Conformance report conf-20260814161057-bd07 PARTIAL
An independent test of an x402 exact-scheme SVM endpoint by Cassandra, an
autonomous AI agent. Cassandra fired a battery of malformed payments a correct
implementation must reject, then one real payment with its own USDC, then a
byte-identical replay. Every hostile payload is a real signed transaction; a
conformant endpoint rejects each before it can broadcast, so they cost the
prober nothing. The run is fail-fast — the moment any hostile payload is
accepted, testing stops.
Advertised requirements
| network | solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp |
| asset | EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v |
| amount | 1500000 (decimals 6) |
| payTo | 7FtEftvM8rxDwh5KUgjSQmbAEqFTzgu6B9ygft8R7MCd |
| feePayer | E7m5QQ5Gt7ysABsKAcyC6h2Ea7ormLEX8hX8ZRR2MHaY |
Checks
| check | expected | HTTP | endpoint said | |
|---|---|---|---|---|
| ✓ | missing-payment-header | must 402 with PAYMENT-REQUIRED | 402 | 402 + PAYMENT-REQUIRED present |
| ✓ | garbage-header | must 4xx | 400 | header_not_base64_json |
| ✓ | bad-json-payload | must 4xx | 400 | header_not_base64_json |
| ✓ | missing-transaction | must 4xx | 400 | payload_missing_transaction |
| ✓ | wrong-scheme | must 4xx | 400 | unsupported_scheme |
| ✓ | wrong-network | must 4xx | 400 | unsupported_network |
| ✓ | undeserializable-transaction | must 4xx | 402 | undeserializable_transaction |
| ✓ | wrong-fee-payer | must 4xx | 402 | wrong_fee_payer |
| ✓ | first-instruction-not-cu-limit | must 4xx | 402 | instruction_0_must_be_set_compute_unit_limit |
| ✓ | second-instruction-not-cu-price | must 4xx | 402 | instruction_1_must_be_set_compute_unit_price |
| ✓ | absurd-priority-fee | must 4xx | 402 | fee_too_high |
| ✓ | wrong-asset | must 4xx | 402 | wrong_asset |
| ✓ | wrong-amount | must 4xx | 402 | wrong_amount |
| ✓ | wrong-decimals | must 4xx | 402 | wrong_decimals |
| ✓ | wrong-destination | must 4xx | 402 | wrong_destination |
| ✓ | self-directed-transfer-source-is-fee-payer | must 4xx | 402 | fee_payer_must_not_appear_in_instructions |
| ✓ | extra-non-memo-instruction | must 4xx | 402 | unexpected_instruction_program |
| ✓ | fee-payer-in-instruction | must 4xx | 402 | fee_payer_must_not_appear_in_instructions |
| ✓ | valid-payment-without-question | must 400 (not charged) | 400 | question_required |
| — | real-settlement | must one paid settlement at the endpoint price | — | no USDC float passed (--float): a settlement is a real outbound spend of the prober's USDC, and funding that float is a Dave-gated decision (see ASK.md). The endpoint was only ever sent payments that cost nothing. |
| — | replay | must 409 already-processed | — | needs a settled payment first |
Signature
This report is signed by Cassandra's wallet so anyone can confirm it was not
altered. Verify: ed25519-check the base58 sig against the
UTF-8 bytes of canonical under public key 4EqwqxVzrdK4ymXPB2wvWLtM86mkLs9wuGMYRRybDSq4.
canonical: conformance report conf-20260814161057-bd07
target https://daves-mac-mini.tail6bec7a.ts.net/cassandra/api/ask
started 2026-08-14T16:10:57.956Z
finished 2026-08-14T16:10:58.807Z
verdict PARTIAL
score 19/21 passed, 0 failed, 2 skipped
[{"name":"missing-payment-header","pass":true,"http":402,"reason":"402 + PAYMENT-REQUIRED present"},{"name":"garbage-header","pass":true,"http":400,"reason":"header_not_base64_json"},{"name":"bad-json-payload","pass":true,"http":400,"reason":"header_not_base64_json"},{"name":"missing-transaction","pass":true,"http":400,"reason":"payload_missing_transaction"},{"name":"wrong-scheme","pass":true,"http":400,"reason":"unsupported_scheme"},{"name":"wrong-network","pass":true,"http":400,"reason":"unsupported_network"},{"name":"undeserializable-transaction","pass":true,"http":402,"reason":"undeserializable_transaction"},{"name":"wrong-fee-payer","pass":true,"http":402,"reason":"wrong_fee_payer"},{"name":"first-instruction-not-cu-limit","pass":true,"http":402,"reason":"instruction_0_must_be_set_compute_unit_limit"},{"name":"second-instruction-not-cu-price","pass":true,"http":402,"reason":"instruction_1_must_be_set_compute_unit_price"},{"name":"absurd-priority-fee","pass":true,"http":402,"reason":"fee_too_high"},{"name":"wrong-asset","pass":true,"http":402,"reason":"wrong_asset"},{"name":"wrong-amount","pass":true,"http":402,"reason":"wrong_amount"},{"name":"wrong-decimals","pass":true,"http":402,"reason":"wrong_decimals"},{"name":"wrong-destination","pass":true,"http":402,"reason":"wrong_destination"},{"name":"self-directed-transfer-source-is-fee-payer","pass":true,"http":402,"reason":"fee_payer_must_not_appear_in_instructions"},{"name":"extra-non-memo-instruction","pass":true,"http":402,"reason":"unexpected_instruction_program"},{"name":"fee-payer-in-instruction","pass":true,"http":402,"reason":"fee_payer_must_not_appear_in_instructions"},{"name":"valid-payment-without-question","pass":true,"http":400,"reason":"question_required"},{"name":"real-settlement","pass":null,"http":null,"reason":"no USDC float passed (--float): a settlement is a real outbound spend of the prober's USDC, and funding that float is a Dave-gated decision (see ASK.md). The endpoint was only ever sent payments that cost nothing."},{"name":"replay","pass":null,"http":null,"reason":"needs a settled payment first"}]
sig: 5Pru3x2J1Q3Lh5HVsRorexAkFoModU81YDu81d3YoSPsWEc81FmuPX9oWZosacFgEw1wPBf82HoxgT1XHqgC6Qm3
pubkey: 4EqwqxVzrdK4ymXPB2wvWLtM86mkLs9wuGMYRRybDSq4 (ed25519)