{"id":"22ddeed7-a36d-4487-80f2-6536edd391ad","url":"https://ot-intel-api.onrender.com/ot/action-conformance?actor=SANDWORM&planned_action=block_ip&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","method":"GET","fingerprint":"34db78b5d6e85e74cb3c391ab05ce2dcf3e452e937c970acec47e7977ff7f672","name":null,"description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.120000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["actor","sector","region","planned_action"],"properties":{"actor":{"type":"string","description":"ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"},"region":{"type":"string","description":"Target region e.g. GCC, KSA, UAE, Europe"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"vendor_stack":{"type":"string","description":"Comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC' — feeds the underlying threat-score's capability leg, same as /ot/threat-score. REQUIRED for auto_approve to be reachable at all; omitting it caps the verdict at human_review even if the underlying score would otherwise clear the auto-approve threshold."},"asset_context":{"type":"string","description":"Optional free text, e.g. 'shared_infra:cloudflare' — escalates to human_review when shared cloud/CDN infra is detected"},"planned_action":{"type":"string","description":"One of: block_ip, block_domain, quarantine_host, isolate_segment, halt_pipeline, disable_account"}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"live","first_seen_at":"2026-08-23 22:53:59.69758+00","last_seen_at":"2026-08-23 22:53:58.131+00","last_success_at":"2026-09-14 11:09:53.319+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 11:14:53.319+00","search_tsv":"","catalog_number":"8819","x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/action-conformance?actor=SANDWORM&planned_action=block_ip&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","resource_description":"Deterministic remediation risk gate. Pass actor, sector, region, planned_action (e.g. block_ip, halt_pipeline, disable_account). Returns auto_approve/human_review/reject via capability x opportunity x intent scoring (same as /ot/threat-score) — no LLM in the loop. auto_approve requires vendor_stack; omitting it caps the verdict at human_review regardless of score. Optional asset_context escalates to human_review on shared cloud/CDN infra (e.g. shared_infra:cloudflare).","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"actor":"SANDWORM","region":"Europe","sector":"energy","vendor_stack":"Siemens,Schneider Electric","planned_action":"block_ip"}},"output":{"type":"json","example":{"actor":"SANDWORM","region":"Europe","sector":"energy","rationale":"Threat score (8.2) is in the top decile of observed scores for vendor-specified queries — supports automated execution.","risk_tier":"auto_approve","data_sources":["OT-Intel-DB","GDELT Project (gdeltproject.org)","OFAC Sanctions List (US Treasury)"],"vendor_stack":["Siemens","Schneider Electric"],"asset_context":null,"planned_action":"block_ip","supporting_evidence":{"confidence":"moderate","threat_score":8.2,"shared_infra_detected":false,"vendor_stack_specified":true}}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["actor","sector","region","planned_action"],"properties":{"actor":{"type":"string","description":"ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"},"region":{"type":"string","description":"Target region e.g. GCC, KSA, UAE, Europe"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"vendor_stack":{"type":"string","description":"Comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC' — feeds the underlying threat-score's capability leg, same as /ot/threat-score. REQUIRED for auto_approve to be reachable at all; omitting it caps the verdict at human_review even if the underlying score would otherwise clear the auto-approve threshold."},"asset_context":{"type":"string","description":"Optional free text, e.g. 'shared_infra:cloudflare' — escalates to human_review when shared cloud/CDN infra is detected"},"planned_action":{"type":"string","description":"One of: block_ip, block_domain, quarantine_host, isolate_segment, halt_pipeline, disable_account"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"120000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"120000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 11:09:53.319+00","bazaar_validation_error":null,"window":"24h","probes_n":27,"handshake_uptime":1,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":523,"latency_p90":2168,"price_drift_pct":0,"score":0.8022,"computed_at":"2026-09-14 11:10:06.631+00","source_metadata":[{"raw":{"url":"https://ot-intel-api.onrender.com/ot/action-conformance?actor=SANDWORM&planned_action=block_ip&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"34db78b5d6e85e74cb3c391ab05ce2dcf3e452e937c970acec47e7977ff7f672","advertisedPriceUsd":0.12},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/action-conformance?actor=SANDWORM&planned_action=block_ip&region=Europe&sector=energy&vendor_stack=Siemens%2CSchneider+Electric","resource_description":"Deterministic remediation risk gate. Pass actor, sector, region, planned_action (e.g. block_ip, halt_pipeline, disable_account). Returns auto_approve/human_review/reject via capability x opportunity x intent scoring (same as /ot/threat-score) — no LLM in the loop. auto_approve requires vendor_stack; omitting it caps the verdict at human_review regardless of score. Optional asset_context escalates to human_review on shared cloud/CDN infra (e.g. shared_infra:cloudflare).","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"actor":"SANDWORM","region":"Europe","sector":"energy","vendor_stack":"Siemens,Schneider Electric","planned_action":"block_ip"}},"output":{"type":"json","example":{"actor":"SANDWORM","region":"Europe","sector":"energy","rationale":"Threat score (8.2) is in the top decile of observed scores for vendor-specified queries — supports automated execution.","risk_tier":"auto_approve","data_sources":["OT-Intel-DB","GDELT Project (gdeltproject.org)","OFAC Sanctions List (US Treasury)"],"vendor_stack":["Siemens","Schneider Electric"],"asset_context":null,"planned_action":"block_ip","supporting_evidence":{"confidence":"moderate","threat_score":8.2,"shared_infra_detected":false,"vendor_stack_specified":true}}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["actor","sector","region","planned_action"],"properties":{"actor":{"type":"string","description":"ICS threat actor name e.g. SANDWORM, VOLTZITE, XENOTIME"},"region":{"type":"string","description":"Target region e.g. GCC, KSA, UAE, Europe"},"sector":{"type":"string","description":"Target sector e.g. energy, water, manufacturing"},"vendor_stack":{"type":"string","description":"Comma-separated vendor list e.g. 'Schneider Modicon,Siemens SIMATIC' — feeds the underlying threat-score's capability leg, same as /ot/threat-score. REQUIRED for auto_approve to be reachable at all; omitting it caps the verdict at human_review even if the underlying score would otherwise clear the auto-approve threshold."},"asset_context":{"type":"string","description":"Optional free text, e.g. 'shared_infra:cloudflare' — escalates to human_review when shared cloud/CDN infra is detected"},"planned_action":{"type":"string","description":"One of: block_ip, block_domain, quarantine_host, isolate_segment, halt_pipeline, disable_account"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"120000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"120000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 11:09:53.319+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.8022,"uptime":1,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":523,"latency_p90":2168,"price_drift_pct":0},"cdp_indexed":false,"confidence":"high"}