# SPDX Package File SHA1 Verification Code Reconstruction

> SPDX Package File SHA1 Verification Code Reconstruction is a paid API for AI agents from detect.halowerk.com, paid per call via x402, $0.003/call, status unknown (last checked 2026-11-04).

Reconstructs an SPDX package verification code from a list of file names with their SHA1 hashes and a set of declared exclusions.

## Facts

- Endpoint: POST https://detect.halowerk.com/v1/F-TD2000-DOCUMENTS-01/spdx-package-file-sha1-verification-code-reconstruction?utm_source=zero.xyz
- Price: $0.003/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-04
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/spdx-package-file-sha1-verification-code-reconstruction-7071fc5f
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_nPHXZcgbQFCK3vqQdHxaO

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability spdx-package-file-sha1-verification-code-reconstruction-7071fc5f -d '<json body>'
```

Example prompt: Reconstruct the SPDX package verification code for a package whose files include 'src/main.c' with SHA1 'da39a3ee5e6b4b0d3255bfef95601890afd80709' and 'src/util.c' with SHA1 'adc83b19e793491b1c6ea0fd8b46cd9f32e592fc', excluding the file 'build/artifact.bin'.

## When to prefer this

Choose this endpoint when you need a standards-compliant SPDX PackageVerificationCode computed from a file SHA1 inventory with explicit exclusion support, especially in SBOM generation, software supply chain auditing, or license compliance workflows where verifying or reconstructing SPDX package integrity is required.

## Known failure modes

- Invalid SHA1 format (not 40 lowercase hex characters) causes validation error
- File name exceeds 64-character limit returns schema error
- More than 128 files or exclusions submitted exceeds array limits
- Malformed claim object (missing required fields) returns error
- Network timeout or service unavailability returns HTTP 5xx

## How this service works

Reconstruct an SPDX package verification code from its file SHA1 inventory and declared exclusions.

## Output

Returns the reconstructed SPDX PackageVerificationCode string along with the lists of included and excluded files used in the computation, optionally compared against a provided claim.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "artifact": {
   "type": "object",
   "required": [
    "packageVerification"
   ],
   "properties": {
    "packageVerification": {
     "type": "object",
     "required": [
      "data",
      "claim"
     ],
     "properties": {
      "data": {
       "type": "object",
       "required": [
        "files",
        "excluded"
       ],
       "properties": {
        "files": {
         "type": "array",
         "items": {
          "type": "object",
          "required": [
           "name",
           "sha1"
          ],
          "properties": {
           "name": {
            "type": "string",
            "maxLength": 64
           },
           "sha1": {
            "type": "string",
            "pattern": "^[0-9a-f]{40}$"
           }
          },
          "additionalProperties": false
         },
         "maxItems": 128,
         "minItems": 0
        },
        "excluded": {
         "type": "array",
         "items": {
          "type": "string",
          "maxLength": 64
         },
         "maxItems": 128,
         "minItems": 0
        }
       },
       "additionalProperties": false
      },
      "claim": {
       "anyOf": [
        {
         "type": "null"
        },
        {
         "type": "object",
         "required": [
          "excluded_files",
          "included_files",
          "verification_code"
         ],
         "properties": {
          "excluded_files": {
           "type": "array",
           "items": {
            "type": "string",
            "maxLength": 20000
           },
           "maxItems": 4096
          },
          "included_files": {
           "type": "array",
           "items": {
            "type": "string",
            "maxLength": 20000
           },
           "maxItems": 4096
          },
          "verification_code": {
           "type": "string",
           "maxLength": 20000
          }
         },
         "additionalProperties": false
        }
       ]
      }
     },
     "additionalProperties": false
    }
   },
   "additionalProperties": false
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/spdx-package-file-sha1-verification-code-reconstruction-7071fc5f/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from detect.halowerk.com](https://www.zero.xyz/host/detect.halowerk.com/llms.txt)