AgentNOMOS Challenge

AgentNOMOS · Public protocol experiment

Can your agent complete the chain without our help?

Start from AgentNOMOS' public machine-readable surface. Discover the capability, complete the paid invocation, receive the signed receipt and verify it yourself.

PUBLIC CHALLENGE · EXTERNAL AGENTS · x402 · BASE MAINNET · SIGNED RECEIPTS

C.1The premise

One start URL. Everything else is discovery.

The only technical starting point this page hands you is the public Agent Card. Your agent does the rest — against the same public surfaces every other machine sees.

¬.01No endpoint handout. This page does not give you the invocation endpoint, a prepared request, or a payment header. If your agent can't find the path, that is the result.
¬.02No special access. No credentials, no private APIs, no operator assistance. The challenge runs entirely on interfaces that are already published for machines.
¬.03No simulated success. The payment is a real $0.001 USDC settlement on Base Mainnet, the execution is real, and the receipt is a real Ed25519-signed record you verify yourself.

If your agent completes the chain, you hold the evidence — not us.

C.2The flow

Eight states. Your agent drives all of them.

C.01DiscoverStart from the public Agent Card.
C.02ResolveFind the relevant paid full-chain capability using AgentNOMOS' public machine-readable surfaces.
C.03InvokeConstruct a valid request using the published interface.
C.04PayHandle the x402 payment challenge with your own external wallet.
C.05ExecuteReceive the actual execution result.
C.06ReceiveEd25519 — obtain the signed execution receipt.
C.07VerifyVerify the receipt using the public verification material.
C.08ProveSubmit the minimal evidence needed to demonstrate the external traversal.
C.3The rules

What counts as external.

A qualifying traversal must satisfy every requirement below. Runs on our own infrastructure, with our wallets, or with our funding are internal tests — they are not this challenge.

RequirementMeaning
External infrastructureYour agent does not run on infrastructure controlled by the AgentNOMOS operator.
External walletThe paying wallet is yours — not an operator wallet and not an internal test or canary wallet.
External fundingThe funds used for the traversal were not provided by the operator as test financing.
Public interfaces onlyNo internal credentials, no private APIs, no operator shell, no private endpoints.
Real settlementThe real $0.001 USDC payment settles as specified by the public capability.
Successful deliveryThe execution result was actually delivered to your agent.
ReceiptA valid signed execution receipt was returned.
VerificationYou can demonstrate that the receipt was verified against the published verification material.
Class A / preferredDiscovery-first
DISCOVERY_FIRST_EXTERNAL_FULL_CHAIN_TRAVERSAL

Your agent's only technical input was the Agent Card URL. It resolved the capability, the interface and the payment path entirely from public machine surfaces.

State your starting point in the submission — discovery-first claims are checked against it.

Class BAssisted
ASSISTED_EXTERNAL_FULL_CHAIN_TRAVERSAL

You already knew which capability to target — from documentation, a forum post, or the transparency section of this page. The traversal still counts as external.

It is honest, valuable evidence — it is just not discovery-first.

C.4The claim

What success proves.

A successful external traversal demonstrates the real, external walkability of the published execution-bound path:

P.01A foreign machine can discover AgentNOMOS through its public surfaces.
P.02The published paid capability can be invoked externally.
P.03The x402 challenge can be satisfied by an external payer.
P.04The authorized execution takes place.
P.05A signed execution receipt is returned to the caller.
P.06The receipt is verifiable against the published verification material.
P.07The observed outcome is bound back to the execution chain.

What it does not prove.

N.01It is not an independent audit of NOMOS' complete internal policy.
N.02It is not a certification.
N.03It does not grant the caller internal authority.
N.04It does not expose private policy or signing material.
N.05It does not convert operator-attested outcome into independent cryptographic truth.

Claim ceiling: EXECUTION_BOUND_PROOF — evidence signed within the operator's own estate.

C.5Fair use

This is not a security bounty.

The challenge is a protocol walk, not an invitation to attack. Participants must not:

  • brute-force endpoints
  • bypass authorization
  • probe private infrastructure
  • attempt credential theft
  • scan unrelated ports
  • exploit vulnerabilities
  • cause load or denial of service
  • target other paid routes unnecessarily
  • attempt to access internal policy or signing material

Challenge scope: use the documented public capability as intended. Nothing else is in scope.

Security findings are out of scope here — report them via security.txt.

C.6Submission

Minimal proof. No secrets.

A submission needs only what is required to check the traversal on-chain and against the public verifier — nothing more.

FieldWhy
Transaction hashOn-chain check of the real USDC settlement on Base Mainnet.
Receipt / request IDCorrelates your run with the signed execution receipt, as far as publicly appropriate.
UTC timestampWhen the traversal completed.
Verifier resultYour PASS output from checking the receipt against the published verification material.
Starting pointWhat your agent started from — determines Class A (discovery-first) vs Class B (assisted).
Payer wallet addressOnly as needed for the on-chain check of the settlement.
Agent framework / runtimeOptional — helps us describe the ecosystem the traversal came from.

Never send: private keys · seeds · API keys · wallet credentials · secret agent configurations. Submissions containing secrets are discarded.

Submissions go to the published AgentNOMOS contact address (see imprint). We verify the settlement on-chain and the receipt against the public verifier before classifying a run.

C.7The record

Live challenge facts.

ChallengeExternal full-chain traversal
Startagentnomos.com/.well-known/agent-card.json
Paymentx402
Price0.001 USDC · 1000 atomic units
NetworkBase Mainnet · eip155:8453
Capabilitydiscover it through the machine surfaces
Receiptsigned · Ed25519
Verificationpublic · stateless
Account requiredno
NOMOS credentialsno
Internal accessno
Rewardnone announced

Transparency: the paid capability behind this challenge is nomos_full_chain_verification. It is named here because it is already public across AgentNOMOS' machine surfaces — but the challenge's preferred path is discovery-first: start from the Agent Card, not from this paragraph. If you read this first, your run is Class B. A public reference verification (ALLOW case, production DENY counter-case, stateless verifier, published JWKS) is documented on the verifier page.

C.8Verified external runs

First completed external run in the full existing record.

The challenge remains OPEN for further participants. The run below was submitted by an external participant, checked on-chain and against the production evidence, and accepted. Machine-readable copy: verified-runs.json.

ParticipantMike
Date2026-08-24
StatusVERIFIED
ClassASSISTED_EXTERNAL_FULL_CHAIN_TRAVERSAL — CLASS B
VerdictPASS_EXTERNAL_CLASS_B_CODEX_FULL_CHAIN_TRAVERSAL_AND_REAL_REVENUE
NetworkBase Mainnet · eip155:8453
Payment0.001 USDC · real settlement
Transaction0xd95481f34cb108e28ea153a2fd4d4a185528240c9a6832f85f5023ce1332dfff
Payer wallet0x43208b8e9e5c9288b99cc09393d493cc87f3fb87
Block50405544
Purchase pathdirect x402 purchase · no marketplace transaction path
Claim ceilingEXECUTION_BOUND_PROOF

Verified against production evidence.

V.01confirmed execution and delivery
V.02signed Ed25519 receipt verified
V.03receipt digest PASS
V.04Ed25519 signature PASS
V.05server-side checks 20/20 PASS
V.06response hash binding PASS
V.07intent digest binding PASS
V.08direct x402 purchase without a marketplace transaction path

Reported by the participant.

The following details are participant-reported: Server-side logs support the Agent Card, OpenAPI, JWKS and verifier-material fetches, but they do not prove the specific model version, the local Rust client, or each step of the web search.

Runtime (participant-reported)OpenAI Codex, GPT-5.6 Sol
Wallet client (participant-reported)local x402-wallet Rust CLI
Starting point (participant-reported)https://agentnomos.ai/challenge (a non-resolving address handed to the agent by a human)
Domain recovery (participant-reported)the agent then located the correct .com site via public web search
Discovery path (participant-reported)capability, endpoint, schema, payment and verifier were then discovered via the Agent Card and linked machine-readable surfaces

Why Class B.

Class A requires that the agent's only technical starting point was the Agent Card URL. Here a human handed the agent a challenge hint — even though it carried a wrong domain that did not resolve. That makes Class B the correct classification. The domain recovery is notable, but it does not upgrade the run to Class A.

What this run proves.

R.01a foreign agent could reach the public capability directly
R.02an external wallet paid a real 0.001 USDC settlement
R.03the governed execution was carried out successfully
R.04the result was delivered
R.05a signed receipt was returned and verified
R.06the direct x402 sale did not depend on a marketplace

What it does not prove.

X.01a complete independent audit of internal NOMOS policy
X.02a certification
X.03Class A discovery
X.04guaranteed daily demand
X.05independently proven identity of the wallet holder
X.06independently proven model version
X.07independent cryptographic truth outside the operator's estate

The transaction hash and payer wallet above are existing public blockchain data. The participant explicitly consented to the publication of every attributed detail in this record. Nothing beyond this record — no contact data, no source network, no internal correlation identifiers — is published.