# Bounty Engineer Delta Policy Gate

> Bounty Engineer Delta Policy Gate is a paid API for AI agents from bounty-engineer-x402-prod.onrender.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-12).

Validates JSON state transitions against a configurable policy, detecting blocked-path changes, type changes, field count limits, and required-path changes between two JSON snapshots.

## Facts

- Endpoint: POST https://bounty-engineer-x402-prod.onrender.com/v1/delta-policy-gate?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/bounty-engineer-delta-policy-gate-e849d254
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_BH-_m_HBrBw_TUQ1RnR7l

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability bounty-engineer-delta-policy-gate-e849d254 -d '<json body>'
```

Example prompt: Before my agent applies this state update, check whether the changes between these two JSON snapshots are allowed — block it if /price or /status changed, flag it if more than 5 fields were modified, and require that /updated_at was changed.

## When to prefer this

Choose this endpoint when you need a lightweight, stateless JSON diff-and-policy-gate that runs in an agent pipeline without touching external systems — ideal for enforcing change control on agent-produced state objects, gating workflow steps on allowed transitions, or auditing before-and-after snapshots with checksum proof. Prefer it over full database triggers or complex approval workflows when the policy can be expressed as blocked paths, type-change rules, field count limits, and required-change assertions on JSON pointers.

## Known failure modes

- Invalid or non-parseable JSON in before/after fields causing schema rejection
- Mismatched expected_before_sha256 or expected_after_sha256 resulting in checksum mismatch finding
- Missing required policy sub-fields causing incomplete evaluation
- Policy max_changed_fields set to 0 blocking any change
- blocked_paths array containing malformed JSON pointers causing evaluation errors
- Payment failure (402) if USDC funds are insufficient before the call is processed

## How this service works

Machine-buyable infrastructure for autonomous agents: API cost routing, margin optimization, funding-rate data, webpage extraction, result verification, spend controls, retry planning, state, tender search and GitHub bounty intelligence.

## Output

Returns a JSON object with a boolean ok flag, mode identifier, decision string (allow/hold/deny), a list of detected changes with their paths and kinds, an array of policy findings with violation IDs and detail messages, SHA-256 checksums for both before and after snapshots, a proof block indicating notarization status, observations, and a limitations disclaimer array.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "after": {
   "description": "Caller supplied JSON object/array snapshot"
  },
  "before": {
   "description": "Caller supplied JSON object/array snapshot"
  },
  "policy": {
   "type": "object",
   "properties": {
    "blocked_paths": {
     "type": "array",
     "items": {
      "type": "string"
     }
    },
    "block_removals": {
     "type": "boolean"
    },
    "block_type_changes": {
     "type": "boolean"
    },
    "max_changed_fields": {
     "type": "integer",
     "maximum": 256,
     "minimum": 0
    },
    "expected_after_sha256": {
     "type": "string"
    },
    "expected_before_sha256": {
     "type": "string"
    },
    "required_changed_paths": {
     "type": "array",
     "items": {
      "type": "string"
     }
    }
   }
  },
  "change_ref": {
   "type": "string",
   "maxLength": 90
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "mode": "delta_policy_gate",
  "proof": {
   "type": "caller_supplied_json_sha256",
   "sha256": "c97b574b56014fd12106c0f70e2a5338781978edd7a8aba11b26ef363ccb6fe2",
   "notarized": false,
   "digitally_signed": false,
   "external_source_verified": false
  },
  "changes": [
   {
    "kind": "modified",
    "path": "/price"
   },
   {
    "kind": "modified",
    "path": "/status"
   }
  ],
  "decision": "hold",
  "findings": [
   {
    "id": "blocked_path_changed",
    "detail": "Blocked JSON pointer changed: /price"
   }
  ],
  "change_ref": null,
  "limitations": [
   "The service cannot establish who supplied the JSON, its external source, or the truth of the measurements.",
   "SHA-256 is a checksum, not a notarized third-party attestation.",
   "No systems are modified, actions executed, wallets billed by this algorithm or outside accounts accessed."
  ],
  "after_sha256": "97bcf68fe8fda0941ccb119acdd65f20c536b3154d3b5ffdccd70b6e04e23891",
  "observations": [],
  "before_sha256": "c6a3e41eb38bec743730cdceaa6715ec3f8ea45d2be717b1dcab7b7fbba011e1",
  "total_changes": 2
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/bounty-engineer-delta-policy-gate-e849d254/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from bounty-engineer-x402-prod.onrender.com](https://www.zero.xyz/host/bounty-engineer-x402-prod.onrender.com/llms.txt)