{"schema":"FAHCE_MACHINE_CAPABILITIES_V1","name":"FAHCE Integrity Repair","version":"1.4.0","engine_version":"fahce-pilot-deterministic-v0.2.8-outcome05","description":"Diagnose unsupported claims, contradictions, provenance gaps, stale authority, and unsafe repair; return bounded repair steps and deterministic verification receipts.","endpoints":{"diagnose":"/api/v1/diagnose","repair":"/api/v1/repair","verify":"/api/v1/verify","repair_bundle":"/api/v1/repair-bundle","receipts":"/api/v1/receipts/{receipt_id}","mcp":"/mcp"},"cloudflare_origin":{"implementation":"READY_FOR_CONTROLLED_GATEWAY_VALIDATION","activation":"ORIGIN_ACCEPTANCE_ENABLED","deployed_payment_verified":false,"recipient":"0x22cf7241E3e24ed0d22d710C86a497084da625cd","network":"eip155:8453","asset":"USDC","recipient_authority":"RECEIVING_ONLY_NO_DELEGATED_SPENDING","preflight":"/api/v1/machine/preflight","recovery":"/api/v1/machine/recovery","lost_first_response":"/api/v1/machine/recovery/claim","disputes":"/api/v1/machine/refunds/disputes","legal_urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"retention":{"private_content_days":30,"financial_records":{"years":7,"anchor":"END_OF_TRANSACTION_CALENDAR_YEAR","selected_standard":"FOUNDER_SELECTED_IMPLEMENTATION_STANDARD_2026_10_14","longer_preservation":"Applicable law, accounting obligations, unresolved reconciliation/disputes and legal holds","private_content_included":false},"provider_backups_instant_erasure":false},"workshop_definition":"Workshop is FAHCE's authenticated owner workflow interface; payment for a machine determination grants no owner workflow authority.","gateway_rule_audience":"Everyone","methods":["POST"],"canonical_origin":"https://fahce.kinganlogic.com","jwt_audience_template":"https://fahce.kinganlogic.com/api/v1/{operation}","authentication":"Wallet-only x402 purchase: verified gateway PAYMENT-CONTEXT creates a payment-bound machine principal for the exact operation and stored receipt. No prior key, invitation or account is required. Payment grants no human, Workshop, Admin or external execution authority.","retry":"Read HTTP 402 PAYMENT-REQUIRED, use an x402 v2 client to authorize the selected requirement, then repeat the same REST URL, JSON and optional compatible Idempotency-Key (8 to 128 URL-safe characters); origin execution identity is server-owned with PAYMENT-SIGNATURE. Clients never create PAYMENT-CONTEXT.","origin_validation":"Ed25519 JWT from https://payments.cloudflare.com/certs; aud must equal the full canonical operation URL, including /api/v1/{operation}, not just the origin or the Everyone access policy. Timing, scheme and signed amount are required. Alternate hosts and query variants are rejected. A client-supplied header alone grants no authority.","headers":{"PAYMENT-REQUIRED":"Gateway to client: base64 JSON requirements in HTTP 402","PAYMENT-SIGNATURE":"Client to gateway: base64 JSON x402 v2 payment authorization","PAYMENT-CONTEXT":"Gateway to origin: signed JWT; clients do not generate it","PAYMENT-SETTLEMENT":"Origin to gateway only: actual upto amount; omitted for exact and HTTP errors; removed before delivery to buyer","PAYMENT-RESPONSE":"Gateway to client: settlement receipt after successful settlement; never fabricated by the origin"},"settlement":"Exact: the origin omits PAYMENT-SETTLEMENT; the gateway settles the signed fixed amount and creates PAYMENT-RESPONSE after settlement. Bundle: zero for a nonbillable free-retry determination; 150000 for verified no-repair work; 390000 only for a required validated bounded repair plan. Held/invalid plans and unsupported processing return HTTP422 without an origin settlement instruction. A valid completed negative Verify returns its contracted determination and is billable even when verification.verified=false. Gateway exact-scheme charging on HTTP errors remains unverified; HTTP 422 alone is not proof of no charge. A proposed plan never establishes external execution.","receipts":"Immutable origin receipts keep payment_receipt and settled_price_atomic_units null, including after delivery; later observations live in the separate append-only financial ledger. Customers retain the separate gateway PAYMENT-RESPONSE settlement receipt. Origin delivery intent is not a charge receipt. Authoritative automated gateway reconciliation is unverified; the owner review workflow preserves pending observations and can verify controlled gateway evidence against Base. It never invents an API or declares an unobserved charge settled.","repeated_delivery":"One delivery intent per signed authorization. Retain FAHCE-Recovery-Token and read the exact saved receipt with Authorization: FAHCEReceipt <capability>, without payment. Repeated delivery returns a distinct 409 without releasing a recovery token or another result; use the original token, or request verified original-purchase recovery if the first response was lost. Do not authorize another payment to retry an unknown charge.","mcp":"Discovery is free. MCP tools/call does not execute commercial operations. Buy through corresponding REST URLs; no pilot key can bypass their rules, whether acceptance is on or off.","external_dependencies":["Operator verification of Cloudflare eligibility, quality, credentials and accounting before setting activation flags","Gateway rule activation","Controlled end-to-end payment verification and settlement reconciliation contract"]},"payment_availability":{"source":"SERVER_MACHINE_PAID_ACCEPTANCE_ENABLED_NOT_SETTLEMENT_PROOF","gateway_enabled":true,"paid_settlement_enabled":true,"deployed_payment_verified":false,"activation":"ORIGIN_ACCEPTANCE_ENABLED","paid_access":"ORIGIN_ACCEPTANCE_ENABLED_GATEWAY_VERIFICATION_PENDING","payment_status":"origin_acceptance_enabled_gateway_verification_pending","pricing_status":"origin_acceptance_enabled_gateway_verification_pending"},"authorization_boundaries":{"purchase":"Exact operation and its retained private receipt only","privileged_operations":"Purchases do not grant human, Administrator, owner, family, confidential-source, policy-change or external-execution authority","recovery":"Random scoped recovery credential; UUIDs, claimed addresses and unverified payment signatures grant no access"},"consumption_policy":{"window_seconds":60,"tenant_requests":30,"credential_requests":10,"tenant_concurrency":4,"credential_concurrency":2,"lease_seconds":120,"service_concurrency":16,"request_bytes":524288,"tenant_daily_spending_atomic_units":10000000,"credential_daily_spending_atomic_units":3000000,"service_daily_spending_atomic_units":100000000,"retry_after_seconds":60,"completed_retries_consume_new_determination":false},"limits":{"request_bytes":524288,"candidate_characters":200000,"expected_characters":200000,"evidence_items":12,"evidence_characters_each":200000,"character_unit":"UTF-16 code units","aggregate_boundary":"The entire UTF-8 encoded JSON body must fit within 524288 bytes (512 KiB), including all fields, labels, escaping and JSON overhead. Per-field maxima are independent ceilings; they cannot all be used at once. MCP includes its JSON-RPC wrapper in the same body ceiling."},"contact":{"support":"logan@kinganlogic.com","security":"logan@kinganlogic.com"},"authentication":"Paid commercial REST calls use wallet-only x402; gateway-verified PAYMENT-CONTEXT grants a machine-only principal. No pilot key or account setup. A pilot key alone never authorizes a commercial machine operation. Independently authenticated human and owner routes remain separate; cookie mutations require same-origin Origin.","payment":{"protocol":"x402-v2","status":"origin_acceptance_enabled_gateway_verification_pending","current_access":"wallet_only_x402"},"outcomes":["HOLD","BLOCK","QUARANTINE","REPAIR_REQUIRED","CLEAR_WITH_CEILING"],"latency":{"class":"synchronous","guaranteed_ms":null},"use_when":["candidate claims exceed supplied evidence","evidence contradicts a candidate answer","a repaired answer needs an evidence-bound verification receipt"],"workflow":["diagnose","repair","verify"],"services":[{"operation":"diagnose","name":"Diagnose","description":"Check an AI-generated answer against supplied evidence. Identify unsupported claims, contradictions, missing proof, and reported actions that the available records do not establish.","use_when":"You need to understand what the supplied evidence establishes.","endpoint":"/api/v1/diagnose","method":"POST","payment":{"scheme":"exact","authorized_atomic_units":"150000"}},{"operation":"repair","name":"Repair","description":"Evaluate an integrity problem and return a bounded, evidence-preserving correction plan when supported. Proposed corrections are not executed in the customer's systems.","use_when":"An identified deficiency needs a scoped correction with prerequisites and protected evidence.","endpoint":"/api/v1/repair","method":"POST","payment":{"scheme":"exact","authorized_atomic_units":"150000"}},{"operation":"verify","name":"Verify","description":"Recheck a submitted or revised answer against supplied evidence. Return a scoped verification determination and content-hashed receipt without claiming independent external execution.","use_when":"A claimed fix or completed action needs evidence-bound review.","endpoint":"/api/v1/verify","method":"POST","payment":{"scheme":"exact","authorized_atomic_units":"150000"}},{"operation":"repair-bundle","name":"Repair Bundle","description":"Receive diagnosis, a bounded proposed repair when required, verification state, and a receipt in one paid response. Authorize up to $0.39; eligible outcomes may settle at $0, $0.15, or $0.39.","use_when":"You need the connected diagnosis, proposed correction and current verification state in one determination.","endpoint":"/api/v1/repair-bundle","method":"POST","payment":{"scheme":"upto","authorized_atomic_units":"390000","no_repair_atomic_units":"150000","repair_required_atomic_units":"390000"}}],"first_success":{"request":{"schema":"FAHCE_MACHINE_REQUEST_V1","candidate_output":"Deployment completed successfully.","evidence":[{"id":"deployment_log","kind":"log","source_label":"independent deployment log","text":"Deployment failed."}]},"revised_candidate_output":"Deployment failed.","steps":["Review the published policies and send FAHCE-Terms-Accepted with their publication hash on each purchase","POST diagnose with the original request; contradictory evidence should produce original_verified=false","POST repair only when a validated plan is eligible; a held plan returns a nonbillable error and is not executed","POST verify with revised candidate_output; retain the recovery credential and immutable receipt"],"expected":{"original_verified":false,"revised_verified":true,"external_execution_verified":false}},"boundaries":{"evidence_scope":"Only the evidence supplied by the caller is reviewed; no independent web retrieval is performed.","unknown_semantics":"Unestablished claims remain UNVERIFIED or held; an unsupported operator cannot establish a clear result.","repair":"A proposed plan is not an executed repair. Verification reviews the separately submitted revised answer.","receipt":"Content hashes bind the response; they are not a public-key signature, certification, trusted timestamp, or proof of external execution."},"integration":{"mcp_discovery":"/.well-known/mcp.json","api_catalog":"/.well-known/api-catalog","schemas":"/openapi.json","idempotency":"An authorization executes at most once. Repeating it returns a distinct 409; recover the saved result with the scoped credential. Optional keys bind unchanged input and a single authorization. Changed input or a new authorization conflicts with a reused key. Receipt recovery performs no determination."},"error_recovery":{"invalid_input":"Correct the named field before creating a new determination.","authentication":"Use an x402 v2 wallet client for a paid REST purchase; no pilot key is required. Receipt reads use the returned receipt-only capability. Human/owner key and session operations are separate and cannot bypass paid machine authorization.","idempotency_conflict":"Retain the original key for its original inputs; use a new key for changed operation, input, or payment authorization.","quota_reached":"Retry the unchanged completed determination or read its receipt; obtain more quota for a new determination.","transient_failure":"Retry unchanged inputs with the same key; inspect any retained receipt before starting another operation."},"legal_documents":{"status":"PUBLISHED_OWNER_APPROVED","publication_hash":"1deba60d2149bae8aeb057a8198f044602a6a6bb4ee20e9d41dece64c87b2ea5","approved_at":"2026-10-14T05:56:09.873Z","urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"acceptance":{"header":"FAHCE-Terms-Accepted","value":"1deba60d2149bae8aeb057a8198f044602a6a6bb4ee20e9d41dece64c87b2ea5","notice":"Review these policies before payment; the authorized customer or its agent accepts this exact published version by sending this header on the purchase request."},"company":{"legal_entity":"Max R.O.I. LLC","operating_brand":"Kingan Logic","entity_type":"Alabama domestic limited liability company","entity_id":"001-160-677","formation_date":"2024-10-29","formation_state":"Alabama, United States","website":"https://kinganlogic.com","contact":"logan@kinganlogic.com","registry":"https://www.sos.alabama.gov/government-records/business-entity-records","identity_provenance":"Founder-provided company facts and September 22, 2026 Alabama certificate of existence reference"},"liability_cap":"GREATER_OF_USD100_OR_PRIOR_12_MONTH_CUSTOMER_FEES;MANDATORY_EXCEPTIONS"}}