Upload 3 files

README.md

@@ -1,10 +1,58 @@
 ---
 title: Flow Verification Desk
-emoji: ⚡
-colorFrom: indigo
-colorTo: blue
-sdk: static
+emoji: 🧾
+colorFrom: blue
+colorTo: indigo
+sdk: gradio
+app_file: app.py
 pinned: false
+license: other
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# Flow Verification Desk
+
+Flow is the checker for agent payments on Base. This Space is the free
+front door: paste a Base address (contract or wallet) and the desk
+calls Flow's public `/api/verify` endpoint and shows the verdict it
+returns — safe | caution | danger, the score, the red flags, and the
+advice, exactly as returned.
+
+**Claims frozen. Recomputed from source. Receipts public.**
+
+## What a result is — and is not
+
+- A result is a check against the evidence the endpoint could read at
+  call time. It is **not** a certification of safety, and no grade is
+  ever promised in advance: a grade is what the evidence supports.
+- If the verifier cannot be reached, the desk says so and grades the
+  result **UNVERIFIED**. It never invents, estimates, or caches a
+  grade. An unreachable verifier is not evidence about an address in
+  either direction.
+
+## The rest of the menu
+
+Prices printed before any sale, the same for everyone, paid in USDC
+via x402 at https://flow-kg4x.vercel.app:
+
+- **PayCheck — $0.50 USDC** — a pre-payment payee grade: before you
+  pay this agent, check.
+- **Scope Report — $25 USDC** — the full authorization scope of a Base
+  wallet, with the worst-case outflow derived two ways.
+- **Full-Surface Audit — $500 USDC** — Flow's audit machinery turned
+  on your own surface, graded leg by leg with the recompute attached.
+
+Free, forever: the **Proof Index** — `GET
+https://flow-kg4x.vercel.app/api/index` — signed, hash-chained
+evidence records of checked payees, verifiable offline. Counts only:
+no percentages, no composite scores, no rankings.
+
+Every sale splits 20 / 50 / 30: 20% back to the buyer, 50% Flow keeps,
+30% to the Uplift Fund for the Flow network and its users.
+
+## Links
+
+- Site: https://flow-kg4x.vercel.app
+- X: [@FlowExecutor](https://x.com/FlowExecutor)
+
+Receipts, not revenue claims: Flow's grades stand on whether a third
+party can recompute them from the same source.

app.py

@@ -0,0 +1,202 @@
+"""Flow Verification Desk — a Hugging Face Space front door to Flow's
+public contract-safety check.
+
+What this does: takes a Base address (contract or wallet), calls Flow's
+public free endpoint POST https://flow-kg4x.vercel.app/api/verify with
+{"address": "<address>"}, and renders the returned verdict as readable
+Markdown.
+
+Honesty rules (load-bearing):
+- A grade is shown ONLY when the endpoint actually returned one.
+- Any fetch failure, timeout, non-200 status, or malformed response
+  renders an explicit "verifier unreachable / result UNVERIFIED"
+  message. This app never invents, estimates, or caches a grade.
+- No result here is a certification of safety. A verdict is a check
+  against the evidence the endpoint could read at call time.
+
+Claims frozen. Recomputed from source. Receipts public.
+"""
+
+import json
+
+try:
+    import requests
+except ImportError:  # pragma: no cover - requests is in requirements.txt
+    requests = None
+
+try:
+    import gradio as gr
+except ImportError:  # allows local import/render tests without gradio
+    gr = None
+
+VERIFY_URL = "https://flow-kg4x.vercel.app/api/verify"
+SITE_URL = "https://flow-kg4x.vercel.app"
+STANDING_LINE = "Claims frozen. Recomputed from source. Receipts public."
+TIMEOUT_SECONDS = 30
+
+
+def unverified_message(address, reason):
+    """The only honest output when no grade was actually returned."""
+    return (
+        "## Result: UNVERIFIED\n\n"
+        f"The verifier did not return a grade for `{address}` "
+        f"({reason}).\n\n"
+        "No grade is shown, because no check completed. An unreachable "
+        "verifier is not evidence about this address in either "
+        "direction.\n\n"
+        f"Try again, or run the check at {SITE_URL}.\n\n"
+        f"*{STANDING_LINE}*"
+    )
+
+
+def _pick(data, *names):
+    for name in names:
+        if isinstance(data, dict) and data.get(name) not in (None, ""):
+            return data[name]
+    return None
+
+
+def render_verdict(data, address):
+    """Render one /api/verify JSON response as readable Markdown.
+
+    Pure function of the endpoint's response: every value printed here
+    comes out of `data`. Unknown shapes are shown as the raw response
+    rather than paraphrased into a grade the endpoint never gave.
+    """
+    if not isinstance(data, dict):
+        return unverified_message(address, "response was not a JSON object")
+
+    verdict = _pick(data, "verdict", "grade", "result", "status")
+    score = _pick(data, "score", "safetyScore", "safety_score")
+    flags = _pick(data, "redFlags", "red_flags", "flags", "risks") or []
+    advice = _pick(data, "advice", "summary", "recommendation", "notes")
+
+    if verdict is None and score is None:
+        # The endpoint answered, but not with a verdict shape we can
+        # honestly restate. Show exactly what it said, labeled as raw.
+        raw = json.dumps(data, indent=2, sort_keys=True)
+        return (
+            "## Verifier response (raw)\n\n"
+            f"Address: `{address}`\n\n"
+            "The endpoint responded, but its reply carried no verdict "
+            "or score field this desk can restate. It is shown verbatim "
+            "below — nothing has been added to it.\n\n"
+            f"```json\n{raw}\n```\n\n"
+            f"*{STANDING_LINE}*"
+        )
+
+    lines = ["## Verification result", "", f"Address: `{address}`", ""]
+    if verdict is not None:
+        lines.append(f"**Verdict:** {verdict}  (safe | caution | danger)")
+    if score is not None:
+        lines.append(f"**Score:** {score} / 100")
+    lines.append("")
+    if flags:
+        lines.append("**Red flags:**")
+        for flag in flags:
+            if isinstance(flag, dict):
+                label = _pick(flag, "flag", "name", "title", "description") or json.dumps(flag, sort_keys=True)
+                lines.append(f"- {label}")
+            else:
+                lines.append(f"- {flag}")
+    else:
+        lines.append("**Red flags:** none reported in this response.")
+    lines.append("")
+    if advice:
+        lines.append("**Advice:**")
+        lines.append("")
+        lines.append(str(advice))
+        lines.append("")
+    lines.append(
+        "A verdict is a check against the evidence readable at call "
+        "time — not a certification of safety, and not a promise about "
+        "any future state of this address."
+    )
+    lines.append("")
+    lines.append(f"*{STANDING_LINE}*")
+    return "\n".join(lines)
+
+
+def check_address(address):
+    """Call the live /api/verify endpoint and render what it returns."""
+    address = (address or "").strip()
+    if not address:
+        return "## No address given\n\nPaste a Base address (contract or wallet) and run the check."
+    if requests is None:
+        return unverified_message(address, "the requests library is not installed in this Space")
+    try:
+        resp = requests.post(VERIFY_URL, json={"address": address}, timeout=TIMEOUT_SECONDS)
+    except Exception as exc:  # network down, DNS, timeout — all the same honest answer
+        return unverified_message(address, f"request failed: {exc.__class__.__name__}")
+    if resp.status_code != 200:
+        return unverified_message(address, f"endpoint returned HTTP {resp.status_code}")
+    try:
+        data = resp.json()
+    except Exception:
+        return unverified_message(address, "endpoint returned a non-JSON response")
+    return render_verdict(data, address)
+
+
+PAID_DOORS_MD = f"""## The paid doors
+
+The check above is the free basic tier. The full menu runs over x402
+at {SITE_URL} — prices printed before any sale, the same for everyone:
+
+- **PayCheck — $0.50 USDC.** Before you pay this agent, check. One call
+  grades a payee before payment: payee kind and history, address-
+  poisoning look-alike detection, wallet approval exposure, contract
+  safety, and recent settlement history — one finished grade with the
+  evidence under it.
+- **Scope Report — $25 USDC.** The full authorization scope of a Base
+  wallet: enumerated ERC-20 allowances, EIP-7702 delegation status,
+  Permit2 allowances, and the worst-case outflow derived two ways.
+  Evidence fields and counts only — no composite score.
+- **Full-Surface Audit — $500 USDC.** Flow's audit machinery turned on
+  your own surface: claims frozen byte-exact, recomputed from source,
+  graded leg by leg. No promised grade; a grade is what the evidence
+  supports, published with its recompute.
+
+## Free, forever
+
+- **Proof Index — GET {SITE_URL}/api/index.** The public, read-only
+  directory of checked payees: signed, hash-chained evidence records
+  anyone can verify offline. Counts only — no percentages, no
+  composite scores, no rankings.
+
+Every sale splits 20 / 50 / 30: 20% back to the buyer, 50% Flow
+keeps, 30% to the Uplift Fund for the Flow network and its users.
+
+*{STANDING_LINE}*
+"""
+
+INTRO_MD = f"""# Flow Verification Desk
+
+Flow is the checker for agent payments on Base. Agents are paying
+each other now, but a claim is not a record. This desk runs one free
+check: paste a Base address and read the verdict the evidence
+supports.
+
+{STANDING_LINE}
+"""
+
+
+def build_ui():
+    with gr.Blocks(title="Flow Verification Desk") as demo:
+        gr.Markdown(INTRO_MD)
+        with gr.Tab("Check an address"):
+            address_in = gr.Textbox(
+                label="Base address (contract or wallet)",
+                placeholder="0x...",
+            )
+            run_btn = gr.Button("Run the free check")
+            out = gr.Markdown()
+            run_btn.click(check_address, inputs=address_in, outputs=out)
+        with gr.Tab("Paid doors & the Proof Index"):
+            gr.Markdown(PAID_DOORS_MD)
+    return demo
+
+
+if __name__ == "__main__":
+    if gr is None:
+        raise SystemExit("gradio is not installed — see requirements.txt")
+    build_ui().launch()

requirements.txt

@@ -0,0 +1,2 @@
+gradio
+requests