{"openapi":"3.1.0","x-fahce-payment-availability":{"source":"SERVER_MACHINE_PAID_ACCEPTANCE_ENABLED_NOT_SETTLEMENT_PROOF","gateway_enabled":true,"paid_settlement_enabled":true,"deployed_payment_verified":false,"activation":"ORIGIN_ACCEPTANCE_ENABLED","paid_access":"ORIGIN_ACCEPTANCE_ENABLED_GATEWAY_VERIFICATION_PENDING","payment_status":"origin_acceptance_enabled_gateway_verification_pending","pricing_status":"origin_acceptance_enabled_gateway_verification_pending"},"info":{"title":"FAHCE Integrity Repair API","version":"1.4.0","contact":{"name":"KINGAN LOGIC","email":"logan@kinganlogic.com"},"description":"Bounded claim and evidence diagnosis, repair planning, and verification. Repair proposals are not executed repairs; receipts are content custody hashes, not certifications."},"servers":[{"url":"https://fahce.kinganlogic.com"}],"paths":{"/api/v1/diagnose":{"post":{"operationId":"fahce_diagnose_integrity","summary":"diagnose candidate output integrity","description":"Check an AI-generated answer against supplied evidence. Identify unsupported claims, contradictions, missing proof, and reported actions that the available records do not establish.","x-payment-info":{"protocols":[{"x402":{}}],"price":{"mode":"fixed","currency":"USD","amount":"0.15"}},"x-fahce-payment":{"scheme":"exact","authorized_atomic_units":"150000","implementation":"READY_FOR_CONTROLLED_GATEWAY_VALIDATION","activation":"ORIGIN_ACCEPTANCE_ENABLED","deployed_payment_verified":false,"recipient":"0x22cf7241E3e24ed0d22d710C86a497084da625cd","network":"eip155:8453","asset":"USDC","recipient_authority":"RECEIVING_ONLY_NO_DELEGATED_SPENDING","preflight":"/api/v1/machine/preflight","recovery":"/api/v1/machine/recovery","lost_first_response":"/api/v1/machine/recovery/claim","disputes":"/api/v1/machine/refunds/disputes","legal_urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"retention":{"private_content_days":30,"financial_records":{"years":7,"anchor":"END_OF_TRANSACTION_CALENDAR_YEAR","selected_standard":"FOUNDER_SELECTED_IMPLEMENTATION_STANDARD_2026_10_14","longer_preservation":"Applicable law, accounting obligations, unresolved reconciliation/disputes and legal holds","private_content_included":false},"provider_backups_instant_erasure":false},"workshop_definition":"Workshop is FAHCE's authenticated owner workflow interface; payment for a machine determination grants no owner workflow authority.","gateway_rule_audience":"Everyone","methods":["POST"],"canonical_origin":"https://fahce.kinganlogic.com","jwt_audience_template":"https://fahce.kinganlogic.com/api/v1/{operation}","authentication":"Wallet-only x402 purchase: verified gateway PAYMENT-CONTEXT creates a payment-bound machine principal for the exact operation and stored receipt. No prior key, invitation or account is required. Payment grants no human, Workshop, Admin or external execution authority.","retry":"Read HTTP 402 PAYMENT-REQUIRED, use an x402 v2 client to authorize the selected requirement, then repeat the same REST URL, JSON and optional compatible Idempotency-Key (8 to 128 URL-safe characters); origin execution identity is server-owned with PAYMENT-SIGNATURE. Clients never create PAYMENT-CONTEXT.","origin_validation":"Ed25519 JWT from https://payments.cloudflare.com/certs; aud must equal the full canonical operation URL, including /api/v1/{operation}, not just the origin or the Everyone access policy. Timing, scheme and signed amount are required. Alternate hosts and query variants are rejected. A client-supplied header alone grants no authority.","headers":{"PAYMENT-REQUIRED":"Gateway to client: base64 JSON requirements in HTTP 402","PAYMENT-SIGNATURE":"Client to gateway: base64 JSON x402 v2 payment authorization","PAYMENT-CONTEXT":"Gateway to origin: signed JWT; clients do not generate it","PAYMENT-SETTLEMENT":"Origin to gateway only: actual upto amount; omitted for exact and HTTP errors; removed before delivery to buyer","PAYMENT-RESPONSE":"Gateway to client: settlement receipt after successful settlement; never fabricated by the origin"},"settlement":"Exact: the origin omits PAYMENT-SETTLEMENT; the gateway settles the signed fixed amount and creates PAYMENT-RESPONSE after settlement. Bundle: zero for a nonbillable free-retry determination; 150000 for verified no-repair work; 390000 only for a required validated bounded repair plan. Held/invalid plans and unsupported processing return HTTP422 without an origin settlement instruction. A valid completed negative Verify returns its contracted determination and is billable even when verification.verified=false. Gateway exact-scheme charging on HTTP errors remains unverified; HTTP 422 alone is not proof of no charge. A proposed plan never establishes external execution.","receipts":"Immutable origin receipts keep payment_receipt and settled_price_atomic_units null, including after delivery; later observations live in the separate append-only financial ledger. Customers retain the separate gateway PAYMENT-RESPONSE settlement receipt. Origin delivery intent is not a charge receipt. Authoritative automated gateway reconciliation is unverified; the owner review workflow preserves pending observations and can verify controlled gateway evidence against Base. It never invents an API or declares an unobserved charge settled.","repeated_delivery":"One delivery intent per signed authorization. Retain FAHCE-Recovery-Token and read the exact saved receipt with Authorization: FAHCEReceipt <capability>, without payment. Repeated delivery returns a distinct 409 without releasing a recovery token or another result; use the original token, or request verified original-purchase recovery if the first response was lost. Do not authorize another payment to retry an unknown charge.","mcp":"Discovery is free. MCP tools/call does not execute commercial operations. Buy through corresponding REST URLs; no pilot key can bypass their rules, whether acceptance is on or off.","external_dependencies":["Operator verification of Cloudflare eligibility, quality, credentials and accounting before setting activation flags","Gateway rule activation","Controlled end-to-end payment verification and settlement reconciliation contract"]},"security":[{"x402Payment":[]}],"parameters":[{"in":"header","name":"FAHCE-Terms-Accepted","required":true,"description":"Current published legal_documents.publication_hash, accepted by the authorized customer or its agent before payment.","schema":{"type":"string","pattern":"^[a-f0-9]{64}$"}},{"in":"header","name":"Idempotency-Key","required":false,"description":"Optional client alias; authorization, operation and canonical body hash define server-owned purchase identity. Same key with changed input conflicts. Recovery is free and never requires a new authorization.","schema":{"type":"string","minLength":8,"maxLength":128,"pattern":"^[A-Za-z0-9_-]{8,128}$"}},{"in":"header","name":"PAYMENT-SIGNATURE","required":false,"schema":{"type":"string"},"description":"x402 v2 wallet authorization on the unchanged gateway retry when activated. No customer API key or prior account is required."},{"in":"header","name":"X-FAHCE-Discovery-Source","required":false,"schema":{"type":"string","maxLength":80,"pattern":"^[A-Za-z0-9_.:-]{1,80}$"},"description":"Optional acquisition source; never include candidate text or credentials."}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineRequest"},"example":{"schema":"FAHCE_MACHINE_REQUEST_V1","candidate_output":"Deployment completed successfully.","evidence":[{"id":"deployment_log","kind":"log","source_label":"independent deployment log","text":"Deployment failed."}]}}}},"responses":{"200":{"description":"Completed bounded determination and immutable origin receipt. Inspect verification.verified, billing and claim support. Immutable origin charge fields remain null; retain the separate gateway PAYMENT-RESPONSE for paid settlement.","headers":{"FAHCE-Recovery-Token":{"description":"Cryptographically random purchase-specific recovery token; only its protected verifier is stored; use Authorization: FAHCEReceipt <value> on GET /api/v1/receipts/{receipt_id}.","schema":{"type":"string"}},"PAYMENT-RESPONSE":{"description":"Gateway-generated base64 JSON settlement receipt after settlement. Zero-settlement gateway receipt behavior remains to be verified. The origin never creates it.","schema":{"type":"string"}}},"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineResponse"}}}},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"401":{"description":"Legacy credentials or a receipt-only read capability are missing or invalid; commercial wallet purchase requires no prior key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"402":{"description":"Gateway payment required: decode PAYMENT-REQUIRED and retry unchanged with PAYMENT-SIGNATURE from an x402 v2 client. This response is generated by the gateway; its body is provider-defined and is not a FAHCE MachineError envelope. Use the PAYMENT-REQUIRED header.","headers":{"PAYMENT-REQUIRED":{"description":"Base64-encoded x402 v2 JSON requirements; upto amount is the authorized maximum.","schema":{"type":"string"}}}},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"409":{"description":"Conflicting key or repeated paid delivery. Read the retained receipt and reconcile an unknown gateway charge before authorizing another payment. Revised input requires a new key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}},"x-fahce-error-codes":{"IDEMPOTENCY_CONFLICT":"Key or authorization reused with conflicting input, operation or account","PURCHASE_ALREADY_COMPLETED":"No second execution; use the scoped recovery route","DELIVERY_RECOVERY_IN_PROGRESS":"Original execution is reserved; recovery is pending","PAYMENT_RECONCILIATION_PENDING":"Original purchase did not reach completed delivery; reconcile before another payment","PAYMENT_AUTHORIZATION_CONFLICT":"Authorization bound to changed operation/input"}},"413":{"description":"The complete UTF-8 JSON body exceeds 524288 bytes; reduce the aggregate body, including JSON overhead.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"415":{"description":"Send JSON with Content-Type: application/json.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"422":{"description":"A valid contracted determination was not produced or a repair plan is held/invalid. No origin settlement instruction is issued. Exact-scheme gateway charging on errors remains unverified; request reconciliation before another authorization.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"500":{"description":"Processing failed; preserve the purchase evidence and request reconciliation. Do not authorize another payment automatically.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/repair":{"post":{"operationId":"fahce_repair_integrity","summary":"repair candidate output integrity","description":"Evaluate an integrity problem and return a bounded, evidence-preserving correction plan when supported. Proposed corrections are not executed in the customer's systems.","x-payment-info":{"protocols":[{"x402":{}}],"price":{"mode":"fixed","currency":"USD","amount":"0.15"}},"x-fahce-payment":{"scheme":"exact","authorized_atomic_units":"150000","implementation":"READY_FOR_CONTROLLED_GATEWAY_VALIDATION","activation":"ORIGIN_ACCEPTANCE_ENABLED","deployed_payment_verified":false,"recipient":"0x22cf7241E3e24ed0d22d710C86a497084da625cd","network":"eip155:8453","asset":"USDC","recipient_authority":"RECEIVING_ONLY_NO_DELEGATED_SPENDING","preflight":"/api/v1/machine/preflight","recovery":"/api/v1/machine/recovery","lost_first_response":"/api/v1/machine/recovery/claim","disputes":"/api/v1/machine/refunds/disputes","legal_urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"retention":{"private_content_days":30,"financial_records":{"years":7,"anchor":"END_OF_TRANSACTION_CALENDAR_YEAR","selected_standard":"FOUNDER_SELECTED_IMPLEMENTATION_STANDARD_2026_10_14","longer_preservation":"Applicable law, accounting obligations, unresolved reconciliation/disputes and legal holds","private_content_included":false},"provider_backups_instant_erasure":false},"workshop_definition":"Workshop is FAHCE's authenticated owner workflow interface; payment for a machine determination grants no owner workflow authority.","gateway_rule_audience":"Everyone","methods":["POST"],"canonical_origin":"https://fahce.kinganlogic.com","jwt_audience_template":"https://fahce.kinganlogic.com/api/v1/{operation}","authentication":"Wallet-only x402 purchase: verified gateway PAYMENT-CONTEXT creates a payment-bound machine principal for the exact operation and stored receipt. No prior key, invitation or account is required. Payment grants no human, Workshop, Admin or external execution authority.","retry":"Read HTTP 402 PAYMENT-REQUIRED, use an x402 v2 client to authorize the selected requirement, then repeat the same REST URL, JSON and optional compatible Idempotency-Key (8 to 128 URL-safe characters); origin execution identity is server-owned with PAYMENT-SIGNATURE. Clients never create PAYMENT-CONTEXT.","origin_validation":"Ed25519 JWT from https://payments.cloudflare.com/certs; aud must equal the full canonical operation URL, including /api/v1/{operation}, not just the origin or the Everyone access policy. Timing, scheme and signed amount are required. Alternate hosts and query variants are rejected. A client-supplied header alone grants no authority.","headers":{"PAYMENT-REQUIRED":"Gateway to client: base64 JSON requirements in HTTP 402","PAYMENT-SIGNATURE":"Client to gateway: base64 JSON x402 v2 payment authorization","PAYMENT-CONTEXT":"Gateway to origin: signed JWT; clients do not generate it","PAYMENT-SETTLEMENT":"Origin to gateway only: actual upto amount; omitted for exact and HTTP errors; removed before delivery to buyer","PAYMENT-RESPONSE":"Gateway to client: settlement receipt after successful settlement; never fabricated by the origin"},"settlement":"Exact: the origin omits PAYMENT-SETTLEMENT; the gateway settles the signed fixed amount and creates PAYMENT-RESPONSE after settlement. Bundle: zero for a nonbillable free-retry determination; 150000 for verified no-repair work; 390000 only for a required validated bounded repair plan. Held/invalid plans and unsupported processing return HTTP422 without an origin settlement instruction. A valid completed negative Verify returns its contracted determination and is billable even when verification.verified=false. Gateway exact-scheme charging on HTTP errors remains unverified; HTTP 422 alone is not proof of no charge. A proposed plan never establishes external execution.","receipts":"Immutable origin receipts keep payment_receipt and settled_price_atomic_units null, including after delivery; later observations live in the separate append-only financial ledger. Customers retain the separate gateway PAYMENT-RESPONSE settlement receipt. Origin delivery intent is not a charge receipt. Authoritative automated gateway reconciliation is unverified; the owner review workflow preserves pending observations and can verify controlled gateway evidence against Base. It never invents an API or declares an unobserved charge settled.","repeated_delivery":"One delivery intent per signed authorization. Retain FAHCE-Recovery-Token and read the exact saved receipt with Authorization: FAHCEReceipt <capability>, without payment. Repeated delivery returns a distinct 409 without releasing a recovery token or another result; use the original token, or request verified original-purchase recovery if the first response was lost. Do not authorize another payment to retry an unknown charge.","mcp":"Discovery is free. MCP tools/call does not execute commercial operations. Buy through corresponding REST URLs; no pilot key can bypass their rules, whether acceptance is on or off.","external_dependencies":["Operator verification of Cloudflare eligibility, quality, credentials and accounting before setting activation flags","Gateway rule activation","Controlled end-to-end payment verification and settlement reconciliation contract"]},"security":[{"x402Payment":[]}],"parameters":[{"in":"header","name":"FAHCE-Terms-Accepted","required":true,"description":"Current published legal_documents.publication_hash, accepted by the authorized customer or its agent before payment.","schema":{"type":"string","pattern":"^[a-f0-9]{64}$"}},{"in":"header","name":"Idempotency-Key","required":false,"description":"Optional client alias; authorization, operation and canonical body hash define server-owned purchase identity. Same key with changed input conflicts. Recovery is free and never requires a new authorization.","schema":{"type":"string","minLength":8,"maxLength":128,"pattern":"^[A-Za-z0-9_-]{8,128}$"}},{"in":"header","name":"PAYMENT-SIGNATURE","required":false,"schema":{"type":"string"},"description":"x402 v2 wallet authorization on the unchanged gateway retry when activated. No customer API key or prior account is required."},{"in":"header","name":"X-FAHCE-Discovery-Source","required":false,"schema":{"type":"string","maxLength":80,"pattern":"^[A-Za-z0-9_.:-]{1,80}$"},"description":"Optional acquisition source; never include candidate text or credentials."}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineRequest"},"example":{"schema":"FAHCE_MACHINE_REQUEST_V1","candidate_output":"Deployment completed successfully.","evidence":[{"id":"deployment_log","kind":"log","source_label":"independent deployment log","text":"Deployment failed."}]}}}},"responses":{"200":{"description":"Completed bounded determination and immutable origin receipt. Inspect verification.verified, billing and claim support. Immutable origin charge fields remain null; retain the separate gateway PAYMENT-RESPONSE for paid settlement.","headers":{"FAHCE-Recovery-Token":{"description":"Cryptographically random purchase-specific recovery token; only its protected verifier is stored; use Authorization: FAHCEReceipt <value> on GET /api/v1/receipts/{receipt_id}.","schema":{"type":"string"}},"PAYMENT-RESPONSE":{"description":"Gateway-generated base64 JSON settlement receipt after settlement. Zero-settlement gateway receipt behavior remains to be verified. The origin never creates it.","schema":{"type":"string"}}},"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineResponse"}}}},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"401":{"description":"Legacy credentials or a receipt-only read capability are missing or invalid; commercial wallet purchase requires no prior key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"402":{"description":"Gateway payment required: decode PAYMENT-REQUIRED and retry unchanged with PAYMENT-SIGNATURE from an x402 v2 client. This response is generated by the gateway; its body is provider-defined and is not a FAHCE MachineError envelope. Use the PAYMENT-REQUIRED header.","headers":{"PAYMENT-REQUIRED":{"description":"Base64-encoded x402 v2 JSON requirements; upto amount is the authorized maximum.","schema":{"type":"string"}}}},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"409":{"description":"Conflicting key or repeated paid delivery. Read the retained receipt and reconcile an unknown gateway charge before authorizing another payment. Revised input requires a new key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}},"x-fahce-error-codes":{"IDEMPOTENCY_CONFLICT":"Key or authorization reused with conflicting input, operation or account","PURCHASE_ALREADY_COMPLETED":"No second execution; use the scoped recovery route","DELIVERY_RECOVERY_IN_PROGRESS":"Original execution is reserved; recovery is pending","PAYMENT_RECONCILIATION_PENDING":"Original purchase did not reach completed delivery; reconcile before another payment","PAYMENT_AUTHORIZATION_CONFLICT":"Authorization bound to changed operation/input"}},"413":{"description":"The complete UTF-8 JSON body exceeds 524288 bytes; reduce the aggregate body, including JSON overhead.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"415":{"description":"Send JSON with Content-Type: application/json.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"422":{"description":"A valid contracted determination was not produced or a repair plan is held/invalid. No origin settlement instruction is issued. Exact-scheme gateway charging on errors remains unverified; request reconciliation before another authorization.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"500":{"description":"Processing failed; preserve the purchase evidence and request reconciliation. Do not authorize another payment automatically.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/verify":{"post":{"operationId":"fahce_verify_integrity","summary":"verify candidate output integrity","description":"Recheck a submitted or revised answer against supplied evidence. Return a scoped verification determination and content-hashed receipt without claiming independent external execution.","x-payment-info":{"protocols":[{"x402":{}}],"price":{"mode":"fixed","currency":"USD","amount":"0.15"}},"x-fahce-payment":{"scheme":"exact","authorized_atomic_units":"150000","implementation":"READY_FOR_CONTROLLED_GATEWAY_VALIDATION","activation":"ORIGIN_ACCEPTANCE_ENABLED","deployed_payment_verified":false,"recipient":"0x22cf7241E3e24ed0d22d710C86a497084da625cd","network":"eip155:8453","asset":"USDC","recipient_authority":"RECEIVING_ONLY_NO_DELEGATED_SPENDING","preflight":"/api/v1/machine/preflight","recovery":"/api/v1/machine/recovery","lost_first_response":"/api/v1/machine/recovery/claim","disputes":"/api/v1/machine/refunds/disputes","legal_urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"retention":{"private_content_days":30,"financial_records":{"years":7,"anchor":"END_OF_TRANSACTION_CALENDAR_YEAR","selected_standard":"FOUNDER_SELECTED_IMPLEMENTATION_STANDARD_2026_10_14","longer_preservation":"Applicable law, accounting obligations, unresolved reconciliation/disputes and legal holds","private_content_included":false},"provider_backups_instant_erasure":false},"workshop_definition":"Workshop is FAHCE's authenticated owner workflow interface; payment for a machine determination grants no owner workflow authority.","gateway_rule_audience":"Everyone","methods":["POST"],"canonical_origin":"https://fahce.kinganlogic.com","jwt_audience_template":"https://fahce.kinganlogic.com/api/v1/{operation}","authentication":"Wallet-only x402 purchase: verified gateway PAYMENT-CONTEXT creates a payment-bound machine principal for the exact operation and stored receipt. No prior key, invitation or account is required. Payment grants no human, Workshop, Admin or external execution authority.","retry":"Read HTTP 402 PAYMENT-REQUIRED, use an x402 v2 client to authorize the selected requirement, then repeat the same REST URL, JSON and optional compatible Idempotency-Key (8 to 128 URL-safe characters); origin execution identity is server-owned with PAYMENT-SIGNATURE. Clients never create PAYMENT-CONTEXT.","origin_validation":"Ed25519 JWT from https://payments.cloudflare.com/certs; aud must equal the full canonical operation URL, including /api/v1/{operation}, not just the origin or the Everyone access policy. Timing, scheme and signed amount are required. Alternate hosts and query variants are rejected. A client-supplied header alone grants no authority.","headers":{"PAYMENT-REQUIRED":"Gateway to client: base64 JSON requirements in HTTP 402","PAYMENT-SIGNATURE":"Client to gateway: base64 JSON x402 v2 payment authorization","PAYMENT-CONTEXT":"Gateway to origin: signed JWT; clients do not generate it","PAYMENT-SETTLEMENT":"Origin to gateway only: actual upto amount; omitted for exact and HTTP errors; removed before delivery to buyer","PAYMENT-RESPONSE":"Gateway to client: settlement receipt after successful settlement; never fabricated by the origin"},"settlement":"Exact: the origin omits PAYMENT-SETTLEMENT; the gateway settles the signed fixed amount and creates PAYMENT-RESPONSE after settlement. Bundle: zero for a nonbillable free-retry determination; 150000 for verified no-repair work; 390000 only for a required validated bounded repair plan. Held/invalid plans and unsupported processing return HTTP422 without an origin settlement instruction. A valid completed negative Verify returns its contracted determination and is billable even when verification.verified=false. Gateway exact-scheme charging on HTTP errors remains unverified; HTTP 422 alone is not proof of no charge. A proposed plan never establishes external execution.","receipts":"Immutable origin receipts keep payment_receipt and settled_price_atomic_units null, including after delivery; later observations live in the separate append-only financial ledger. Customers retain the separate gateway PAYMENT-RESPONSE settlement receipt. Origin delivery intent is not a charge receipt. Authoritative automated gateway reconciliation is unverified; the owner review workflow preserves pending observations and can verify controlled gateway evidence against Base. It never invents an API or declares an unobserved charge settled.","repeated_delivery":"One delivery intent per signed authorization. Retain FAHCE-Recovery-Token and read the exact saved receipt with Authorization: FAHCEReceipt <capability>, without payment. Repeated delivery returns a distinct 409 without releasing a recovery token or another result; use the original token, or request verified original-purchase recovery if the first response was lost. Do not authorize another payment to retry an unknown charge.","mcp":"Discovery is free. MCP tools/call does not execute commercial operations. Buy through corresponding REST URLs; no pilot key can bypass their rules, whether acceptance is on or off.","external_dependencies":["Operator verification of Cloudflare eligibility, quality, credentials and accounting before setting activation flags","Gateway rule activation","Controlled end-to-end payment verification and settlement reconciliation contract"]},"security":[{"x402Payment":[]}],"parameters":[{"in":"header","name":"FAHCE-Terms-Accepted","required":true,"description":"Current published legal_documents.publication_hash, accepted by the authorized customer or its agent before payment.","schema":{"type":"string","pattern":"^[a-f0-9]{64}$"}},{"in":"header","name":"Idempotency-Key","required":false,"description":"Optional client alias; authorization, operation and canonical body hash define server-owned purchase identity. Same key with changed input conflicts. Recovery is free and never requires a new authorization.","schema":{"type":"string","minLength":8,"maxLength":128,"pattern":"^[A-Za-z0-9_-]{8,128}$"}},{"in":"header","name":"PAYMENT-SIGNATURE","required":false,"schema":{"type":"string"},"description":"x402 v2 wallet authorization on the unchanged gateway retry when activated. No customer API key or prior account is required."},{"in":"header","name":"X-FAHCE-Discovery-Source","required":false,"schema":{"type":"string","maxLength":80,"pattern":"^[A-Za-z0-9_.:-]{1,80}$"},"description":"Optional acquisition source; never include candidate text or credentials."}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineRequest"},"example":{"schema":"FAHCE_MACHINE_REQUEST_V1","candidate_output":"Deployment failed.","evidence":[{"id":"deployment_log","kind":"log","source_label":"independent deployment log","text":"Deployment failed."}]}}}},"responses":{"200":{"description":"Completed bounded determination and immutable origin receipt. Inspect verification.verified, billing and claim support. Immutable origin charge fields remain null; retain the separate gateway PAYMENT-RESPONSE for paid settlement.","headers":{"FAHCE-Recovery-Token":{"description":"Cryptographically random purchase-specific recovery token; only its protected verifier is stored; use Authorization: FAHCEReceipt <value> on GET /api/v1/receipts/{receipt_id}.","schema":{"type":"string"}},"PAYMENT-RESPONSE":{"description":"Gateway-generated base64 JSON settlement receipt after settlement. Zero-settlement gateway receipt behavior remains to be verified. The origin never creates it.","schema":{"type":"string"}}},"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineResponse"}}}},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"401":{"description":"Legacy credentials or a receipt-only read capability are missing or invalid; commercial wallet purchase requires no prior key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"402":{"description":"Gateway payment required: decode PAYMENT-REQUIRED and retry unchanged with PAYMENT-SIGNATURE from an x402 v2 client. This response is generated by the gateway; its body is provider-defined and is not a FAHCE MachineError envelope. Use the PAYMENT-REQUIRED header.","headers":{"PAYMENT-REQUIRED":{"description":"Base64-encoded x402 v2 JSON requirements; upto amount is the authorized maximum.","schema":{"type":"string"}}}},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"409":{"description":"Conflicting key or repeated paid delivery. Read the retained receipt and reconcile an unknown gateway charge before authorizing another payment. Revised input requires a new key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}},"x-fahce-error-codes":{"IDEMPOTENCY_CONFLICT":"Key or authorization reused with conflicting input, operation or account","PURCHASE_ALREADY_COMPLETED":"No second execution; use the scoped recovery route","DELIVERY_RECOVERY_IN_PROGRESS":"Original execution is reserved; recovery is pending","PAYMENT_RECONCILIATION_PENDING":"Original purchase did not reach completed delivery; reconcile before another payment","PAYMENT_AUTHORIZATION_CONFLICT":"Authorization bound to changed operation/input"}},"413":{"description":"The complete UTF-8 JSON body exceeds 524288 bytes; reduce the aggregate body, including JSON overhead.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"415":{"description":"Send JSON with Content-Type: application/json.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"422":{"description":"A valid contracted determination was not produced or a repair plan is held/invalid. No origin settlement instruction is issued. Exact-scheme gateway charging on errors remains unverified; request reconciliation before another authorization.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"500":{"description":"Processing failed; preserve the purchase evidence and request reconciliation. Do not authorize another payment automatically.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/repair-bundle":{"post":{"operationId":"fahce_repair_bundle_integrity","summary":"repair-bundle candidate output integrity","description":"Receive diagnosis, a bounded proposed repair when required, verification state, and a receipt in one paid response. Authorize up to $0.39; eligible outcomes may settle at $0, $0.15, or $0.39.","x-payment-info":{"protocols":[{"x402":{}}],"price":{"mode":"dynamic","currency":"USD","min":"0","max":"0.39","description":"Eligible settlements: $0 designated nonbillable/free retry; $0.15 completed no-repair analysis; $0.39 required validated bounded repair. Maximum authorization is not necessarily transferred."}},"x-fahce-payment":{"scheme":"upto","authorized_atomic_units":"390000","no_repair_atomic_units":"150000","repair_required_atomic_units":"390000","implementation":"READY_FOR_CONTROLLED_GATEWAY_VALIDATION","activation":"ORIGIN_ACCEPTANCE_ENABLED","deployed_payment_verified":false,"recipient":"0x22cf7241E3e24ed0d22d710C86a497084da625cd","network":"eip155:8453","asset":"USDC","recipient_authority":"RECEIVING_ONLY_NO_DELEGATED_SPENDING","preflight":"/api/v1/machine/preflight","recovery":"/api/v1/machine/recovery","lost_first_response":"/api/v1/machine/recovery/claim","disputes":"/api/v1/machine/refunds/disputes","legal_urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"retention":{"private_content_days":30,"financial_records":{"years":7,"anchor":"END_OF_TRANSACTION_CALENDAR_YEAR","selected_standard":"FOUNDER_SELECTED_IMPLEMENTATION_STANDARD_2026_10_14","longer_preservation":"Applicable law, accounting obligations, unresolved reconciliation/disputes and legal holds","private_content_included":false},"provider_backups_instant_erasure":false},"workshop_definition":"Workshop is FAHCE's authenticated owner workflow interface; payment for a machine determination grants no owner workflow authority.","gateway_rule_audience":"Everyone","methods":["POST"],"canonical_origin":"https://fahce.kinganlogic.com","jwt_audience_template":"https://fahce.kinganlogic.com/api/v1/{operation}","authentication":"Wallet-only x402 purchase: verified gateway PAYMENT-CONTEXT creates a payment-bound machine principal for the exact operation and stored receipt. No prior key, invitation or account is required. Payment grants no human, Workshop, Admin or external execution authority.","retry":"Read HTTP 402 PAYMENT-REQUIRED, use an x402 v2 client to authorize the selected requirement, then repeat the same REST URL, JSON and optional compatible Idempotency-Key (8 to 128 URL-safe characters); origin execution identity is server-owned with PAYMENT-SIGNATURE. Clients never create PAYMENT-CONTEXT.","origin_validation":"Ed25519 JWT from https://payments.cloudflare.com/certs; aud must equal the full canonical operation URL, including /api/v1/{operation}, not just the origin or the Everyone access policy. Timing, scheme and signed amount are required. Alternate hosts and query variants are rejected. A client-supplied header alone grants no authority.","headers":{"PAYMENT-REQUIRED":"Gateway to client: base64 JSON requirements in HTTP 402","PAYMENT-SIGNATURE":"Client to gateway: base64 JSON x402 v2 payment authorization","PAYMENT-CONTEXT":"Gateway to origin: signed JWT; clients do not generate it","PAYMENT-SETTLEMENT":"Origin to gateway only: actual upto amount; omitted for exact and HTTP errors; removed before delivery to buyer","PAYMENT-RESPONSE":"Gateway to client: settlement receipt after successful settlement; never fabricated by the origin"},"settlement":"Exact: the origin omits PAYMENT-SETTLEMENT; the gateway settles the signed fixed amount and creates PAYMENT-RESPONSE after settlement. Bundle: zero for a nonbillable free-retry determination; 150000 for verified no-repair work; 390000 only for a required validated bounded repair plan. Held/invalid plans and unsupported processing return HTTP422 without an origin settlement instruction. A valid completed negative Verify returns its contracted determination and is billable even when verification.verified=false. Gateway exact-scheme charging on HTTP errors remains unverified; HTTP 422 alone is not proof of no charge. A proposed plan never establishes external execution.","receipts":"Immutable origin receipts keep payment_receipt and settled_price_atomic_units null, including after delivery; later observations live in the separate append-only financial ledger. Customers retain the separate gateway PAYMENT-RESPONSE settlement receipt. Origin delivery intent is not a charge receipt. Authoritative automated gateway reconciliation is unverified; the owner review workflow preserves pending observations and can verify controlled gateway evidence against Base. It never invents an API or declares an unobserved charge settled.","repeated_delivery":"One delivery intent per signed authorization. Retain FAHCE-Recovery-Token and read the exact saved receipt with Authorization: FAHCEReceipt <capability>, without payment. Repeated delivery returns a distinct 409 without releasing a recovery token or another result; use the original token, or request verified original-purchase recovery if the first response was lost. Do not authorize another payment to retry an unknown charge.","mcp":"Discovery is free. MCP tools/call does not execute commercial operations. Buy through corresponding REST URLs; no pilot key can bypass their rules, whether acceptance is on or off.","external_dependencies":["Operator verification of Cloudflare eligibility, quality, credentials and accounting before setting activation flags","Gateway rule activation","Controlled end-to-end payment verification and settlement reconciliation contract"]},"security":[{"x402Payment":[]}],"parameters":[{"in":"header","name":"FAHCE-Terms-Accepted","required":true,"description":"Current published legal_documents.publication_hash, accepted by the authorized customer or its agent before payment.","schema":{"type":"string","pattern":"^[a-f0-9]{64}$"}},{"in":"header","name":"Idempotency-Key","required":false,"description":"Optional client alias; authorization, operation and canonical body hash define server-owned purchase identity. Same key with changed input conflicts. Recovery is free and never requires a new authorization.","schema":{"type":"string","minLength":8,"maxLength":128,"pattern":"^[A-Za-z0-9_-]{8,128}$"}},{"in":"header","name":"PAYMENT-SIGNATURE","required":false,"schema":{"type":"string"},"description":"x402 v2 wallet authorization on the unchanged gateway retry when activated. No customer API key or prior account is required."},{"in":"header","name":"X-FAHCE-Discovery-Source","required":false,"schema":{"type":"string","maxLength":80,"pattern":"^[A-Za-z0-9_.:-]{1,80}$"},"description":"Optional acquisition source; never include candidate text or credentials."}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineRequest"},"example":{"schema":"FAHCE_MACHINE_REQUEST_V1","candidate_output":"Deployment completed successfully.","evidence":[{"id":"deployment_log","kind":"log","source_label":"independent deployment log","text":"Deployment failed."}]}}}},"responses":{"200":{"description":"Completed bounded determination and immutable origin receipt. Inspect verification.verified, billing and claim support. Immutable origin charge fields remain null; retain the separate gateway PAYMENT-RESPONSE for paid settlement.","headers":{"FAHCE-Recovery-Token":{"description":"Cryptographically random purchase-specific recovery token; only its protected verifier is stored; use Authorization: FAHCEReceipt <value> on GET /api/v1/receipts/{receipt_id}.","schema":{"type":"string"}},"PAYMENT-RESPONSE":{"description":"Gateway-generated base64 JSON settlement receipt after settlement. Zero-settlement gateway receipt behavior remains to be verified. The origin never creates it.","schema":{"type":"string"}}},"content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineResponse"}}}},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"401":{"description":"Legacy credentials or a receipt-only read capability are missing or invalid; commercial wallet purchase requires no prior key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"402":{"description":"Gateway payment required: decode PAYMENT-REQUIRED and retry unchanged with PAYMENT-SIGNATURE from an x402 v2 client. This response is generated by the gateway; its body is provider-defined and is not a FAHCE MachineError envelope. Use the PAYMENT-REQUIRED header.","headers":{"PAYMENT-REQUIRED":{"description":"Base64-encoded x402 v2 JSON requirements; upto amount is the authorized maximum.","schema":{"type":"string"}}}},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"409":{"description":"Conflicting key or repeated paid delivery. Read the retained receipt and reconcile an unknown gateway charge before authorizing another payment. Revised input requires a new key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}},"x-fahce-error-codes":{"IDEMPOTENCY_CONFLICT":"Key or authorization reused with conflicting input, operation or account","PURCHASE_ALREADY_COMPLETED":"No second execution; use the scoped recovery route","DELIVERY_RECOVERY_IN_PROGRESS":"Original execution is reserved; recovery is pending","PAYMENT_RECONCILIATION_PENDING":"Original purchase did not reach completed delivery; reconcile before another payment","PAYMENT_AUTHORIZATION_CONFLICT":"Authorization bound to changed operation/input"}},"413":{"description":"The complete UTF-8 JSON body exceeds 524288 bytes; reduce the aggregate body, including JSON overhead.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"415":{"description":"Send JSON with Content-Type: application/json.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"422":{"description":"A valid contracted determination was not produced or a repair plan is held/invalid. No origin settlement instruction is issued. Exact-scheme gateway charging on errors remains unverified; request reconciliation before another authorization.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"500":{"description":"Processing failed; preserve the purchase evidence and request reconciliation. Do not authorize another payment automatically.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/receipts/{receipt_id}":{"get":{"operationId":"fahce_get_receipt","description":"Read one immutable response without another payment or determination quota. Wallet-only buyers use Authorization: FAHCEReceipt <receipt capability>; legacy owners can use their existing key/session. response.request_id equals this receipt_id.","security":[{"receiptAccess":[]},{"pilotBearer":[]},{"pilotSession":[]}],"parameters":[{"in":"path","name":"receipt_id","required":true,"schema":{"type":"string","format":"uuid"}}],"responses":{"200":{"description":"Stored immutable response while retained, or safe EXPIRED metadata after the private-content window","content":{"application/json":{"schema":{"oneOf":[{"$ref":"#/components/schemas/MachineResponse"},{"type":"object","required":["status","private_content_available"],"properties":{"status":{"const":"EXPIRED"},"private_content_available":{"const":false}}}]}}}},"401":{"description":"Legacy credentials or a receipt-only read capability are missing or invalid; commercial wallet purchase requires no prior key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"404":{"description":"Receipt not found or not owned by this account","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/machine/preflight":{"post":{"operationId":"fahce_machine_input_preflight","security":[],"description":"Free syntactic screening only: no evidence determination, plan, payment authority or eventual-billability guarantee. The complete wrapper body has the same 524288 UTF-8-byte cap.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["operation","request"],"properties":{"operation":{"enum":["diagnose","repair","verify","repair-bundle"]},"request":{"$ref":"#/components/schemas/MachineRequest"}}}}}},"responses":{"200":{"description":"Syntax accepted; engine_executed=false and billability_guaranteed=false"},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"413":{"description":"The complete UTF-8 JSON body exceeds 524288 bytes; reduce the aggregate body, including JSON overhead.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"415":{"description":"Send JSON with Content-Type: application/json.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/machine/recovery":{"post":{"operationId":"fahce_recover_purchase","security":[],"description":"Free nonexecuting recovery using a cryptographically random purchase-scoped token in JSON. Only its protected verifier is stored. Tokens never go in URL parameters. No second payment or execution; retained content is unavailable after expiry. A UUID or claimed address grants no access.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["recovery_token"],"properties":{"recovery_token":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$"},"receipt_id":{"type":"string","format":"uuid"}}}}}},"responses":{"200":{"description":"RECOVERABLE wrapper containing immutable result, or safe EXPIRED metadata with no private content"},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/machine/recovery/claim":{"post":{"operationId":"fahce_report_lost_first_response","security":[],"description":"Free unverified intake only. A lost first response requires separate verified original-purchase evidence; no private content or new payment is authorized.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["reference"],"properties":{"reference":{"type":"string","minLength":1,"maxLength":160},"transaction_hash":{"type":"string","pattern":"^0x[a-fA-F0-9]{64}$"}}}}}},"responses":{"202":{"description":"PENDING_RECONCILIATION, content_released=false, repeat_payment_required=false"},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/machine/recovery/ack":{"post":{"operationId":"fahce_acknowledge_delivery","security":[],"description":"Free credential-authenticated acknowledgement of the immutable response hash; does not prove settlement or run analysis.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["recovery_token","response_hash"],"properties":{"recovery_token":{"type":"string","pattern":"^[A-Za-z0-9_-]{43}$"},"response_hash":{"type":"string","pattern":"^[a-f0-9]{64}$"}}}}}},"responses":{"200":{"description":"Delivery acknowledged; gateway_settlement_confirmed=false"},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/machine/refunds/destination-proof":{"post":{"operationId":"fahce_verify_refund_destination","security":[],"description":"Verify a fresh operator-issued challenge for an independently verified beneficiary. Signature proves destination control only; no transfer, refund approval or signing occurs.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["dispute_id","message","signature"],"properties":{"dispute_id":{"type":"string","format":"uuid"},"message":{"type":"string","maxLength":1500},"signature":{"type":"string","pattern":"^0x[a-fA-F0-9]{2,8192}$"}}}}}},"responses":{"200":{"description":"Destination verified; refund_approved=false and refund_transferred=false"},"403":{"description":"Gateway payment context or receipt-only capability is invalid/missing; payment does not grant owner permissions.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"409":{"description":"Conflicting key or repeated paid delivery. Read the retained receipt and reconcile an unknown gateway charge before authorizing another payment. Revised input requires a new key.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}},"x-fahce-error-codes":{"IDEMPOTENCY_CONFLICT":"Key or authorization reused with conflicting input, operation or account","PURCHASE_ALREADY_COMPLETED":"No second execution; use the scoped recovery route","DELIVERY_RECOVERY_IN_PROGRESS":"Original execution is reserved; recovery is pending","PAYMENT_RECONCILIATION_PENDING":"Original purchase did not reach completed delivery; reconcile before another payment","PAYMENT_AUTHORIZATION_CONFLICT":"Authorization bound to changed operation/input"}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}},"/api/v1/machine/refunds/disputes":{"post":{"operationId":"fahce_report_billing_error","security":[],"description":"Free bounded dispute intake. References correlate a report; they do not establish charge or entitlement. Destination verification, operator approval and founder-controlled transfer remain separate.","requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["category"],"properties":{"category":{"enum":["DUPLICATE_CHARGE","OVERCHARGE","UNDELIVERED_UNRECOVERABLE","NONBILLABLE_CHARGE","OTHER_BILLING_ERROR"]},"receipt_reference":{"type":"string","maxLength":160},"transaction_hash":{"type":"string","pattern":"^0x[a-fA-F0-9]{64}$"},"reported_atomic_units":{"type":"integer","minimum":0,"maximum":100000000}}}}}},"responses":{"202":{"description":"INTAKE_UNVERIFIED: charge_confirmed=false, refund_approved=false, refund_transferred=false"},"400":{"description":"Correct invalid input before retrying.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"429":{"description":"Rate or quota reached. Unchanged completed retries remain idempotent; wait when rate limited.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}},"503":{"description":"Payment acceptance, legal publication, resources or receipt integrity unavailable. No completed determination is claimed; preserve purchase evidence.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/MachineError"}}}}}}}},"components":{"securitySchemes":{"x402Payment":{"type":"apiKey","in":"header","name":"PAYMENT-SIGNATURE","description":"Wallet-only x402 v2 retry after gateway HTTP402. No prior API key or account and no mandatory Idempotency-Key; origin trusts only gateway-signed PAYMENT-CONTEXT."},"receiptAccess":{"type":"apiKey","in":"header","name":"Authorization","description":"FAHCEReceipt <FAHCE-Recovery-Token>. Receipt-only capability returned by the origin; scoped to the exact receipt UUID, not another purchase or privileged action."},"pilotBearer":{"type":"http","scheme":"bearer","description":"Existing human/owner credential for historical receipt access only. It never authorizes a commercial machine POST."},"pilotSession":{"type":"apiKey","in":"cookie","name":"fahce_pilot_session","description":"Current authenticated session backed by a repair-scope pilot key. Mutating requests require an Origin header matching this API origin. Payment authorization is separate."}},"schemas":{"MachineRequest":{"type":"object","additionalProperties":false,"required":["schema","candidate_output","evidence"],"description":"The entire UTF-8 encoded JSON body must fit within 524288 bytes (512 KiB), including all fields, labels, escaping and JSON overhead. Per-field maxima are independent ceilings; they cannot all be used at once. MCP includes its JSON-RPC wrapper in the same body ceiling. Character limits are UTF-16 code units.","x-fahce-request-bytes":524288,"properties":{"schema":{"const":"FAHCE_MACHINE_REQUEST_V1"},"candidate_output":{"type":"string","minLength":1,"maxLength":200000,"description":"The exact candidate output to diagnose or verify. Never use payment evidence as semantic evidence."},"expected_output":{"type":"string","maxLength":200000,"description":"Optional response-contract and repair-target context for all operations, including Diagnose. Supported response-format directives (for example, Return JSON) and implemented explicit constraints can affect the diagnosis. Ordinary matching or mismatching factual text is not compared for string equality and is not a trusted answer oracle or supporting evidence; supply independent evidence for factual claims."},"evidence":{"type":"array","maxItems":12,"items":{"type":"object","additionalProperties":false,"required":["id","kind","source_label","text"],"properties":{"id":{"type":"string","pattern":"^[A-Za-z0-9_-]{1,64}$"},"kind":{"enum":["log","paste","document","description"]},"source_label":{"type":"string","maxLength":160},"text":{"type":"string","maxLength":200000},"claim_bearing":{"type":"boolean"}}}}}},"MachineResponse":{"type":"object","additionalProperties":false,"required":["schema","operation","request_id","input_hash","diagnosis","repair","verification","billing","receipt","next_safe_action"],"properties":{"schema":{"const":"FAHCE_MACHINE_RESPONSE_V1"},"billing":{"type":"object","required":["billable","free_retry","reason","determination_status"],"properties":{"determination_status":{"enum":["DETERMINATION_COMPLETE","DETERMINATION_COMPLETE_NEGATIVE","DETERMINATION_NOT_PRODUCED"]},"billable":{"type":"boolean"},"free_retry":{"type":"boolean"},"reason":{"type":["string","null"]}}},"operation":{"enum":["diagnose","repair","verify","repair-bundle"]},"request_id":{"type":"string","format":"uuid","description":"Determination UUID, identical to receipt.case_id and receipt.run_id. Use this UUID as receipt_id in GET /api/v1/receipts/{receipt_id}. Error-envelope request_id is a separate HTTP trace; use its receipt_id when present."},"input_hash":{"type":"string","pattern":"^[a-f0-9]{64}$"},"binding":{"type":"object","required":["actor_id","tenant_id","nonce","idempotency_key"],"properties":{"operation_scope":{"type":"string","enum":["machine:diagnose","machine:repair","machine:verify","machine:repair-bundle"]},"actor_id":{"type":"string"},"tenant_model":{"enum":["PILOT_USER_ISOLATION","PAYMENT_CONTEXT_ISOLATION"],"description":"Cloudflare wallet-only purchases use PAYMENT_CONTEXT_ISOLATION: one authorization-bound principal, no human account privileges. Legacy key calls use PILOT_USER_ISOLATION."},"tenant_id":{"type":"string"},"credential_id":{"type":["string","null"],"description":"Null for wallet-only Cloudflare machine purchases. A credential exists only for legacy key-backed calls; it is never a prerequisite for an ordinary paid buyer."},"nonce":{"type":"string"},"idempotency_key":{"type":"string"},"payment_context_hash":{"type":["string","null"]}}},"evidence_provenance":{"type":"array","items":{"type":"object","required":["id","item_id","sha256","source_label","trust"],"properties":{"id":{"type":"string"},"item_id":{"type":"string"},"sha256":{"type":"string"},"source_label":{"type":"string"},"trust":{"const":"CALLER_SUPPLIED_NOT_AUTHENTICATED_SOURCE"}}}},"execution_state":{"type":"object","properties":{"claimed_execution":{"enum":["ASSERTED","NOT_ASSERTED"]},"provable_execution":{"enum":["NOT_PROVEN","PARTIALLY_PROVEN"]},"action_details":{"type":"array","items":{"type":"object"}},"action_classification":{"type":"array","items":{"enum":["PERMISSION","APPROVAL","INTENT","REQUESTED_ACTION","QUEUED_ACTION","ATTEMPTED_ACTION","FAILED_ACTION","NONEXECUTION","REVERSED_ACTION","CLAIMED_COMPLETED_ACTION"]}},"notes":{"type":"string"}}},"authority":{"type":"object","properties":{"payment_approval":{"type":"string"},"integrity_support":{"type":"string"},"external_verification":{"const":"NOT_ESTABLISHED"},"permission_to_execute":{"const":"NOT_GRANTED"}}},"diagnosis":{"type":"object","additionalProperties":false,"required":["state","claims","contradictions","missing_evidence","missing_evidence_details","claim_ceiling"],"properties":{"evidence_coverage":{"type":"array","items":{"type":"object","required":["item_id","status","available_characters","inspected_characters","reasons"],"properties":{"item_id":{"type":"string"},"status":{"enum":["INSPECTED","PARTIAL","OMITTED"]},"byte_inspection":{"enum":["INSPECTED","OMITTED"],"description":"Source bytes inspected; this does not establish semantic interpretation of every field."},"available_characters":{"type":"integer","minimum":0},"inspected_characters":{"type":"integer","minimum":0},"reasons":{"type":"array","items":{"type":"string"}},"semantic_fields":{"type":"array","items":{"type":"object","required":["ref","source_location","subject","context","field","value","semantic_status","reason","relevant_to_claim"],"properties":{"ref":{"type":"string"},"source_location":{"type":"object","properties":{"line":{"type":["integer","null"]},"json_pointer":{"type":"string"}}},"subject":{"type":"string"},"context":{"type":"object","additionalProperties":{"type":"string"}},"field":{"type":"string"},"value":{},"semantic_status":{"enum":["INTERPRETED","UNINTERPRETED"]},"reason":{"type":["string","null"]},"relevant_to_claim":{"type":"boolean"}}}}}}},"hold_reason":{"type":"object"},"state":{"enum":["HOLD","BLOCK","QUARANTINE","REPAIR_REQUIRED","CLEAR_WITH_CEILING"]},"claims":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["id","claim","source","support","evidence_refs"],"properties":{"id":{"type":"string"},"claim":{"type":"string"},"source":{"type":"string"},"support":{"enum":["SUPPORTED","UNSUPPORTED","CONTRADICTED","UNVERIFIED"]},"evidence_refs":{"type":"array","items":{"type":"string"}},"review":{"type":"object"}}}},"contradictions":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["id","claim_id","reason","evidence_refs"],"properties":{"id":{"type":"string"},"claim_id":{"type":"string"},"reason":{"type":"string"},"evidence_refs":{"type":"array","items":{"type":"string"}}}}},"missing_evidence":{"type":"array","items":{"type":"string"}},"missing_evidence_details":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["scope","family","requirement"],"properties":{"scope":{"enum":["CLAIM","CASE"]},"claim_id":{"type":"string"},"family":{"type":"string"},"requirement":{"type":"string"}}}},"claim_ceiling":{"type":"string"}}},"repair":{"anyOf":[{"type":"object","additionalProperties":false,"required":["plan","treatment","proposed_output","status"],"properties":{"status":{"const":"PROPOSED_NOT_EXECUTED"},"proposed_output":{"type":["string","null"]},"treatment":{"type":["object","null"]},"plan":{"type":"object","required":["required","bounded_steps","authority_note"],"properties":{"required":{"type":"boolean"},"authority_note":{"type":"string"},"validated_ir":{"type":"object"},"claim_corrections":{"type":"array","items":{"type":"object"}},"bounded_steps":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["step","boundary"],"properties":{"step":{"type":"string"},"boundary":{"type":"string"}}}}}}}},{"type":"null"}]},"verification":{"type":"object","additionalProperties":false,"required":["verified","scope","external_execution_verified"],"properties":{"verified":{"type":"boolean"},"scope":{"type":"string"},"external_execution_verified":{"const":false}}},"receipt":{"type":"object","additionalProperties":false,"required":["case_id","run_id","input_hash","result_hash","hash_scheme","provider","model","engine_version","created_at","response_hash_scheme","response_hash","payment_status","payment_receipt","settled_price_atomic_units"],"properties":{"case_id":{"type":"string","format":"uuid"},"provider":{"type":"string"},"model":{"type":"string"},"engine_version":{"type":"string"},"created_at":{"type":"string","format":"date-time"},"hash_scheme":{"enum":["SHA256_CANONICAL_JSON_RESULT_WITH_EMPTY_RESULT_HASH_V1","SHA256_SORTED_JSON_RESULT_WITH_EMPTY_RESULT_HASH_V2"]},"response_hash_scheme":{"enum":["SHA256_JSON_RESPONSE_WITH_EMPTY_RESPONSE_HASH_V1","SHA256_SORTED_JSON_RESPONSE_WITH_EMPTY_RESPONSE_HASH_V2"]},"run_id":{"type":"string","format":"uuid"},"input_hash":{"type":"string","pattern":"^[a-f0-9]{64}$"},"result_hash":{"type":"string","pattern":"^[a-f0-9]{64}$"},"response_hash":{"type":"string","pattern":"^[a-f0-9]{64}$"},"payment_status":{"enum":["PILOT_KEY_NO_PAYMENT","AUTHORIZED_PENDING_GATEWAY_SETTLEMENT"]},"payment_receipt":{"type":"null","description":"Immutable origin receipt; separate gateway PAYMENT-RESPONSE is retained by the buyer."},"settled_price_atomic_units":{"type":"null","description":"Origin has no confirmed gateway settlement amount. Financial confirmation is recorded separately; the original response remains immutable and settlement is never inferred."}}},"next_safe_action":{"type":"object","additionalProperties":false,"required":["action","reason"],"properties":{"action":{"type":"string"},"reason":{"type":"string"}}}}},"MachineError":{"type":"object","additionalProperties":false,"required":["error","request_id","billing"],"properties":{"error":{"type":"string","description":"Stable error code. A valid completed negative Verify is HTTP200 and billable; verification.verified=false is not a processing failure. Unsupported processing and held/invalid plans are nonbillable and may return HTTP422 with safe metadata only. An HTTP error is not proof of no gateway charge."},"message":{"type":"string"},"error_class":{"type":"string"},"request_id":{"type":"string"},"receipt_id":{"type":"string","format":"uuid","description":"Reference only; it does not authorize private content access."},"purchase_id":{"type":"string","pattern":"^[a-f0-9]{64}$"},"recovery_status":{"const":"PENDING_RECONCILIATION"},"private_content_released":{"const":false},"billing":{"type":"object","additionalProperties":false,"required":["billable","free_retry","reason"],"properties":{"billable":{"const":false},"free_retry":{"const":true},"reason":{"type":"string"}}}}}}},"legal_documents":{"status":"PUBLISHED_OWNER_APPROVED","publication_hash":"1deba60d2149bae8aeb057a8198f044602a6a6bb4ee20e9d41dece64c87b2ea5","approved_at":"2026-10-14T05:56:09.873Z","urls":{"terms":"https://fahce.kinganlogic.com/legal/terms","refunds":"https://fahce.kinganlogic.com/legal/refunds","privacy":"https://fahce.kinganlogic.com/legal/privacy","acceptable-use":"https://fahce.kinganlogic.com/legal/acceptable-use","data-handling":"https://fahce.kinganlogic.com/legal/data-handling","security":"https://fahce.kinganlogic.com/legal/security"},"acceptance":{"header":"FAHCE-Terms-Accepted","value":"1deba60d2149bae8aeb057a8198f044602a6a6bb4ee20e9d41dece64c87b2ea5","notice":"Review these policies before payment; the authorized customer or its agent accepts this exact published version by sending this header on the purchase request."},"company":{"legal_entity":"Max R.O.I. LLC","operating_brand":"Kingan Logic","entity_type":"Alabama domestic limited liability company","entity_id":"001-160-677","formation_date":"2024-10-29","formation_state":"Alabama, United States","website":"https://kinganlogic.com","contact":"logan@kinganlogic.com","registry":"https://www.sos.alabama.gov/government-records/business-entity-records","identity_provenance":"Founder-provided company facts and September 22, 2026 Alabama certificate of existence reference"},"liability_cap":"GREATER_OF_USD100_OR_PRIOR_12_MONTH_CUSTOMER_FEES;MANDATORY_EXCEPTIONS"}}