ART-394 · OpenChainGraph

x402 Deferred-Scheme Handshake Validator

Cloudflare's deferred x402 scheme lets a 402 offer carry scheme:"deferred", an id, and a termsUrl; the client commits via an RFC 9421 HTTP Message Signature, and the validated id becomes the settlement reference for a subscription/daily/batch rollup. This tool validates the offer fields, the covered-component coverage of the signature (without performing cryptographic verification; that step reuses ART-129), and id continuity across a call sequence. Produces a §4 compliance_control OpenChainGraph artifact.

⚠ Compute-over-supplied-inputs only, nothing here initiates, routes, settles, or transmits a payment. Rollup/batch settlement arithmetic is ART-61's job, not this tool's. The scheme registry is a plugin surface and is not hard-coded here.
§4 OpenChainGraph · ART-394 x402 · deferred scheme Zero PII Client-Side · No Network
▸ Validate a deferred-scheme handshake
Paste the 402 offer JSON, the RFC 9421 covered-component list, and (optionally) prior settlement-reference ids for continuity checking. Everything runs locally.
Offer (JSON object: scheme, id, termsUrl)
Covered components (JSON array of strings, from Signature-Input)
Prior settlement-reference ids (JSON array, optional)

Ask your agent

Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.

Run the AINumbers MCP tool `validate_x402_deferred_handshake`. Task: Validate a Cloudflare `deferred` x402 scheme handshake: 402 offer field shape (scheme:"deferred", id, termsUrl), RFC 9421 HTTP Message Signature covered-component coverage (@method, @target-uri, content-digest), and settlement-reference id continuity across a call sequence (uniqueness, no internal duplicates).
Call it with arguments: {"policy_parameters":{"offer":{"scheme":"deferred","id":"set-ref-001","termsUrl":"https://merchant.example/terms/x402"},"covered_components":["@method","@target-uri","content-digest"],"id_continuity":{"prior_ids":["set-ref-000"]}}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-394-x402-deferred-handshake-validator.html#p=v1.H4sIAAAAAAAA_wHRAC7_eyJvZmZlciI6eyJzY2hlbWUiOiJkZWZlcnJlZCIsImlkIjoic2V0LXJlZi0wMDEiLCJ0ZXJtc1VybCI6Imh0dHBzOi8vbWVyY2hhbnQuZXhhbXBsZS90ZXJtcy94NDAyIn0sImNvdmVyZWRfY29tcG9uZW50cyI6WyJAbWV0aG9kIiwiQHRhcmdldC11cmkiLCJjb250ZW50LWRpZ2VzdCJdLCJpZF9jb250aW51aXR5Ijp7InByaW9yX2lkcyI6WyJzZXQtcmVmLTAwMCJdfX11koJa0QAAAA