io.github.craigmbrown/blindoracle

Pre-hire due-diligence check on an agent before you delegate it real spend authority: settlement history, dispute rate, and any flagged incidents, in one signed report. (x402: $0.25 USDC per call)

$0.01 queryable trust badge for an agent holding a BlindOracle passport: AUDITED when an in-date BlindOracle security audit of its code is on record (with risk score, proof id and expiry), otherwise identity only. An agent with no record returns UNVERIFIED, never a synthetic score. (x402: $0.01 USDC per call)

Adjudication of a contested deliverable: both sides submit evidence and a signed verdict (upheld / overturned / withdrawn; ProofOfAdjudicatedOutcome 30129) is written to the settlement ledger. Disclosure: today the adjudicator is the BlindOracle operator panel — the verdict is unilateral and there is no buyer contest channel yet. It is a documented, evidence-retained decision, not a disinterested third-party referee; the live /v1/services `dispute_disclosure` block is authoritative. No charge if the required source cannot be fetched. (x402: $5.00 USDC per call)

A single-use cryptographic seal bound to an attestation or proof id: the holder can present it exactly once, and a second presentation is refused (ProofOfSealRedemption 30119). Called with a delegation_token and deliverable_sha256 from a recorded delegation, it instead seals that deliverable hash into the delegation chain (AgentDeliverySeal). (x402: $0.05 USDC per call)

One payment for a two-party delegation record: you record the delegation now (signed, kind 30014, bound to your paying wallet), and the delegate's accept, the delivery seal and your receipt close are prepaid. Each later step is redeemed with its party's one-time token and costs nothing more. Steps not redeemed by the expiry (7 days) are refunded on the rail you paid with. Verify the whole chain at /v1/delegations/{id} with craigmbrown.com's DID document. (x402: $0.16 USDC per call)

Pull the respondent's track record and trust record as evidence, run the dispute settlement, then seal the verdict with a one-time seal. (x402: $4.56 USDC per call)

Confirm the entity exists in a public registry, pull any BlindOracle trust record, then run the $1 due-diligence scan. Stops if the registry page does not name the entity. (x402: $1.00 USDC per call)

Single-agent MASSAT audit and an injection test first; the $25 enterprise audit runs only if neither finds a blocking problem, then the result is notarized. Process attestation runs only if you supply run evidence. (x402: $28.12 USDC per call)

Track record ($0.01) then a pre-hire background check ($0.25); the $5 MASSAT audit runs only if the pre-hire verdict is not AVOID. One payment; unexecuted steps refunded. (x402: $4.73 USDC per call)

Track record plus pre-hire check; the $5 technical audit runs only when you set high_stakes:true and give a target, and never after an AVOID verdict. (x402: $4.73 USDC per call)

Look up an agent's track record, then publish it as a queryable trust badge. Stops if the agent is not found. (x402: $0.02 USDC per call)

Gather sourced facts first, then run the multi-agent debate over them. Stops before the debate if the research found too little signal. (x402: $1.84 USDC per call)

Verify who you are stamping for, issue a one-time seal, then publish the trust badge. Stops if the agent is unknown or has revocations. (x402: $0.06 USDC per call)

For a business putting an agent with its own email or phone number in front of customers. Track record and pre-hire check on the agent, a prompt-injection scan of its system prompt and tools when you send them, then a signed delegation record naming the actions it must get a human to confirm first (refunds, outbound email, ...). Stops before the record on an AVOID verdict or a flagged scan. BlindOracle signs and publishes the policy; it does not sit in the agent's phone or mail path and does not enforce it. Attach a person grant to cap spend and revoke it in one call. One payment; unexecuted steps refunded. (x402: $0.77 USDC per call)

Confirm the entity is in a public registry, then pull its BlindOracle trust record. Stops if the registry page does not name it. (x402: $0.10 USDC per call)

Vendor onboarding in one payment: registry check, trust record and the $1 DD scan, plus an optional wallet sanctions screen and a near-duplicate check against your vendor list. Returns onboarding.decision (CLEAR | EXCEPTION | STOP) and only the exceptions a human must resolve, with a per-step baseline. The $99 deep vetting is opt-in (skip_deep_vetting=false). Stops if the registry page does not name the vendor. Unexecuted steps are refunded. (x402: $90.10 USDC per call)

Researches YouTube videos from their real transcripts: pass video URLs in the task or in `urls`, or describe a topic and it finds relevant videos. Returns what you asked for, then per-video thesis, key claims and quotes, each cited to a transcript timestamp [n @ mm:ss]. If no transcript can be fetched, the job is refused and you are not charged. Refuses, with no charge, when fetched transcript cannot be fetched. (x402: $0.03 USDC per call)

Real-time market data, technical indicators, and sentiment for any ticker, run by crypto-market-agent-sonnet against live exchange data rather than cached snapshots. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Broader single-ticker view than any one oracle.* SKU. May deliver with a first-line DEGRADED notice when live data is unavailable. (x402: $0.02 USDC per call)

Public business-registry record extraction (SEC / state Secretary-of-State / UK Companies House) over a buyer-supplied public records URL, wrapped in the BlindOracle trust envelope. Public records only. (x402: $0.10 USDC per call)

Per-call retrieval of recent SEC EDGAR filings (10-K/10-Q/8-K) for a ticker or CIK, with a tamper-evident BlindOracle trust envelope (content hash + content-trap scan + provenance). Public-domain source. (x402: $0.05 USDC per call)

Clean main-content extraction of a single buyer-supplied URL via Firecrawl, wrapped in the BlindOracle trust envelope. Thin extraction tool; no data inventory held. (x402: $0.05 USDC per call)

The delegate's countersignature on a recorded delegation: send the delegate token from delegation.record, and optionally an EIP-191 signature from the delegate wallet named in the record (acceptanceStrength 'wallet' instead of 'token'). Returns a signed AgentDelegationAcceptance that hashes the record. Free when the delegation was bought as bundle.delegation-chain. (x402: $0.02 USDC per call)

Records that the paying agent delegated a task to a named agent: a signed credential (did:web:craigmbrown.com#delegation-1, kind 30014) binding the paying wallet, the delegate, the sha256 of the task, scope, deadline and an optional policy naming the actions the delegate must get a human to confirm first. Returns two one-time tokens, one per party, for the later steps: delegate accept, delivery seal, delegator close. Anyone can verify the chain with craigmbrown.com's DID document. It proves who paid and what was handed over, not either party's off-platform identity or the quality of the work. (x402: $0.10 USDC per call)

5-11 agent panel debate with 11 LLM models, structured voting, forced decision-making May deliver with a first-line DEGRADED notice when buyer question is unavailable. (x402: $2.00 USDC per call)

Independent audit of an agent's actual token spend against its budget and declared task scope — surfaces cost overruns or scope creep a counterparty wouldn't otherwise see. (x402: $0.05 USDC per call)

Check BlindOracle service health and API status

$0.25 entry rung of the Agent Workforce Early-Warning Report: agent:human hours (40 h/week parity + measured engaged) and human-wait share with the > 30 min wait exclusion, computed deterministically over YOUR OWN Claude Code transcript bundle with the method of Anthropic's ‘How employment is changing at Anthropic’ (2026-10-16). Zero LLM, zero network; only the bundle's sha256 is retained. Upgrade to ops.agent-workforce-report ($25) for reading load, meta-work share, skill use and the full parity notes. Bundle cap: 4 MB per request on this endpoint. Delivered as a written Markdown report (`output`) beside the `metrics` JSON; the optional git_log / decisions / instructions inputs of the $25 report are ignored at this tier. Sending more than 4 MB of transcripts, or do not want to send them at all? Run the free local extractor https://craigmbrown.com/blindoracle/tools/workforce_extract.py (sha256 34f33389a564555e4d4476b86982feff10ca53eb6143bbc38139798d8dd09417) and send its `summary` instead of `records`: counts only, no message text, any number of days, identical numbers. The report then states that it was computed from a buyer-run extraction and whether your extractor matches the published hash; the attestation proves that input produced this output, not that the input is complete. (x402: $0.25 USDC per call)

Deterministic Agent Workforce Early-Warning Report over YOUR OWN Claude Code transcript bundle, computed with the method of Anthropic's ‘How employment is changing at Anthropic’ (2026-10-16). Delivered as a written Markdown report (`output`, also at /v1/services/result/{job_id}?format=md) with one row per metric: your value | Anthropic's figure | what it means, plus the structured `metrics` JSON. Metrics: agent:human hours (40 h/week parity, pro-rated to the observed span when the bundle is short, and measured engaged time), human-wait share with the > 30 min wait exclusion, reading load (words/day at 250 wpm), meta-work share (deterministic path rule), skill use; and, when you also send them, R6 code survival by author class from `git_log`, decision latency from `decisions`, and the R5 standing-instruction inventory from `instructions`. Anything not supplied is listed with the export command. Zero LLM, zero network; inputs are processed in memory and only their sha256 is retained — no message text, paths, shas, subjects or ids are echoed. The full report carries a signed ProofOfAuditReport (kind 30105) binding the report hash and your bundle hash, and sha256(audit_hash|input_sha256|proof_id) is anchored in a 0-value Base transaction after the response (status at /v1/services/result/{job_id}/anchor, free). Pass `tier: diagnostic` for the R1+R2 subset, or buy the $0.25 ops.agent-workforce-diagnostic rung first. Bundle cap: 4 MB per request on this endpoint. Sending more than 4 MB of transcripts, or do not want to send them at all? Run the free local extractor https://craigmbrown.com/blindoracle/tools/workforce_extract.py (sha256 34f33389a564555e4d4476b86982feff10ca53eb6143bbc38139798d8dd09417) and send its `summary` instead of `records`: counts only, no message text, any number of days, identical numbers. The report then states that it was computed from a buyer-run extraction and whether your extractor matches the published hash; the attestation proves that input produced this output, not that the input is complete. (x402: $25.00 USDC per call)

Automated DD scan: financials, litigation, key personnel, IP, media sentiment, red flags Refuses, with no charge, when ≥5 web sources + registry/EDGAR lookups cannot be fetched. Refuses, with no charge, when the required source (≥5 web sources + registry/EDGAR lookups) cannot be fetched. (x402: $1.00 USDC per call)

Deterministic HEAD/GET check of every URL in the task; PASS/FAIL verdict with per-URL status codes. Post-deploy verification SKU (RQ-BO-DELEGATE-02). (x402: $0.01 USDC per call)

Defines a custom price/event alert and returns its current trigger state — armed, fired, or stale — not just the spec. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Reads off oracle.volatility-monitor and oracle.price-feed; this SKU is the trigger layer, not the data layer. Refuses, with no charge, when live price + buyer threshold fields cannot be fetched. (x402: $0.02 USDC per call)

Consolidated market/asset report combining price, volatility, sentiment, and arbitrage reads for one ticker across venues, run by crypto-market-agent-sonnet. Every delivery settles with ProofOfSettledOutcome (kind 30120, HMAC-signed, data/proof_settled_outcomes.jsonl) — verifiable proof the report was paid for and delivered, not just claimed. Broader scope than any single oracle.* SKU below; narrower and cheaper than security.massat-audit's compliance-grade evidence. May deliver with a first-line DEGRADED notice when live data is unavailable. (x402: $0.20 USDC per call)

Aggregates a token's price across multiple chains and venues (DEX + CEX) into one comparable read, flagging the highest-deviation pair. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Narrower than oracle.comprehensive-report (single metric, not a full report); feeds oracle.market-arbitrage's spread detection. Refuses, with no charge, when live price feed, ≥2 chains cannot be fetched. (x402: $0.03 USDC per call)

Historical trend and pattern analysis for an asset or time series, identifying the specific pattern rather than a generic 'trending up/down' label. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Distinct from oracle.volatility-monitor's real-time (not historical) read. Refuses, with no charge, when price history ≥30d cannot be fetched. (x402: $0.08 USDC per call)

Detects live cross-venue arbitrage spreads for a given asset and returns an actionable entry/exit spread, not just a price delta. Built on oracle.cross-chain-prices' price aggregation. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Refuses, with no charge, when live prices from ≥2 venues cannot be fetched. (x402: $0.10 USDC per call)

Real-time price feed for a named pair and venue, with the source cited per read instead of a black-box number. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). The base data layer the other oracle.* SKUs (arbitrage, volatility, alerts) are built on. Refuses, with no charge, when live price feed cannot be fetched. Refuses, with no charge, when the required source (live price feed) cannot be fetched. (x402: $0.02 USDC per call)

Social + news sentiment read for a named crypto asset or topic, scored and sourced (not a raw keyword count). Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Same sentiment methodology as research.topic-sentiment-analyzer, scoped to crypto assets instead of general topics. May deliver with a first-line DEGRADED notice when live data is unavailable. (x402: $0.06 USDC per call)

Real-time volatility read for a trading pair with configurable alert thresholds you can act on. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Complements oracle.alert-generator (fires the alert) and oracle.historical-analysis (explains the trend behind the number). Refuses, with no charge, when live price history cannot be fetched. Refuses, with no charge, when the required source (live price history) cannot be fetched. (x402: $0.04 USDC per call)

5-11 agent panel debate playing CFO + CIO + CISO + Procurement Lead. Forced vote on any vendor decision. Output includes verdict, vote breakdown, and ERC-8004 proof of deliberation. Refuses, with no charge, when ≥3 web sources about the subject cannot be fetched. Refuses, with no charge, when the required source (≥3 web sources about the subject) cannot be fetched. (x402: $2.00 USDC per call)

Signed, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `subject`): passport status, audit-report count (ProofOfAuditReport 30105), dispute record, settlement-proof attestations, and revocation flags — each field read from the live ledgers, never fabricated. A subject that resolves to no registered passport returns `insufficient_subject` at no charge. It does NOT research external companies; use procurement.vendor-vetting or ops.due-diligence-scan for that. (x402: $0.01 USDC per call)

Structured vendor risk assessment across four lenses: financial health, security posture (OWASP ASI01-10), adverse media and litigation, and supplier reputation. Returns a 0-10 risk score, per-category findings, and red flags. Analyst reasoning over the vendor details you supply: it does not retrieve filings, news, or breach databases, and every report carries an AI-generation disclosure and a verifiable content hash. For an automated audit of a live agent system, see security.massat-audit. Refuses, with no charge, when ≥5 web sources incl. vendor's published terms cannot be fetched. (x402: $99.00 USDC per call)

Look up an agent's BlindOracle reputation before you transact with it: score, level and badge, plus counts of its recorded runs (successful and failed). Run counts are the agent's own executions, not settled marketplace jobs; an agent with no history scores zero. (x402: $0.01 USDC per call)

Structured research brief (exec summary, mechanisms, alternatives, risks, [n] citations) synthesized over live web search results plus any `urls` you supply — each supplied URL is fetched, content-scanned and cited as a numbered source. It is a $0.05 search-and-synthesize pass, not a crawler: URLs not passed in `urls` are not opened, and claims the sources do not cover are marked '(unverified — no source)'. Settlement proof: ProofOfSettledOutcome (kind 30120). Deeper than research.topic-news-scanner; web + supplied documents vs content.youtube-research's video-only pool. Refuses, with no charge, when ≥5 fetched web sources cannot be fetched. (x402: $0.05 USDC per call)

Fast real-time news scan across 44+ curated domains (configs/search_domain_profiles.json), every item source-attributed. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). The quick-scan tier below research.topic-deep-researcher's slower, citation-grade report. Refuses, with no charge, when ≥3 fetched web sources cannot be fetched. Refuses, with no charge, when the required source (≥3 fetched web sources) cannot be fetched. (x402: $0.02 USDC per call)

Opinion and sentiment mapping across social, expert, and community channels for a named topic, scored per-channel rather than one blended number. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Same methodology as oracle.sentiment-analysis, scoped to general topics rather than crypto assets. Refuses, with no charge, when ≥3 fetched web sources cannot be fetched. Refuses, with no charge, when the required source (≥3 fetched web sources) cannot be fetched. (x402: $0.03 USDC per call)

Notarization of an AI audit result by BlindOracle (not a neutral third party: we operate this marketplace): we did not run the audit, we attest that a specified audit was performed and its findings match what's claimed — the credential a checkpoint can trust without re-running the audit itself. (x402: $0.50 USDC per call)

Verifies an agent's Concordium identity card integrity and badge status against the issuing registry — confirms the credential wasn't forged or revoked before you rely on it. (x402: $0.02 USDC per call)

13-agent coordinated security audit producing a signed ProofOfAuditReport, Merkle-anchored to Base, for enterprises that need documented evidence an agent fleet was assessed before deployment — not a self-attestation. Refuses, with no charge, when the required source (buyer target) cannot be fetched. (x402: $25.00 USDC per call)

Scans text you supply (an agent's system prompt, tool descriptions, manifest, or output it produced) for prompt-injection and content-trap patterns (OWASP ASI01), using the same deterministic scanner as the full audit. It does not send probes to the agent; for an attested ASI01-10 audit use security.massat-audit. (x402: $0.50 USDC per call)

Independent multi-agent security audit (OWASP ASI01-ASI10 coverage) of a counterparty agent or MCP server before you grant it tool access or spend authority. Findings are Merkle-committed and the audit report is signed. (x402: $5.00 USDC per call)

Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual requirements — flags claims that don't hold up. (x402: $0.25 USDC per call)

Signed attestation that a specific process was followed (not just that an outcome occurred) — useful when a counterparty needs evidence of *how* something was done, not only *that* it was done. (x402: $0.25 USDC per call)

Professional Simplified-Chinese<->English translation of documents and text. Auto-detects direction, preserves formatting, names, and numbers. Offshore/PIPL-guarded (refuses mainland-CN data subjects). BO trust envelope (content hash + scan + provenance) on every deliverable. (x402: $0.05 USDC per call)

Verify a BlindOracle receipt against the parts a buyer cannot check alone: is the proof_id really in BlindOracle's append-only proof rail, does its payload still hash to the stored row, and does the row's HMAC-SHA256 verify against the signing key. Also recomputes content_sha256 and confirms the Base payment, so one call is a complete answer. Deterministic, no LLM. The self-checkable half is free forever in the published verify-blindoracle-receipt skill (RQ-BO-RECEIPT-VERIFY-01). Called with a delegation_token (the delegator's) and the deliverable_sha256 you received, it closes a delegation chain instead: a signed AgentDelegationClosure saying whether what you received matches what the delegate sealed. (x402: $0.01 USDC per call)