Skip to content

feat: autonomous x402 payments + pay-per-finding billing model - #13

Merged
hiuyear merged 3 commits into
mainfrom
hiuyear
May 26, 2026
Merged

feat: autonomous x402 payments + pay-per-finding billing model#13
hiuyear merged 3 commits into
mainfrom
hiuyear

Conversation

@hiuyear

@hiuyear hiuyear commented May 26, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Zero-fee unless vulnerable: scan is free, USDC charges only fire when a real finding is stored
  • Auto x402 on every finding: skill-adapter calls triggerPayment() immediately after storing each finding — no user action required
  • Orchestrator batch report: after a full /scan, Telegram master report shows total USDC charged, x402 order ID, and on-chain tx link
  • Pricing tiers (micro-USDC): Critical 0.010 · High 0.005 · Medium 0.003 · Low 0.001 · Info free

How auto-charge works

/scan http://target
→ 6 specialists run in parallel (each checks ERC-8004 scope grant)
→ each finding → stored + Telegram alert + x402 charge fires automatically
→ orchestrator sums all charges → master Telegram report:
💰 Total charged: 0.014 USDC (auto via x402)
✅ Payment fired automatically
Order: sc-0x1a2b...
Tx: 0x7ccc... → GOAT explorer link

If GOATX402_* env vars are not set, scans still complete — report notes
"x402 credentials not set — charge skipped."

Test plan

  • Start sandbox: node demo-target/sandbox.js
  • In Telegram: /scan http://localhost:4000
  • Verify master report arrives with finding list + total charged line
  • If x402 configured: confirm tx hash appears

hiuyear and others added 3 commits May 26, 2026 16:59
…everity

Co-authored-by: Cursor <cursoragent@cursor.com>
- skill-adapter: trigger x402 charge immediately after storing each finding; update billing status on Finding; return payment details in tool response
- orchestrator: clarify Telegram report — shows total charged, payment order, and tx link; warns if x402 credentials missing
- billing-model, activity-terminal, geo-attack-feed: hydration + pricing model fixes

Co-authored-by: Cursor <cursoragent@cursor.com>
@vercel

vercel Bot commented May 26, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openclaw-hackathon Error Error May 26, 2026 9:18pm

@hiuyear
hiuyear merged commit 1f2c882 into main May 26, 2026
1 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant