TxSentinel v1.0.0 - OKX.AI Genesis Hackathon

TxSentinel

A deterministic, non-custodial transaction policy firewall for autonomous agents. TxSentinel evaluates proposed actions before wallet signing and returns explainable ALLOW, HOLD, or DENY decisions with structured evidence and deterministic receipt hashes.

Highlights

• Free, non-binding preflight for fast READY, REVIEW, or BLOCKED routing
• Formal pay-per-check API built with the official OKX x402 Express, Core, Fetch, and EVM packages
• Prepayment validation: malformed or policy-invalid requests fail before any payment challenge
• Browser buyer flow with OKX Wallet on X Layer Testnet
• Three accepted test assets: USD₮0, USDG, and USDC
• Optional non-custodial X Layer policy and receipt anchor
• 30 passing policy, API, middleware, and contract tests

Live verification

• Product: https://txsentinel-okx.vercel.app
• Buyer settlement lab: https://txsentinel-okx.vercel.app/integrate.html
• Formal x402 endpoint: https://txsentinel-okx.vercel.app/api/check-paid
• Verified x402 settlement: https://www.okx.com/web3/explorer/xlayer-test/tx/0x78865316d773400a223c0e76aced95c25def2fba3f0335b79ba64ff70354f68d
• Canonical policy anchor: https://www.okx.com/web3/explorer/xlayer-test/address/0x295975cbec1673061d11c223b35a8513d1ebb213
• Evidence record: https://github.com/FeeeeelixWong/txsentinel-okx/blob/v1.0.0-genesis/EVIDENCE.md

The verified settlement transferred 0.01 test USD₮0 from the authorized buyer to the live seller payTo address through the official facilitator path. Its network, asset, amount, and recipient exactly match the production x402 challenge.

Judge path

1. Open the live product and run the three preflight scenarios.
2. Compare READY, REVIEW, and BLOCKED routing outcomes.
3. Open the buyer settlement lab and load the live 402 terms.
4. Inspect the verified settlement and deterministic evidence record.
5. Review the optional X Layer anchor and contract tests.

Security boundary

TxSentinel is read-only and non-custodial. It never receives private keys, cannot sign or broadcast the protected transaction, and leaves final execution under explicit wallet control.

Release commit: 84c7470b7568d0e39ff6019a3c8214f0425c21d8