{"url":"https://agent-exec.448c.org","verdict":"fail","trusted":false,"indexed":false,"auto_promoted":false,"quarantined":true,"advertised_key":"dvoENalt1FhzSO54A6sF4c54fd0zwyZiP3ljGlYOlsU=","checks":[{"id":"llm_verdict","ok":null,"detail":"not consulted; well-known copy and capability descriptions are self-claims"},{"id":"url_public","ok":true,"detail":""},{"id":"well_known_schema","ok":true,"detail":""},{"id":"advertised_key","ok":true,"detail":""},{"id":"well_known_signed","ok":false,"detail":"unsigned well-known is allowed; gossip will not relay observations"},{"id":"manifest_schema","ok":true,"detail":""},{"id":"manifest_signed","ok":false,"detail":"ed25519 is VALID but this hub requires a post-quantum signature (AIMARKET_PQC_REQUIRE=1) and the peer signs classic-only — the peer must migrate to hybrid, or this hub must lower the requirement"},{"id":"manifest_fresh","ok":true,"detail":""},{"id":"invoke_same_origin","ok":true,"detail":""},{"id":"sandbox_probe","ok":true,"detail":"402 payment door: x402:base"},{"id":"sandbox_receipt_signed","ok":null,"detail":"priced capability — nothing was bought, so there is no receipt"},{"id":"sandbox_price_matches","ok":true,"detail":""},{"id":"sandbox_analysis","ok":true,"detail":""},{"id":"sandbox_judge","ok":true,"detail":"Plausible x402 payment challenge (HTTP 402) for a sandboxed code-exec service. No exploit/SSRF/credential/schema/malware indicators."}],"sandbox":{"attempted":true,"endpoint":"https://agent-exec.448c.org/execute","capability_id":"execute","product_id":"","source_hub":"","direct_endpoint":true,"http_status":402,"bytes":9255,"payment_challenge":{"price_usd":0.001,"recipient":"0xc8Fceb0F3611BE99c41586eA2B83F6A0911d2Ff0","rails":["x402:base"]},"evidence_kind":"payment_challenge","attempts":[{"capability_id":"execute","kind":"direct","endpoint":"https://agent-exec.448c.org/execute","http_status":402,"bytes":9255,"ok":true,"detail":"priced capability — nothing was bought, so there is no receipt"}],"candidates_free":0,"candidates_tried":1,"probe_kind":"direct","evidence":{"capability_id":"","product_id":"","price_per_call_usd":0.0,"output_schema":{},"http_status":402,"bytes":9255,"receipt_signed":false,"evidence_kind":"payment_challenge","payment_challenge":{"price_usd":0.001,"recipient":"0xc8Fceb0F3611BE99c41586eA2B83F6A0911d2Ff0","rails":["x402:base"]},"result":"{\"x402Version\": 1, \"error\": \"X-PAYMENT header is required\", \"accepts\": [{\"scheme\": \"exact\", \"network\": \"base\", \"maxAmountRequired\": \"1000\", \"resource\": \"https://agent-exec.448c.org/execute\", \"description\": \"POST /execute -- Execute python3/node code in an isolated, network-less sandbox; returns stdout, stderr, exit code as JSON. No account needed -- pay per request over x402. Tier: default ($0.0010).\", \"mimeType\": \"application/json\", \"payTo\": \"0xc8Fceb0F3611BE99c41586eA2B83F6A0911d2Ff0\", \"maxTimeoutSeconds\": 300, \"asset\": \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\", \"extra\": {\"name\": \"USD Coin\", \"version\": \"2\"}, \"outputSchema\": {\"input\": {\"type\": \"http\", \"method\": \"POST\", \"discoverable\": true, \"bodyType\": \"json\", \"example\": {\"runtime\": \"python3\", \"source\": \"print(1)\"}, \"exampleFillsOmittedFields\": true, \"bodyFields\": {\"runtime\": {\"type\": \"string\", \"required\": true, \"enum\": [\"python3\", \"node\"], \"description\": \"Must be one of the allowlisted runtimes enumerated here -- the free way to learn the set. An unsupported value is refused only AFTER a payment attempt, as RUNTIME_UNSUPPORTED, not before. Imports: python3 has the standard library plus numpy 2.2 and scipy 1.15; node has its standard library only. Nothing else is installed and the sandbox has no network, so any other `import` / `require` fails with a module-not-found error at run time, after payment. Send any other dependency as `files`.\"}, \"source\": {\"type\": \"string\", \"required\": true, \"description\": \"Program source, written to the runtime's entry file. Imports: python3 has the standard library plus numpy 2.2 and scipy 1.15; node has its standard library only. Nothing else is installed and the sandbox has no network, so any other `import` / `require` fails with a module-not-found error at run time, after payment. Send any other dependency as `files`.\"}, \"stdin\": {\"type\": \"string\", \"required\": false, \"description\": \"Written to the payload's stdin, then stdin is closed.\"}, \"files\": {\"type\": \"object\", \"required\": false, \"description\": \"Extra files seeded alongside the entry file, as relative-path -> content.\"}, \"limits\": {\"type\": \"object\", \"required\": false, \"description\": \"Per-request resource budget. Every field is optional; an omitted field takes its documented default.\"}}}, \"output\": {\"type\": \"json\", \"example\": {\"outcome\": \"completed\", \"stdout\": \"1\\n\", \"stderr\": \"\", \"exitCode\": 0, \"durationMs\": 42, \"truncated\": {\"stdout\": false, \"stderr\": false}, \"error\": null, \"payment\": {\"payer\": \"0x0000000000000000000000000000000000dEaD\", \"amount\": \"1000\", \"asset\": \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\", \"network\": \"base\", \"transaction\": \"0x0000000000000000000000000000000000000000000000000000000000000000\"}, \"receipt\": {\"requestDigest\": \"0000000000000000000000000000000000000000000000000000000000000000\", \"payment\": {\"payer\": \"0x0000000000000000000000000000000000dEaD\", \"amount\": \"1000\", \"asset\": \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\", \"network\": \"base\", \"reference\": \"0x0000000000000000000000000000000000000000000000000000000000000000\"}, \"priceUsd\": 0.001, \"price\": \"$0.0010\", \"tier\": \"default\", \"limits\": {\"timeoutMs\": 5000, \"maxMemoryBytes\": 2147483648, \"maxOutputBytes\": 1048576, \"workDirBytes\": 67108864}, \"usage\": {\"outcome\": \"completed\", \"durationMs\": 42, \"exitCode\": 0, \"truncated\": {\"stdout\": false, \"stderr\": false}}, \"status\": {\"code\": null, \"category\": \"success\", \"billable\": true}, \"outputDigest\": \"0000000000000000000000000000000000000000000000000000000000000000\"}}}}, \"extensions\": {\"bazaar\": {\"info\": {\"input\": {\"example\": {\"runtime\": \"python3\", \"source\": \"print(1)\"}}, \"output\": {\"example\": {\"outcome\": \"completed\", \"stdout\": \"1\\n\", \"stderr\": \"\", \"exitCode\": 0, \"durationMs\": 42, \"truncated\": {\"stdout\": false, \"stderr\": false}, \"error\": null, \"payment\": {\"payer\": \"0x0000000000000000000000000000000000dEaD\", \"amount\": \"1000\", \"asset\": \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\", \"network\": \"base\", \"transaction\": \"0x0000000000000000000000000000000000000000000000000000000000000"}},"note":"Sandbox evidence only. Names and descriptions were not scored. Auto-admit needs a judge token (MiniMax via OpenRouter): the model may veto the live result; it cannot mint a pass from marketing copy. Without a token, a pass is a scorecard — an operator must Approve.","ran_at":"2026-10-29T18:10:00Z"}