add covenant-blockrun: trust receipts for BlockRun x402 calls (crate + daemon + TS/Python SDKs + paid verify) - #116

Open

mizuki0x wants to merge 22 commits into

mainfrom

Commits on Jul 20, 2026

docs(blockrun): partnership + phase-1 integration plan

mizuki0x
authored and
covenant
committed
add covenant-blockrun: x402 call receipt + verifiable-routing overlay (crate)

mizuki0x
authored and
covenant
committed
covenantd: wire blockrun overlay (tool registration + settlement receipt on paid calls)

mizuki0x
authored and
covenant
committed
add @covenant-org/blockrun (TS) + covenant-blockrun (Python) receipt SDKs

mizuki0x
authored and
covenant
committed
add blockrun-verify: x402-paid endpoint that verifies a BlockRun receipt + signs the result

iko-rane
authored and
covenant
committed
blockrun: live_verified_call demo — real paid call on Base, prints receipt + basescan link
mizuki0x
committed
blockrun: rustfmt the demo example
mizuki0x
committed
blockrun: demo reads the x402 key from a file path (COVENANT_X402_EVM_KEY), not just inline hex
mizuki0x
committed
blockrun: rewrap payment to CDP x402 v2 (accepted field) + treat provider-namespaced model as delivered
mizuki0x
committed
blockrun sdks: treat a provider-namespaced served model as delivered
mizuki0x
committed
blockrun-verify: treat a provider-namespaced served model as delivered
iko-rane
committed
blockrun-ts: modelBase without unchecked index access
mizuki0x
committed
blockrun-verify: modelBase without unchecked index access
iko-rane
committed
blockrun: fix python JCS integral-float formatting (78.0 -> 78) so digests match rust/ts; pin whole-float cross-language canary
mizuki0x
committed
blockrun-verify: pin whole-float cross-language digest canary
iko-rane
committed
blockrun: harden client - surface non-2xx, cap response size + spend, validate endpoint path, drop non-finite savings
mizuki0x
committed
blockrun sdks: ES-correct number/utf16 JCS, bounded stash, 2xx-gate, error sink, python async+stream-safe transport
mizuki0x
committed
blockrun-verify: 400 on un-canonicalizable receipt, validate price at boot, rename settled->hasSettlementTx
iko-rane
committed
blockrun: document key-file env + async/stream receipt timing + 2xx-only in demo and sdk readmes
mizuki0x
committed
blockrun-verify: warn at boot when sync-off + no cdp creds would 500 unpaid requests; document the flag
iko-rane
committed
blockrun: tighten comments, drop section divider and marketing adjective
mizuki0x
committed
blockrun-verify: trim self-referential comment
iko-rane
committed