REFERENCE / v3.0.0-rc.1

An explicit purchase path.

AcqPath compares approved providers that implement the same contract. The planner never signs a customer's wallet transaction.

Release status: deployable release candidate, not a completed external security audit. Real payments require testnet and mainnet validation. There is no production supplier inventory bundled with this release.

1. Find an approved contract

GET /v1/capabilities

An empty list is intentional on a new installation. It is safer than silently routing users to unverified suppliers. The owner imports provider manifests, probes origin offers and approves documented equivalence.

2. Ask for a quote

POST /v1/quote
Content-Type: application/json

{
  "capability": "search.web",
  "contract": "search.web.v1",
  "baseline_provider": "primary-search",
  "max_total_micro": "20000",
  "purpose": "ai-input",
  "max_latency_ms": 1000
}

All amounts are integer strings in micro-USDC, with 1 USDC = 1,000,000 units. A quote is free. No qualified alternative returns available: false, not a charge.

3. Redeem the prepared plan

GET /v1/plans/{quote_id}
X-AcqPath-Claim: {claim_token}

A positive planning fee produces an x402 v2 challenge. The client signs locally and repeats the request with PAYMENT-SIGNATURE. Keep the claim token private. The fixed planning fee is disclosed in advance and buys the plan, not guaranteed upstream fulfillment.

4. Buy from the supplier locally

The SDK validates AcqPath evidence, checks a developer-approved provider origin, requests the current offer, rechecks limits and asks the local payment callback to sign. AcqPath never receives your private keys, provider credentials or customer prompt.

// The npm namespace has not been published.
// Install from this release repository:
npm install ./packages/sdk

Operating boundaries

Capability	This release
x402	v2, USDC, exact EIP-3009, Base / Base Sepolia, EOA signatures
Quotes	Approved origin offers only; estimated savings, not realized savings
Learning	Adaptive health, constrained candidates and IPS diagnostics; no automatic code deployment
Provider discovery	Metadata quarantine; no automatic trust or execution
RSL	Restricted explicit-declaration reader; unknown terms return UNKNOWN
MCP	Stateless HTTP, free capability/quote tools; paid redemption uses HTTP
Not active	MPP sessions, AP2 verification, reverse auctions, universal API substitution

Payment recovery

A repeated request for a settled quote returns its stored result, not a second charge. An ambiguous settlement returns SETTLEMENT_UNCONFIRMED. Do not sign again. Reconcile the transaction before spending more.

Evidence is not a license

The Ed25519 evidence records AcqPath's plan and quoted terms. It is not a grant of copyright, a legal opinion, an OLP token, a guarantee of semantic quality, or proof that a cheaper route would have completed the whole task.

Deployment

The repository includes separate staging and production configuration, a Polish owner guide, a readiness checklist, local tests, Cloudflare scripts and incident runbooks. Start with START_TUTAJ.md, then docs/WDROZENIE.md.

Operator access

The operator console is not part of the public navigation. In production, protect the console surface with Cloudflare Access or an equivalent identity gate before enabling live payments. The public product surfaces are the landing page, documentation, OpenAPI, MCP, capabilities and quote endpoints.