{"audit":{"version":"1.5","generated_at":"2026-10-25T15:03:46.303818+00:00","generated_by":"Agenstry","report_url":"https://agenstry.com/agents/staging.kushbitx.com","methodology_url":"https://agenstry.com/methodology","verifier_jwks_url":"https://agenstry.com/.well-known/jwks.json","subject":{"domain":"staging.kushbitx.com","name":"KushBitx AgentProof","url":"https://staging.kushbitx.com/.well-known/agent-card.json"}},"identity":{"provider":{"organization":"KushBitx","url":"https://kushbitx.com"},"registry_verification":null,"signature":{"signed":false,"signature_valid":null}},"protocol":{"version":"1.0","supports_streaming":false,"supports_push_notifications":false},"operational":{"live_state":"live","live_responds":true,"last_status_code":200,"last_elapsed_ms":50,"last_error":null},"track_record":{"first_seen":"2026-10-25T13:26:41.785831+00:00","last_checked":"2026-10-25T14:05:10.393439+00:00","last_seen_ok":"2026-10-25T14:05:10.393439+00:00","checks_total":2,"checks_ok":2,"uptime_pct":100.0,"uptime_window_days":30,"uptime_probes":1,"archived":false,"archived_reason":null},"conformance":{"score":67,"grade":"C","summary":"C-grade: usable but has clear conformance issues, review the breakdown below.","criteria":[{"key":"valid_card","label":"Valid AgentCard","points":10,"max_points":10,"status":"pass","detail":"Parseable AgentCard returned by the well-known endpoint (Agenstry readiness signal; not an official TCK certification)."},{"key":"live_responds","label":"Live JSON-RPC","points":25,"max_points":25,"status":"pass","detail":"Endpoint responds to a negotiated A2A SendMessage probe (answers in ~106 ms)."},{"key":"protocol_version","label":"Protocol version","points":10,"max_points":10,"status":"pass","detail":"Declares A2A 1.0 with supportedInterfaces[] (current v1 card shape)."},{"key":"signature","label":"JWS signature","points":0,"max_points":10,"status":"info","detail":"Card is unsigned (most published agents are)."},{"key":"uptime","label":"Uptime track record","points":0,"max_points":15,"status":"info","detail":"Only 1 probe so far, need ≥5 for an uptime grade."},{"key":"skills","label":"Skill declaration","points":10,"max_points":10,"status":"pass","detail":"Declares 5 skills with structured metadata."},{"key":"verified_identity","label":"Verified Identity","points":5,"max_points":10,"status":"partial","detail":"Provider declared: KushBitx (https://kushbitx.com). Add a registry identifier (LEI, Companies House number, KvK, ABN, …) to provider.legalEntity for full verified-business credit."},{"key":"freshness","label":"Freshness + modern flags","points":5,"max_points":5,"status":"pass","detail":"declares 1 modern capability flag(s) (x402); seen in upstream source within 0d"},{"key":"security","label":"Security declaration","points":2,"max_points":5,"status":"partial","detail":"Declares 1 security scheme(s) but none use PKCE or mTLS."}]},"card_read":{"findings":[],"clean":true,"source_url":"https://staging.kushbitx.com/.well-known/agent-card.json"},"skills":[{"id":"agentproof-service-discovery","name":"AgentProof Service Discovery","description":"Discover AgentProof routes, supported request methods, published input schemas and integration documentation, including the separate Quick Check GET endpoint. Returns guidance and links to the live service directory; does not invoke paid services.","tags":["agentproof","discovery","api","x402","base"],"examples":["List AgentProof services and their input schemas."],"inputModes":[],"outputModes":[]},{"id":"base-token-risk-integration","name":"Base Token Risk Integration","description":"Explain how to integrate POST /api/token-risk with chain=base and a token contract address, check data coverage, and interpret evidence and INCOMPLETE results. Guidance is free; the separate REST report requires explicit x402 authorization and is not run through A2A.","tags":["base","token-risk","security","integration","x402"],"examples":["How do I integrate Base token-risk screening?"],"inputModes":[],"outputModes":[]},{"id":"transaction-preflight-integration","name":"Transaction Preflight Integration","description":"Explain the unsigned transaction fields for POST /api/transaction-preflight and interpretation of simulation and approval findings. Returns integration instructions only; never signs, broadcasts, simulates a transaction or pays for a report through A2A.","tags":["base","transaction","preflight","unsigned","integration"],"examples":["Explain the unsigned transaction preflight request."],"inputModes":[],"outputModes":[]},{"id":"usdc-payment-verification-integration","name":"USDC Payment Verification Integration","description":"Describe integration with POST /api/verify-payment using an existing Base transaction hash, expected recipient and USDC amount, including confirmation and verification outcomes. Returns documentation only; does not verify or settle a payment through A2A.","tags":["base","usdc","payment-proof","verification","integration"],"examples":["How do I verify an existing Base USDC transfer?"],"inputModes":[],"outputModes":[]},{"id":"spendguard-policy-guidance","name":"SpendGuard Policy Guidance","description":"Explain advisory versus protected spending policies, separate admin and agent Bearer keys, budgets, recipient rules, idempotent request IDs and human approval. A2A guidance is public and never creates or changes policies or grants execution authority.","tags":["spendguard","policy","budgets","bearer","human-approval"],"examples":["Explain SpendGuard policy integration and Bearer keys."],"inputModes":[],"outputModes":[]}],"provenance":[{"source":"cdp_discovery","first_seen":"2026-10-25T13:26:41.785831+00:00"},{"source":"recrawl_paid","first_seen":"2026-10-25T14:05:10.393439+00:00"}],"recent_probes":[{"fetched_at":"2026-10-25T14:05:10.393439+00:00","ok":true,"status_code":200,"error":null,"elapsed_ms":50,"live_responds":true}],"catalog_attestation":null,"operator_revenue_evidence":{"evidence_class":"operator_submitted","authenticity":{"rung":"no_operator_evidence","rank":0,"why":"No verifiable operator evidence has been submitted for this agent.","thresholds":{"min_independent_payers":3,"min_verified_usd":25.0},"engine_table":"agent_authenticity","merge_rule":"max(existing_rank, rank)"},"metric_metadata":{"provenance":"operator_submitted_evidence","confidence":"attested","coverage":{"numerator":0},"as_of":"2026-10-25T15:03:46.315642+00:00","definition":"Revenue proofs submitted by the verified owner and re-checked by Agenstry against the settlement chain or the operator's own Stripe account. Only independently confirmed proofs are counted."},"counts":{"retained":0,"verified":0,"unverifiable":0},"verified":{"gross_usd":0.0,"transactions":0,"independent_payers":0},"detail_url":"https://agenstry.com/api/agents/staging.kushbitx.com/evidence","dispute_url":"https://agenstry.com/agents/staging.kushbitx.com/dispute"},"verification_history":[],"signatures":[{"protected":"eyJhbGciOiJFUzI1NiIsImprdSI6Imh0dHBzOi8vYWdlbnN0cnkuY29tLy53ZWxsLWtub3duL2p3a3MuanNvbiIsImtpZCI6ImFnZW50ZmluZGVyLWVzMjU2LTEiLCJ0eXAiOiJKT1NFIn0","signature":"iMT48oqIowtK44rHEdFx6mqrMZm-EAfi4_CmXcOmGJ5q7Q3plZOy7A0PSl9Ihyq3BTKzAToOa4joy1cgnOwz6Q"}]}