# Exact-Request x402 Readiness Preflight

POST https://playbrightgaming.com/agent-services-mainnet/x402-readiness-preflight
Testnet: POST https://playbrightgaming.com/agent-services/x402-readiness-preflight
Free service metadata: https://playbrightgaming.com/agent-services-mainnet/x402-readiness-preflight/service-info

Price: $0.005 USDC (5000 atomic), x402 v2 exact, Base mainnet eip155:8453. Base-Sepolia test-USDC lane: eip155:84532. Runtime HTTP 402 PAYMENT-REQUIRED is authoritative. No account or API key.

The purchase is POST to PennyBot. The requested target observation is strictly one safe, bodyless GET, HEAD or OPTIONS request; no POST target probe. Observe x402 v2 exact EVM EIP-3009 challenge declarations, exact resource binding, integer atomic-price arithmetic, EIP-712 domain metadata and supported Bazaar method/body/query compatibility. All advertised payment options are checked. Unsupported networks, assets, domain metadata or declaration profiles remain INCONCLUSIVE; token/domain information comes from a frozen local registry, with no chain lookup.

Input JSON requires `endpoint` (one HTTPS origin only), `method` (GET, HEAD or OPTIONS), `path` (exact path), and `bodyShape: {"type":"none"}`. Optional `query` is an ordered array of at most 16 unique `{name,value}` pairs; names are at most 48 characters and values at most 128. Optional `expected` contains network, asset, amount, displayPrice and/or payTo. Unknown fields are rejected. No caller credentials, cookies, arbitrary headers, fragments or target request bodies. Paths are bounded to 1024 characters and the final URL to 2048; unsafe or normalized path forms are rejected.

Example input shape (illustrative only; example.com is not claimed to provide an x402 challenge):
```json
{"endpoint":"https://example.com","method":"GET","path":"/quote","query":[{"name":"q","value":"hello"}],"bodyShape":{"type":"none"}}
```

Transport: HTTPS/443 only, public destinations only. Every DNS A/AAAA answer is checked (maximum 64); the resolved destination and connected peer are pinned/checked, normal TLS validation is retained, and every redirect is revalidated. There is no arbitrary crawl, browser execution, remote-tool execution, wallet use, signing or settlement execution against the target. Connections send only service-controlled headers and never forward buyer credentials.

Output: x402-readiness-preflight/1.0.0, deterministic PASS/FAIL/INCONCLUSIVE findings, option summaries, exact requestSha256, evidenceId, raw challenge hashes, terminal raw-body hash when complete, timestamps and resource usage. Evidence is an unsigned checksum, not proof of origin. Error bodies are opaque raw bytes, including gzip; raw entity hashes exclude HTTP framing and challenge header hashes cover parsed field values. FAIL dominates unknown findings in the overall verdict, but unknown findings still prevent charging.

Billing: chargeable only for a delivered, serialized, validated result with no INCONCLUSIVE findings. A fully determined PASS or FAIL costs 5000 atomic. Any INCONCLUSIVE finding makes the result no-charge, including an overall FAIL. Invalid, oversize, busy and internal failures are also no-charge. A signed buyer payment authorization is verified before target observation, and settlement follows durable preparation of a chargeable result. Invalid input is 400, hard input/output cap failure 413, busy 429, and internal failure 500. A result with INCONCLUSIVE findings is a no-charge result.

Durability: exact replay of the same signed authorization with the exact original request returns the same durable order, evidence and response body, with no second payment response, no target refetch/re-execution and no resettlement. A changed request under the used authorization is rejected. No-charge results are also durable. Retry the same authorization/request after an uncertain response; do not create another authorization merely because delivery is uncertain. Uncertain settlement is held for recovery against chain state and is never blindly resettled.

Bounds: 8 KiB input; 128 KiB output; 1 MiB terminal raw body; 16 KiB headers per hop; 12 KiB encoded challenge; 64 DNS answers; 8 payment options; 128 findings; at most 3 redirects / 4 requests; 4 active operations as a singleton with no queue. The total budget is 7000ms. The seven-second budget cancels DNS/sockets and stops new work. Bounded synchronous JS cannot provide a hard real-time preemption guarantee.

Non-claims: unpaid observation does not prove settlement, replay safety, delivery correctness, merchant honesty, actual signability or general security. PASS means only that the supported metadata checks passed for this observation; it does not establish that payment or signing will succeed. No security certification is provided. The seller's own durable delivery/replay contract is distinct from the properties of the observed target. No funded mainnet purchase is claimed.

Full schemas: https://playbrightgaming.com/openapi.json