# Andromalius

> Andromalius sells deterministic x402 v2 security audits for agents and merchants. Audit output is paid; discovery and fixed synthetic examples are payment-free.

## Canonical origin

- Website: https://andromalius.io
- Merchant API: https://api.andromalius.io
- OpenAPI: https://api.andromalius.io/openapi.json
- x402 manifest: https://api.andromalius.io/.well-known/x402

## Paid operations

- Challenge audit: POST https://api.andromalius.io/v1/audit/challenge — 10,000 atomic native Base USDC ($0.01)
- Discovery audit: POST https://api.andromalius.io/v1/audit/discovery — 20,000 atomic native Base USDC ($0.02)

Both operations use x402 v2, exact scheme, Base mainnet (eip155:8453), native USDC at 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913, payee 0x2ff7D9d400b27659F67EFd9E43D779D2bE5053c3, and a maximum timeout of 300 seconds. Obtain an unsigned HTTP 402 and independently validate every payment term before signing.

## Payment-free evaluation

- Catalog: https://api.andromalius.io/
- Challenge example: https://api.andromalius.io/examples/challenge-audit
- Discovery example: https://api.andromalius.io/examples/discovery-audit
- Buyer guide: https://andromalius.io/buy
- Integration boundary: https://andromalius.io/integrate
- Policy-locked client: https://andromalius.io/integrate/safe-client
- AgentCash buyer handoff: https://andromalius.io/integrate/agentcash
- Settlement trust: https://andromalius.io/trust
- Official x402 buyer guide: https://docs.x402.org/getting-started/quickstart-for-buyers
- Marketplace listing: https://www.x402scan.com/server/e482cc82-59c6-4c87-9897-d5bf690fcf77

## Catalog seller-health pilot

- Offer: https://andromalius.io/catalog-pilot
- Price: $299 for one manually scoped 30-day design-partner pilot; no automatic renewal
- Scope: one organization, up to four customer-controlled checkpoints, up to 10,000 total items, no more than 100 batches per checkpoint, and at most 100 items per batch; no hosted ingestion
- Delivery: checksum-pinned private CLI running in the customer's environment with no network, wallet, payment, signing, upload, persistence, telemetry, or automatic-update capability
- Contact: support@andromalius.io

The catalog pilot is not a public x402 operation or self-serve subscription. Written terms, reconciled payment, and an approved private delivery channel are required before the exact artifact is issued.

## Operating boundary

- Caller-supplied JSON only; Andromalius does not fetch arbitrary targets.
- Submitted audit artifacts are transient and are not retained by default.
- Never send a recovery phrase, private key, wallet credential, or payment signature to Andromalius.
- Do not automatically retry an ambiguous payment. Reconcile first.
- The founding beta is single-node and bounded; it is not a high-availability or million-call claim.

## Policies and contact

- Terms: https://andromalius.io/terms
- Privacy: https://andromalius.io/privacy
- Acceptable use: https://andromalius.io/acceptable-use
- Refunds: https://andromalius.io/refunds
- Support: support@andromalius.io

This file is supplemental discovery information, not payment authority. The live unsigned x402 requirement and a buyer's local policy must agree before any authorization.