# Provenance Manifests - Scope Boundary Audit

> Provenance Manifests - Scope Boundary Audit is a paid API for AI agents from www.mahastrategies.com, paid per call via x402, $0.038307/call, status unknown (last checked 2026-10-16).

Validates that artifact and dataset provenance manifests conform exactly to declared owner, subject, revision, and allowed scope labels, flagging any scope boundary violations without granting permissions or downloading sources.

## Facts

- Endpoint: POST https://www.mahastrategies.com/api/v1/verify/provenance-manifests/scope-boundary-audit?utm_source=zero.xyz
- Price: $0.038307/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-16
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/provenance-manifests-scope-boundary-audit-5b8d5cde
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_wzhoqK2kDdAGZTw0r34ce

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability provenance-manifests-scope-boundary-audit-5b8d5cde -d '<json body>'
```

Example prompt: Audit these 12 provenance manifest rows for scope boundary violations — the owner is 'acme-corp', subject is 'dataset-alpha', revision is 'v2.3', data class is 'synthetic', and the allowed scopes are ['read', 'aggregate']. Flag any labels that fall outside those declared scopes.

## When to prefer this

Use this endpoint when you need to enforce strict scope boundary constraints on provenance manifests for offline, nonpersonal artifact or dataset metadata — specifically when you only need label-level validation (owner, subject, revision, allowed scopes) and do NOT need source downloads, build reproduction, cryptographic signature verification, or scientific provenance tracing. Best suited for compliance pipelines auditing synthetic or public data class records in batches up to 32 rows.

## Known failure modes

- Missing required fields (ownerRef, subjectRef, revision, allowedScopes) result in validation error
- rows array exceeding 32 items or below 1 item returns schema error
- nonpersonalMetadata not set to true causes rejection
- dataClass value outside 'public' or 'synthetic' enum causes rejection
- allowedScopes array exceeding 16 items returns schema error
- Malformed row entries may produce partial or failed audit results

## How this service works

Enforce exact declared owner, subject, revision and allowed scope labels; a matching label grants no permission or access for caller-supplied artifact and dataset provenance manifests. No source download, build reproduction, signature verification, proof of origin, causality or scientific validity. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.

## Output

Returns a structured audit result per manifest row indicating whether each row's owner, subject, revision, and scope labels exactly match the declared constraints, flagging any scope boundary violations. Includes a receipt with result retention for 24 hours and minimal receipt metadata retained for 90 days. Does not grant permissions, download sources, verify signatures, or perform scientific validation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "rows": {
   "type": "array",
   "maxItems": 32,
   "minItems": 1
  },
  "ownerRef": {
   "type": "string"
  },
  "revision": {
   "type": "string"
  },
  "dataClass": {
   "enum": [
    "public",
    "synthetic"
   ],
   "type": "string"
  },
  "subjectRef": {
   "type": "string"
  },
  "allowedScopes": {
   "type": "array",
   "maxItems": 16,
   "minItems": 1
  },
  "nonpersonalMetadata": {
   "type": "boolean",
   "const": true
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/provenance-manifests-scope-boundary-audit-5b8d5cde/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from www.mahastrategies.com](https://www.zero.xyz/host/www.mahastrategies.com/llms.txt)