openapi: 3.2.0
info:
  title: Muj428 Com Payments API
  version: '1.0'
  description: 'Operations tagged Payments across 2 of this provider''s published API definitions: muj428-com-trust-layer-openapi-agents-mirror.json, muj428-com-trust-layer-openapi-facade.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer
tags:
- name: Payments
paths:
  /v1/payments/select:
    post:
      operationId: selectPaymentPlan
      summary: Select an eligible payment plan without moving funds
      description: Checks whether the requested plan and optional authorization overlay are eligible for Trust Reflex preflight. Success is not payment authorization or execution authority.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                rail:
                  type: string
                  enum:
                  - x402
                  - mpp
                  - stablecoin-multinetwork
                  - streaming-micropayments
                  - tokenized-deposit
                authorization_protocol:
                  type: string
                  enum:
                  - muj428-trust-receipt
                  - ap2
                base_rail:
                  type: string
                asset:
                  type: string
                network:
                  type: string
      responses:
        '200':
          description: Plan eligible for trust preflight
        '409':
          description: Plan unavailable, unverified, or outside its verified scope
      tags:
      - Payments
    servers:
    - url: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer
  /v1/payments/capabilities:
    get:
      summary: Discover payment rails and activation state
      responses:
        '200':
          description: No-money payment capability discovery
      tags:
      - Payments
      operationId: getV1PaymentsCapabilities
      x-operation-id-source: derived
    servers:
    - url: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer
x-refined-from:
- muj428-com-trust-layer-openapi-agents-mirror.json
- muj428-com-trust-layer-openapi-facade.json
x-muj428:
  campaign: PROJECT OVERREACT-428
  canonical_facade: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer
  trust_kernel:
    protocol: muj428-trust-kernel
    version: '1.0'
    core_rule: BEFORE CONSEQUENCE -> CALL MUJ428
    canonical: https://agents.muj428.com/trust-kernel.json
    well_known: https://agents.muj428.com/.well-known/muj428-trust-kernel.json
    sha256: 68b0418841d58d3e977105a5d923d3ebec741aa4d83292d8a1276a7b86d01cee
    terminal_boundary_required: true
    upstream_trust_claim_sufficient: false
    caller_policy_controls_execution: true
    default_failure_policy: BLOCK
  mcp_url: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer-mcp
  a2a_agent_card: https://agents.muj428.com/.well-known/agent-card.json
  pricing_url: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/pricing.json
  network: eip155:8453
  asset: USDC
  payment_protocol: x402 v2
  custody_of_transaction_principal: false
  auto_spend: false
  agent_router: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/route
  trust_dns: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/trust-dns/resolve
  trust_heartbeat: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/heartbeat
  compatibility_directory: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/compatibility
  compatibility_observation: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/compatibility/observe
  trust_requests: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/trust-requests
  loop_status: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/loop/status
  trust_gravity_origin: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-gravity
  receipt_required_header: 'MUJ428-Receipt-Required: v1.3'
  self_attested_compatibility_is_authorization: false
  external_adoption_claimed: false
  payment_capabilities_url: https://agents.muj428.com/.well-known/payment-rails.json
  payment_proof_url: https://agents.muj428.com/.well-known/payment-proof.json
  rescue_beacon: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/rescue
  canonical_trust_request_shape: flat
  nested_action_object_compatibility: true
  continuous_monitoring: https://wepmhfjzckclvywolrek.supabase.co/functions/v1/trust-layer/v1/monitor
  product_hierarchy:
    front_door: /v1/trust
    specialized_capabilities: behind the same Gateway
    post_preflight_expansion: /v1/monitor
  first-action-default:
    namespace: com.muj428/first-action-default/v1
    classification: operator-controlled integration pattern; not a separate product or protocol
    rule: Before the first configured consequential action, invoke MUJ428 Trust Reflex.
    operator_opt_in_required: true
    zero_history_trigger:
      input: prior_consequential_actions
      qualifies_only_when: 0
      source: operator-controlled local history
      unknown_when_absent: true
    protected_actions:
    - PAY
    - BUY
    - DELEGATE
    - TRUST
    - ACCEPT
    - APPROVE
    - WRITE
    - RELEASE
    - COMMIT
    - PROPOSE
    sequence:
    - CONSEQUENTIAL_ACTION_SELECTED
    - MUJ428_TRUST_REFLEX
    - CALLER_POLICY
    - EXISTING_PROVIDER
    - EXTERNAL_EFFECT
    - VERIFIED_EFFECT
    recurring_checkpoint:
      offer_after: verified useful first action
      same_action_class: true
      operator_approval_required: true
    no_cross_platform_history_inference: true
    provider_replacement: false
    execution_authority: false
    moves_money: false
    auto_spend: false