RSL DECLARATIONS · SIGNED EVIDENCE · HTTP X402
Coverage, decisions and limitations
Dynamic public HTTPS eligibility on secure routes, a separate reviewed origin set and clear limits. UNKNOWN never becomes permission.
Live source eligibility and trust boundary
LIVE: Secure Preflight and Gateway accept eligible public HTTPS URLs through a signed, public-network-only relay. The four origins in reviewed coverage are independently reviewed sources, not the dynamic eligibility limit. Stock x402 remains reviewed-origins-only. Robots, access restrictions, per-origin quotas and UNKNOWN outcomes still apply.
Rights Gateway: select the paid operation
LIVE Base USDC pricing: Secure Preflight 0.02 fresh / 0.05 deep per prepared settled report; Ingestion Gate 0.04 + 0.02 per distinct URL fresh or 0.06 + 0.04 per URL deep (1–4 eligible public HTTPS URLs); Revalidation 0.03 fresh / 0.06 deep. Stock x402 stays fresh-only 0.02 and reviewed-only. No new subscription, prepaid, API-key billing or invoicing plan is active.
A Secure Preflight may offer a disclosed paid UNKNOWN or no-declaration diagnostic after meaningful public-source observation. An outage with no usable source observation, invalid URL or exhausted safety budget is not billable Preflight. Gateway pricing covers a bounded observation attempt after verified authorization. UNKNOWN never authorizes content use.
SUPPORTED SECURE MODE: tested official TypeScript/Node x402 2.25.0 and Python x402 2.22.0 with the AcqPath SIWX adapter on /v1/rights/preflight; unchanged signer and random nonce, recommended when payer-signed request binding is required. SUPPORTED STOCK WIRE MODE: the same official stock clients without SIWX, custom nonce, signer or buyer hook on /v1/rights/preflight/x402, fresh only, 0.02 USDC. Stock binds one request atomically at first valid use; it does not sign the POST body in advance. Zero-config compatibility outside this fixed stock endpoint, stock SIWX-only hooks, Payments MCP and generic paid proxies are not supported by this integration.
Observed coverage
Reviewed exact origins: medium.com, theguardian.com, rslstandard.org and rslcollective.org. These four origin entries are not the total eligible HTTPS source universe. Read coverage_mode and dynamic_public_https in production capabilities.
Dynamic acceptance has public-network restrictions, robots controls and bounded global/per-origin budgets. Some sources expose no verifiable declaration. Stock x402 only supports reviewed origins.
Decision vocabulary
ALLOW_DECLARED: the supported profile observed a relevant allowance. DENY_DECLARED: a relevant prohibition was observed. LICENSE_REQUIRED: a licensing requirement was observed. UNKNOWN: insufficient, conflicting or unsupported evidence.
None of these outcomes verifies ownership. AcqPath does not acquire licenses or grant legal clearance.
What is not offered
No unrestricted crawl, guaranteed source access, license acquisition, ownership verification, provider-routing purchase, paid MCP delivery, automatic refund or legal clearance is offered. Dynamic HTTPS is safety-gated evidence collection, not permission for all websites.
One analysis may require multiple public metadata fetches. Current quotas and the single Railway relay have not been load-certified for 100,000 URLs per month. A signed report is not independent on-chain reconciliation.