# Sharvora Catalog

## Active native products
- **service-proof** — `GET /api/v1/service-proof` — $0.001: Use as a low-cost end-to-end x402 canary before higher-value calls. A successful paid response proves Sharvora delivery and returns release, network, time and a response receipt.
- **risk-state** — `POST /api/v1/quant/risk-state` — $0.020: Use when an agent has an ordered numeric series and needs volatility, drawdown, anomaly and regime context before making a downstream decision.
- **anomaly-scan** — `POST /api/v1/quant/anomaly` — $0.030: Use to rank unusual observations in a supplied numeric series with transparent z-score and median-absolute-deviation evidence.
- **forecast-range** — `POST /api/v1/quant/forecast-range` — $0.050: Use for a simple probabilistic 80% range estimate from a supplied time series when an agent needs bounded uncertainty, not a trade instruction.
- **flow-monitor** — `POST /api/v1/quant/flow-monitor` — $0.030: Use to normalize supplied exchange, bridge and stablecoin inflow/outflow values into net-flow direction and intensity context.
- **decision-preflight** — `POST /api/v1/decision/preflight` — $0.050: Use immediately before an automated decision to check observation age, missing context and optional series risk for explicit warning conditions.
- **decision-journal** — `POST /api/v1/decision/journal` — $0.100: Use to create a durable auditable decision record with a stable decision_id, context hash, horizon, direction and confidence for later evaluation.
- **decision-bundle** — `POST /api/v1/decision/bundle` — $0.120: Use when an agent wants one payment and one response for freshness, completeness, risk, anomaly and forecast evidence over the same supplied series.
- **outcome-audit** — `POST /api/v1/decision/audit` — $0.050: Use after an outcome is known to compare it with a prior Sharvora decision record and calculate change and directional hit evidence.
- **trust-passport** — `POST /api/v1/web/trust-passport` — $0.150: Use when an agent wants one integrated trust purchase: combines agent readiness, bounded endpoint-risk heuristics, redirect evidence, HTTP policy, browser security headers and TLS posture into a scored evidence passport.
- **agent-readiness** — `POST /api/v1/web/agent-readiness` — $0.020: Use to audit whether a public website exposes machine-readable agent surfaces such as robots, sitemap, llms.txt/llms-full, OpenAPI, RFC 9727 API catalog, A2A discovery, x402 and security.txt.
- **redirect-audit** — `POST /api/v1/web/redirect-audit` — $0.020: Use to inspect a public URL redirect chain, cross-origin hops, loops and HTTPS-to-HTTP downgrade evidence with private-network redirect protection.
- **agent-endpoint-trust** — `POST /api/v1/web/endpoint-trust` — $0.050: Use before an agent trusts a public endpoint: combines bounded public fetching, redirect and browser-policy evidence, and a deterministic static scan for common prompt-injection and credential-exfiltration language.
- **http-policy** — `POST /api/v1/web/http-policy` — $0.030: Use to inspect a public HTTP response's cache, CORS, cookie and browser-policy posture as a point-in-time evidence snapshot.
- **security-headers** — `POST /api/v1/web/security-headers` — $0.020: Use for a no-login audit of a public HTTP(S) page's major browser security headers and a prioritized list of missing protections.
- **tls-report** — `POST /api/v1/web/tls-report` — $0.020: Use to check a public hostname's TLS certificate issuer, SAN coverage, cipher and expiry window without requiring credentials to the target site.
- **x402-validator** — `POST /api/v1/x402/validate` — $0.005: Use to inspect a public x402 URL without spending funds: confirms HTTP 402 behavior and decodes v2 payment metadata when available.
- **evidence-receipt** — `POST /api/v1/evidence/receipt` — $0.010: Use when an agent needs a deterministic SHA-256 content-integrity receipt for exact UTF-8 text. This is off-chain and does not claim notarization.
- **evidence-consensus** — `POST /api/v1/evidence/consensus` — $0.060: Use to measure agreement, freshness and contradictions across caller-supplied numeric observations with transparent confidence and weighting evidence.

## Preserved but unavailable
- **market-pulse** — unavailable: Legacy Market Pulse path retained for compatibility. Purchases are disabled until a license-safe live market source is configured and verified.
- **company-brief** — unavailable: Legacy Company Brief path retained for compatibility. Purchases are disabled until the production filing-source adapter is configured and verified.
- **risk-radar** — unavailable: Legacy Risk Radar path retained for compatibility. Purchases are disabled until licensed price/liquidity inputs are configured and verified.

## External direct providers
External entries in `/api/v1/catalog` are references only. They are purchased from their operators and are not Sharvora inventory.