# Bounty Engineer Machine Reflex Evidence

> Bounty Engineer Machine Reflex Evidence is a paid API for AI agents from bounty-engineer-x402-prod.onrender.com, paid per call via x402, $0.019/call, status unknown (last checked 2026-10-12).

Validates a CloudEvents event against caller-declared policy rules and historical event context, returning a quarantine/pass decision with SHA-256 integrity hashes and structured findings.

## Facts

- Endpoint: POST https://bounty-engineer-x402-prod.onrender.com/v1/machine-reflex-evidence?utm_source=zero.xyz
- Price: $0.019/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-12
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/bounty-engineer-machine-reflex-evidence-999baf49
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_u04rBVElsnqQDvcUdN6H4

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability bounty-engineer-machine-reflex-evidence-999baf49 -d '<json body>'
```

Example prompt: Check this CloudEvents event — type 'com.example.release.finished', source '/ci/release-gate', id 'run-42' — against my policy that requires the metric to stay below 95 and all data fields to include 'status' and 'duration', and compare it against the last 10 events in history to see if I should quarantine it.

## When to prefer this

Choose this endpoint when you need a lightweight, pay-per-call event validation service that produces tamper-evident SHA-256 fingerprints and structured quarantine decisions for CloudEvents without requiring self-hosted infrastructure. It is particularly suited to autonomous agent pipelines that need audit evidence for decisions, CI/CD release gates enforcing metric thresholds, or anomaly detection over short event histories (up to 40 events). Prefer alternatives if you need persistent state across calls, independent cryptographic attestation, or integration with external incident response systems.

## Known failure modes

- Missing required CloudEvents fields (specversion, id, source, type) causes validation rejection
- Policy field names that don't match event data fields result in no metric violations being detected
- Supplying more than 40 previous events truncates history silently
- Events with null or missing 'time' fields result in null time in event_identity output
- Service is hosted on Render free tier and may have cold-start latency or downtime
- Hashes are integrity fingerprints only — not cryptographic signatures or externally attested

## How this service works

Machine-buyable infrastructure for autonomous agents: API cost routing, margin optimization, funding-rate data, webpage extraction, result verification, spend controls, retry planning, state, tender search and GitHub bounty intelligence.

## Output

A JSON object containing: an ok boolean, a mode identifier, a decision string (e.g. 'quarantine'), an evidence block with four SHA-256 hashes (event, policy, history, incident), an array of findings each with a code, detail, and severity, a list of suggested actions, observed event count, whether the result was independently verified, and a limitations disclaimer array.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "event": {
   "type": "object",
   "required": [
    "specversion",
    "id",
    "source",
    "type"
   ],
   "properties": {
    "id": {
     "type": "string"
    },
    "data": {
     "type": "object"
    },
    "time": {
     "type": "string"
    },
    "type": {
     "type": "string"
    },
    "source": {
     "type": "string"
    },
    "specversion": {
     "type": "string",
     "const": "1.0"
    }
   }
  },
  "policy": {
   "type": "object",
   "properties": {
    "metric_max": {
     "type": "number"
    },
    "metric_min": {
     "type": "number"
    },
    "metric_field": {
     "type": "string"
    },
    "expected_types": {
     "type": "array"
    },
    "max_age_seconds": {
     "type": "integer"
    },
    "max_gap_seconds": {
     "type": "integer"
    },
    "required_data_fields": {
     "type": "array"
    },
    "require_consecutive_sequence": {
     "type": "boolean"
    }
   }
  },
  "previous_events": {
   "type": "array",
   "items": {
    "type": "object"
   },
   "maxItems": 40
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "mode": "machine_reflex_evidence",
  "decision": "quarantine",
  "evidence": {
   "event_sha256": "137a4d72a463c2e47fc054da69c81fc51806ec901ed678e3ada7e7dfb397216c",
   "policy_sha256": "1ae0102908e3b2ab9df2bde5d62ba3f483ff9d3aeb15ff1581c835fe5e282335",
   "history_sha256": "e853f081872748f2183a6ac29f43ed0b1f2be2662295db9fa055ca917ddd6409",
   "incident_sha256": "eaa6c56c9a8f336d575c54a73d20b15cb9166db7c23883440f04fb8dcf682822"
  },
  "findings": [
   {
    "code": "metric_above_maximum",
    "detail": "Metric violates buyer-declared maximum",
    "severity": "high"
   }
  ],
  "limitations": [
   "Caller-provided CloudEvents are not independently authenticated; hashes are integrity fingerprints, not signed or external attestations.",
   "No incident response, payment, hardware command, webhook, retry or external action is executed.",
   "Duplicate and sequence detection cover only the supplied history, not all events in other systems."
  ],
  "event_identity": {
   "id": "run-2",
   "time": null,
   "type": "com.example.release.finished",
   "source": "/ci/release-gate",
   "subject": null
  },
  "observed_events": 2,
  "suggested_actions": [
   "isolate_metric_and_investigate_sensor_or_pipeline"
  ],
  "independently_verified": false,
  "latest_comparable_event": null,
  "charged_by_this_function": false
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/bounty-engineer-machine-reflex-evidence-999baf49/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from bounty-engineer-x402-prod.onrender.com](https://www.zero.xyz/host/bounty-engineer-x402-prod.onrender.com/llms.txt)