ZEAM Labs LLC. Nothing on this page asks you to take our word: every line names the place you check it. There is no SOC 2 report, no ISO certificate and no pen-test letter to show you; what stands in their place is that the money, the ledger and the exit are on a public chain you can read without us.
Your collateral sits in the x402 batch-settlement escrow at 0x4020074e9dF2ce1deE5A9C1b5c3f541D02a10003. It is
not our contract: it is hardcoded in @x402/evm and was published by Coinbase before it existed on Base
(npm pack @x402/evm@2.12.0, then grep for the address). No owner, no pause, no upgrade, no sweep.
Deposits enter through its collectors, 0x4020806089470a89826cB9fB1f4059150b550004 (EIP-3009) and
0x4020425FAf3B746C082C2f942b4E5159887B0005 (Permit2). Read any of it free, no wallet, at
/verify.
The receiver 0xc60996007B7657DE2F39fA0577E97d7aAF3b7d1e only receives; it never signs. The settlement key
0x7116bf728132088d7819A93A980d002d8550bFc6 signs claims and refunds and holds gas, nothing else; it is the
receiverAuthorizer in every quote we publish. Your payer key signs each voucher on your machine; the
bridge we publish runs there, and no key of yours ever reaches us. A voucher is a ceiling you signed for the row you
paid; we cannot claim above it, and the chain refuses if we try.
A claim cashes what burned on the meter, never the ceiling. /healthz/books
reconciles our ledger against the escrow's Settled events and says whether they agree.
/healthz/settlement counts what settled, claimed and failed since this
process started. The paid audit_payers and audit_funders tools trace the same events; so does any
archive node. Every meter statement ({op:"off"} and {op:"on"} on the line socket) is signed by
0x7116bf728132088d7819A93A980d002d8550bFc6 over readable text, so what we claimed is legible even to a client that cannot recover the signature.
Ask on /pay and we return the unspent collateral, time bought and not burned included, at our gas. Or take it
yourself: initiateWithdraw, then finalizeWithdraw after 900 seconds, your gas, no help
from us, and it works if we refuse. Stop signing and we cannot charge you again.
No accounts, no API keys, no names. The network address we see counts free calls for an hour and is then forgotten. A channel's ledger and its meter clock live while the channel does. The privacy notice is the whole list.
x402-trust.txt carries the key this endpoint answers x402 Trust with. security.txt is where to report a problem with this endpoint or the bridge; a person reads it, and support says who. Contract issues go upstream to x402.
ZEAM Labs LLC, Delaware file number 10206382; the filed documents are at
https://github.com/zeam-labs/ZEAM-Labs-Corporate-Docs. Contact:
info@zeamprism.com.