Conformance report
app.ravn.exchange
Checked: 2026-10-03T00:34:35.755Z
Resource: POST /api/v1/x402/quote
Result: 11/11 passed
Fingerprint: sha256:db380f773235f294c7d1cd358428edbad09e804f92d8e7a31c99ad2c6a4959b3
Individual checks
| Check | HTTP | Grade | Reason |
|---|---|---|---|
challenge_presentDoes an unpaid request answer with a valid 402 challenge? | 402 | passed | Valid HTTP 402 challenge. |
malformed_signatureIs an unreadable payment header refused rather than answered with a 5xx? | 402 | passed | Refused with HTTP 402. |
wrong_recipientIs a payment to a different recipient refused? | 402 | passed | Refused with HTTP 402. |
wrong_assetIs a token other than the one demanded refused? | 402 | passed | Refused with HTTP 402. |
underpaymentIs an amount below the price refused? | 402 | passed | Refused with HTTP 402. |
wrong_networkIs a payment on the wrong chain refused? | 402 | passed | Refused with HTTP 402. |
expiredIs an expired authorization refused? | 402 | passed | Refused with HTTP 402. |
replayed_nonceIs a reused nonce refused? | 402 | passed | Refused with HTTP 402. |
not_yet_validIs a not-yet-valid authorization refused? | 402 | passed | Refused with HTTP 402. |
domain_versionIs a contract version supplied by the request ignored? | 402 | passed | Refused with HTTP 402. |
domain_chain_idIs a chain id supplied by the request ignored? | 402 | passed | Refused with HTTP 402. |
Method and limits
An unpaid challenge is requested first. The remaining requests carry unreadable or altered payment headers with fabricated signatures. No valid payment is ever sent and no money moves. The responses demonstrate HTTP refusals, not isolated cryptographic field or replay security. At most 11 requests per origin including the challenge, one per second.
Report history
- 2026-10-17T00:43:31.324Z ·
sha256:04de4bd434cc2bbd0b588158bbe8b8e81c357b9b0e925f16108fd15e0548de59 - 2026-10-03T00:34:35.755Z ·
sha256:db380f773235f294c7d1cd358428edbad09e804f92d8e7a31c99ad2c6a4959b3