IFF x402 Evidence Monitor

https://ifandonlyif.io

Evidence-first external monitoring for unpaid x402 v2 challenges. IFF publishes signed observations, dimensioned evidence cards, and an append-only transparency log. It does not claim TEE execution, remote attestation, payment safety, or a composite trust score.

52
reliability

Reliability & health

Uptime and response time from our own unpaid probes, plus the reliability score built from them.

7 days 30 days

Uptime

100.0% avg
0% 50% 100% Aug 30Sep 1Sep 4Sep 6

Response time

p50 228ms · p95 289ms
0ms 150ms 300ms Aug 30Sep 1Sep 4Sep 6
Data table
Reliability history per time bucket over the last 30 days (daily).
Bucket Uptime Probes Response time
8/30/2026, 12:00:00 AM 100% 12 232ms
8/31/2026, 12:00:00 AM 100% 21 224ms
9/1/2026, 12:00:00 AM 100% 20 231ms
9/2/2026, 12:00:00 AM 100% 21 228ms
9/3/2026, 12:00:00 AM 100% 21 236ms
9/4/2026, 12:00:00 AM 100% 20 224ms
9/5/2026, 12:00:00 AM 100% 21 221ms
9/6/2026, 12:00:00 AM 100% 8 230ms
52
Composite reliability — the weighted average of the dimensions below, on a 0–100 scale.
Availability
100

How often it was reachable when we probed it (weight 35%).

Latency
100

How quickly it answers when it is up — fast scores high (weight 20%).

Security
100

Whether it serves over working TLS / https (weight 15%).

Transparency
36

Whether the operator disclosed what it does — description, schema, identity (weight 15%).

Activity
not yet measured

Observed on-chain payments to this endpoint's wallet — transactions, volume, and distinct paying wallets over the last month (weight 15%; not yet measured when we have not seen its wallet settle).

Confidence 100% — how much probe evidence backs this score. A thin history is flagged, not hidden.

See the scoring methodology for exactly how each number is computed.

Payment

Currencies
—
Networks
—
Facilitator
unknown
SDK
unknown

Operator

Company
inferred — unknown
Jurisdiction
—
Registrar
—
Domain registered
—
Hosting network
CLOUDFLARENET
Hosting country
—

Operator context is derived from public RDAP/TLS records and unverified. Company and country are only available for endpoints that publish them (an OV/EV TLS certificate or a non-redacted domain record); most endpoints are CDN-fronted and disclose neither.

x402-payable