"GET returned HTTP 200."},{"id":"direct-url","status":"pass","message":"Target responded without a redirect."},{"id":"content-fingerprint","status":"pass","message":"Hashed the complete 1256-byte response representation."},{"id":"hsts","status":"pass","message":"HSTS is present."},{"id":"content-security-policy","status":"pass","message":"Content-Security-Policy is present."},{"id":"nosniff","status":"pass","message":"X-Content-Type-Options is nosniff."},{"id":"frame-policy","status":"pass","message":"A frame embedding policy is present."}],"scope":"Single credential-free HTTPS GET pinned to a public IPv4 address. No redirects followed. At most the first 128 KiB is streamed into SHA-256; response content is never retained or returned.","evidenceId":"7f17297f1a013cad427dc969","reportSha256":"e205e59ac971846798338b5cfe98e68b60d014bfdc3c7e961ad7fdae9f5d2a52"}}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","type":"object","properties":{"input":{"type":"object","properties":{"type":{"type":"string","const":"http"},"method":{"type":"string","enum":["GET"]},"queryParams":{"type":"object","properties":{"url":{"type":"string","pattern":"^https://","maxLength":2048,"default":"https://example.com/","description":"Credential-free public HTTPS URL with a public IPv4 DNS answer. Complete encoded request-target limits: 2300 raw UTF-8 bytes; 2302 bytes as a JSON string."},"content_fingerprint":{"type":"boolean","default":true,"description":"Hash at most the first 128 KiB without retaining or returning response content."}},"required":[],"additionalProperties":false,"x-request-target-max-bytes":2300,"x-request-target-max-json-bytes":2302}},"required":["type","method"],"additionalProperties":false},"output":{"type":"object","properties":{"type":{"type":"string"},"example":{"type":"object"}},"required":["type"]}},"required":["input"]}}}}