{"uid":"cap_u04rBVElsnqQDvcUdN6H4","slug":"bounty-engineer-machine-reflex-evidence-999baf49","name":"Bounty Engineer Machine Reflex Evidence","description":"Machine-buyable infrastructure for autonomous agents: API cost routing, margin optimization, funding-rate data, webpage extraction, result verification, spend controls, retry planning, state, tender search and GitHub bounty intelligence.","url":"https://bounty-engineer-x402-prod.onrender.com/v1/machine-reflex-evidence?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"event":{"type":"object","required":["specversion","id","source","type"],"properties":{"id":{"type":"string"},"data":{"type":"object"},"time":{"type":"string"},"type":{"type":"string"},"source":{"type":"string"},"specversion":{"type":"string","const":"1.0"}}},"policy":{"type":"object","properties":{"metric_max":{"type":"number"},"metric_min":{"type":"number"},"metric_field":{"type":"string"},"expected_types":{"type":"array"},"max_age_seconds":{"type":"integer"},"max_gap_seconds":{"type":"integer"},"required_data_fields":{"type":"array"},"require_consecutive_sequence":{"type":"boolean"}}},"previous_events":{"type":"array","items":{"type":"object"},"maxItems":40}}},"responseSchema":{"type":"json","example":{"ok":true,"mode":"machine_reflex_evidence","decision":"quarantine","evidence":{"event_sha256":"137a4d72a463c2e47fc054da69c81fc51806ec901ed678e3ada7e7dfb397216c","policy_sha256":"1ae0102908e3b2ab9df2bde5d62ba3f483ff9d3aeb15ff1581c835fe5e282335","history_sha256":"e853f081872748f2183a6ac29f43ed0b1f2be2662295db9fa055ca917ddd6409","incident_sha256":"eaa6c56c9a8f336d575c54a73d20b15cb9166db7c23883440f04fb8dcf682822"},"findings":[{"code":"metric_above_maximum","detail":"Metric violates buyer-declared maximum","severity":"high"}],"limitations":["Caller-provided CloudEvents are not independently authenticated; hashes are integrity fingerprints, not signed or external attestations.","No incident response, payment, hardware command, webhook, retry or external action is executed.","Duplicate and sequence detection cover only the supplied history, not all events in other systems."],"event_identity":{"id":"run-2","time":null,"type":"com.example.release.finished","source":"/ci/release-gate","subject":null},"observed_events":2,"suggested_actions":["isolate_metric_and_investigate_sensor_or_pipeline"],"independently_verified":false,"latest_comparable_event":null,"charged_by_this_function":false}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.019","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.019/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.019","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.019","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_LBtVy82PsNTIgWhSNIOMb","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.019","costPer":"request","priority":0,"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a CloudEvents event against caller-declared policy rules and historical event context, returning a quarantine/pass decision with SHA-256 integrity hashes and structured findings.","exampleAgentPrompt":"Check this CloudEvents event — type 'com.example.release.finished', source '/ci/release-gate', id 'run-42' — against my policy that requires the metric to stay below 95 and all data fields to include 'status' and 'duration', and compare it against the last 10 events in history to see if I should quarantine it.","exampleUseCases":[{"title":"CI/CD release gate enforcement","prompt":"I have a CloudEvents event from my release pipeline — id 'run-99', type 'com.example.release.finished', source '/ci/release-gate' — and I want to check it against my policy that the metric must stay between 0 and 80, with required fields 'status' and 'score', comparing against the last 20 pipeline events to decide if this release should be quarantined."},{"title":"Anomalous metric spike detection","prompt":"An agent just emitted a metric event with id 'metric-evt-7', type 'com.acme.metrics.cpu', and I need to validate it against my policy where metric_max is 90 and metric_field is 'cpu_percent', using the past 15 events as history — tell me if this violates policy and give me the SHA-256 fingerprints for audit."},{"title":"Autonomous agent decision audit trail","prompt":"My autonomous trading agent fired event id 'trade-signal-42', type 'com.finance.signal.triggered', source '/agent/strategy-v2' — validate it against my policy requiring max_age_seconds of 300 and required_data_fields 'price' and 'volume', with the last 5 events as context, so I have tamper-evident evidence for the decision record."}],"resultDescription":"A JSON object containing: an ok boolean, a mode identifier, a decision string (e.g. 'quarantine'), an evidence block with four SHA-256 hashes (event, policy, history, incident), an array of findings each with a code, detail, and severity, a list of suggested actions, observed event count, whether the result was independently verified, and a limitations disclaimer array.","failureModes":["Missing required CloudEvents fields (specversion, id, source, type) causes validation rejection","Policy field names that don't match event data fields result in no metric violations being detected","Supplying more than 40 previous events truncates history silently","Events with null or missing 'time' fields result in null time in event_identity output","Service is hosted on Render free tier and may have cold-start latency or downtime","Hashes are integrity fingerprints only — not cryptographic signatures or externally attested"],"whenToPreferThis":"Choose this endpoint when you need a lightweight, pay-per-call event validation service that produces tamper-evident SHA-256 fingerprints and structured quarantine decisions for CloudEvents without requiring self-hosted infrastructure. It is particularly suited to autonomous agent pipelines that need audit evidence for decisions, CI/CD release gates enforcing metric thresholds, or anomaly detection over short event histories (up to 40 events). Prefer alternatives if you need persistent state across calls, independent cryptographic attestation, or integration with external incident response systems.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-12T18:43:12.099Z","isFirstParty":false,"canonicalSlug":"bounty-engineer-machine-reflex-evidence-999baf49"}