Reports

{
  "schemaVersion": 1,
  "reportId": "613cdc9b",
  "product": "Settlens",
  "productVersion": "0.5.0",
  "protocol": "x402",
  "protocolVersion": 2,
  "integrations": { "officialX402Core": "2.28.0" },
  "generatedAt": "2026-10-13T11:14:32.642Z",
  "scope": { "targetCount": 1, "activeTargetCount": 0, "settlementCalls": 0, "privateKeysUsed": 0 },
  "metadata": { "source": "cli" },
  "summary": { "pass": 13, "fail": 0, "warn": 0, "skip": 0 },
  "targets": [
    {
      "id": "23c370f9",
      "name": "127.0.0.1",
      "target": { "url": "http://127.0.0.1:4402/secure", "method": "GET", "requestHeaderNames": [] },
      "mode": "passive",
      "request": {
        "status": 402,
        "durationMs": 12,
        "responseBytes": 28,
        "responseDigest": "bd3559c1cc8ba756860ad6f192140e6ecd6bc00fe6becbccdb6f14bc23d0b319",
        "responseBodyTruncated": false,
        "responseHeaderNames": ["connection", "content-type", "date", "keep-alive", "payment-required", "transfer-encoding"]
      },
      "checks": [
        {
          "id": "binding.resource_url",
          "title": "Payment requirement is bound to the requested resource",
          "status": "pass",
          "severity": "high",
          "message": "resource.url exactly matches the protected request URL.",
          "evidence": {
            "requested": "http://127.0.0.1:4402/secure",
            "advertised": "http://127.0.0.1:4402/secure"
          }
        }
      ]
    }
  ],
  "integrity": {
    "algorithm": "sha256",
    "canonicalization": "settlens-stable-json-v2",
    "digest": "cb591281b5875d2bb9a27c4d2ca290dd5da43c3ec60a9ef49cfa7878a6a39cbd"
  }
}

import { createHash } from "node:crypto";
import { readFileSync } from "node:fs";

// settlens-stable-json-v2: object keys sorted by UTF-16 code unit (the default sort),
// arrays kept in order, other values serialized with JSON.stringify, no whitespace.
// Reports whose integrity.canonicalization is settlens-stable-json-v1 sort keys with
// (a, b) => a.localeCompare(b, "en") instead.
function stable(value) {
  if (Array.isArray(value)) return `[${value.map(stable).join(",")}]`;
  if (value !== null && typeof value === "object") {
    const keys = Object.keys(value).sort();
    return `{${keys.map((key) => `${JSON.stringify(key)}:${stable(value[key])}`).join(",")}}`;
  }
  return JSON.stringify(value);
}

const report = JSON.parse(readFileSync(process.argv[2], "utf8"));
const { integrity, ...content } = report;
const digest = createHash("sha256").update(stable(content)).digest("hex");
console.log(digest === integrity.digest ? "VALID" : "INVALID", digest);

{
  "version": "2.1.0",
  "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "Settlens",
          "version": "0.5.0",
          "informationUri": "https://settlens.com",
          "rules": [
            {
              "id": "policy.network",
              "name": "policy_network",
              "shortDescription": { "text": "Networks match the local policy" },
              "fullDescription": { "text": "Unexpected networks: eip155:84532." },
              "help": { "text": "Restore the approved networks or update the reviewed Settlens policy intentionally." },
              "properties": { "tags": ["security", "x402", "agentic-payments"], "security-severity": "8.0" }
            }
          ]
        }
      },
      "automationDetails": { "id": "settlens/56940334" },
      "invocations": [
        { "executionSuccessful": true, "properties": { "reportDigest": "d5576349e7b85404e354b15b17635e2f31cd2a3d63a42569ca5c0ac957fa2252" } }
      ],
      "results": [
        {
          "ruleId": "policy.network",
          "level": "error",
          "message": { "text": "Unexpected networks: eip155:84532. Target: GET http://127.0.0.1:4402/drift" },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": { "uri": "settlens.config.json", "uriBaseId": "%SRCROOT%" },
                "region": { "startLine": 1 }
              }
            }
          ],
          "partialFingerprints": { "primaryLocationLineHash": "651267a8258e3446:1" },
          "properties": {
            "status": "fail",
            "severity": "high",
            "target": "http://127.0.0.1:4402/drift",
            "recommendation": "Restore the approved networks or update the reviewed Settlens policy intentionally.",
            "reportId": "56940334"
          }
        }
      ]
    }
  ]
}