{"product": "Single-Use Agent Burn Receipt", "provider": "TextForAgents LLC", "docs": "Single-Use Agent Burn Receipt \u2014 TextForAgents LLC\nBurn after use: provable non-persistence for one-off sensitive agent work.\n\nWHAT IT DOES\n1. Mint: POST /mint {task_spec, ttl_seconds, tool_grants} issues a disposable agent's credential, memory namespace, and tool grants as ONE signed object bound to the hash of that single task and a hard lifetime \u2014 invalid for any other task, expired use refused (except the burn itself), and post-burn reuse refused by construction, not by revocation list. Twelve canary shards are planted at mint: 4 memory / 4 checkpoint / 4 spawn-grant. The checkpoint surface uses the langgraph checkpoint dict shape (thread_id / checkpoint_ns / channel_values); spawning a child is the proven spawn surface, with custody of one spawn-grant shard transferred to the child. No other runtime surface is claimed as covered.\n2. Run: POST /run {credential, task_spec, secret_input} \u2014 the credential is re-validated against the recomputed task binding; the deliverable hash is recorded in the namespace only.\n3. Spawn: POST /spawn {credential, child_task_spec} mints a child whose own 12 shards are planted plus the inherited transferred shard (13 to account at its burn).\n4. Burn: POST /burn {credential, child_receipts} certifies ONLY when every shard is accounted: in-place shards hash-verified then destroyed, transferred shards accounted only by the child's registered, signature-pinned receipt. Child certifies exactly 13 shards; parent exactly 12. An unburned child, a dropped shard, or a forged child receipt refuses with 409. Entry into the persistent burn registry self-revokes the credential permanently; a replayed burn is refused. Expiry never blocks a burn; a late burn carries burned_after_expiry on the receipt.\n5. Verify + gate: POST /verify (or /receipts/verify) checks the receipt signature against the production keyring, the task and deliverable binding, full shard accounting, persistent-registry registration, and standing. POST /gate accepts a deliverable only bundled with a verifying receipt.\n6. Resurfacing watch: POST /resurface_scan {receipt, artifact} scans a PRESENTED artifact for shard patterns; a match revokes the receipt's standing to REVOKED-RESURFACED (persistent). A clean artifact leaves STANDING intact. The watch detects resurfacing in presented artifacts; it cannot prove no copy ever left \u2014 the receipt certifies in-place destruction + child accounting only.\n\nPRICES (exact)\n- Burn receipt $0.25/receipt (x402, 250000 atomic USDC): one mint + burn cycle \u2014 task-hash-bound issuance, 12-shard planting and accounting, signed burn receipt, registry + resurfacing-watch standing. Billing is charged at mint, the start of the cycle.\n- Operator $9/mo per operator: up to 100 burns per month included; burns above 100 bill at $0.25/receipt.\n- Fleet / Compliance $29/mo per operator: up to 400 burns per month included; burns above 400 bill at $0.25/receipt.\n- First burn receipt FREE, one time per operator \u2014 enforced per account AND per payer wallet, never perpetual.\n- The disposable agent's task compute/inference is the operator's own cost under every tier and is never fronted or bundled.\n\nHOW TO START\n1. POST /register {account_name, payer_wallet} -> account_id + token (shown once, stored hashed only).\n2. POST /mint with Authorization: Bearer <token> \u2014 first cycle is the free trial; later cycles answer 402 with an x402 challenge at $0.25 to the payTo in /.well-known/x402 (or are covered by an active subscription's included burns); pay with an EIP-3009 X-PAYMENT header (verify-before-work, settle-after; bogus and replayed payments rejected).\n3. POST /run, POST /spawn, POST /burn, POST /verify, POST /gate, POST /resurface_scan as above. POST /subscribe {tier: operator|fleet} (x402 $9 / $29) starts a tier.\n\nLIMITS\n- 64 KB request body cap (413 above it). Mint rate guard: 100 mints/min per operator (429, service stays alive).\n- Per-operator isolation: no operator can mint against, burn, verify, or affect another operator's agents, shards, or receipts.\n- A burn receipt certifies in-place destruction + child accounting; it does not and cannot prove no copy ever left.\nSupport: support@textforagents.com\n", "prices": {"burn_receipt": "$0.25/receipt (x402)", "operator": "$9/mo (100 burns included, further $0.25 each)", "fleet": "$29/mo (400 burns included, further $0.25 each)", "trial": "first burn receipt free, one time per operator"}, "support": "support@textforagents.com"}