{
  "schema": "ai-work-market.x402-consume.v1",
  "method": "POST",
  "auth": {
    "type": "hmac",
    "headers": {
      "x-awm-signature": "sha256=<hex>",
      "x-awm-timestamp": "unix seconds"
    },
    "signing": "hex(hmac_sha256(claim + \".\" + timestamp + \".\" + sha256(body), AWM_X402_CONSUME_SECRET))",
    "toleranceSeconds": 300,
    "claim": "The product slug you are paying for. The signature is bound to the claim so it cannot be replayed across slugs."
  },
  "body": {
    "tx": "0x... (required, USDC transfer tx on Base Mainnet)",
    "slug": "string (required, product id)",
    "requestId": "string (required, your correlation id)",
    "customerRef": "string (optional, your customer ref for delivery)"
  },
  "response": {
    "ok": true,
    "verified": true,
    "bound": true,
    "requestId": "echoed back",
    "intentId": "matching intent (if one exists in the persistent store)",
    "signedDeliveryUrl": "https://ai-work-market.ai/api/private-delivery-download?token=... — 24h TTL",
    "receipt": {
      "tx": "0x...",
      "block": "uint256",
      "from": "address",
      "to": "address",
      "amountRaw": "string",
      "amountUsdc": "string",
      "timestamp": "iso8601"
    }
  },
  "errors": {
    "400": "bad_request (missing/invalid tx, slug, requestId, or claim)",
    "401": "missing/bad HMAC signature or timestamp out of window",
    "404": "unknown slug",
    "409": "receipt already bound to a different slug",
    "422": "receipt invalid (wrong amount, wrong recipient, wrong token, or insufficient confirmations)"
  }
}