Headless Oracle

Signed, fail-closed market-session-state attestation for autonomous agents. Ed25519 receipts, locally verifiable. IETF environment.* draft. 28 exchanges.

[Headless Oracle @HeadlessOracle]

On March 29, 2026, UK clocks spring forward at 1:00 AM GMT. The UTC-to-London offset changes from +0 to +1. Any RWA liquidation bot using hardcoded UTC offset math to check LSE hours will compute wrong times for every trading day after. Here's what breaks:

[Headless Oracle @HeadlessOracle]

Settlement on-chain, 0.001 USDC testnet:

https://t.co/QXGsCqN8eV

Observed twice ≠ always. But observed beats documented. Building the verification layer for this, more in a few days.

[Headless Oracle @HeadlessOracle]

Ran x402 v2 captures against both facilitators (Coinbase CDP + https://t.co/KjugdEOlL8) on base-sepolia. What the wire does vs what the docs say:

The 402 body is empty {}. Requirements travel in a PAYMENT-REQUIRED response header. Headers are PAYMENT-SIGNATURE / PAYMENT-RESPONSE, not X-PAYMENT. Amount is a base-unit decimal string called `amount`. Your wallet needs zero ETH, the facilitator submits the tx and pays gas via EIP-3009. CDP rejects self-send. And https://t.co/KjugdEOlL8 settled the same signed authorization with no credentials at all.

[Headless Oracle @HeadlessOracle]

Check out my latest article: The number that wasn't there https://t.co/3ZbmDnx1ls via @LinkedIn

[Headless Oracle @HeadlessOracle]

It's Juneteenth — US equity markets are closed today.

Here's an autonomous trading agent I built on Cloudflare's Agents SDK. Before it acts, it checks a signed market-state attestation. Watch it refuse to trade:

curl -X POST "https://t.co/UyD0hsoiQ9"
→ {"action":"HALTED","reason":"NOT_OPEN"}

The agent asked Headless Oracle whether XNYS was open. HO returned a signed receipt: CLOSED. So the agent halted — and logged the signed receipt as proof of why.

A naive "is the market open?" check — or a hardcoded 9:30–4:00 ET — trades right into a closed holiday market. This one didn't, because it gated on a signed attestation of session-state instead of an assumption.

It also fails closed when the oracle is slow or returns garbage — every irreversible action gated, every decision signed:

?scenario=deadline_exceeded → HALTED / NETWORK_ERROR
?scenario=malformed → HALTED / BAD_RESPONSE

Paper-trading only. Built on Workers + Durable Objects. The whole point: an agent that provably won't act when it can't verify the world is safe to act in.

Every decision (signed receipt or the failure): https://t.co/ENbjEd2ysv

[Headless Oracle @HeadlessOracle]

I wrote up the full argument, and pointed it at a working instance running in production today.

https://t.co/AaCczIZrrH

[Headless Oracle @HeadlessOracle]

x402 makes the payment trustless.

It says nothing about whether the agent got what it paid for.

That gap is structural — and it's exactly where autonomous agents are most exposed.

[Headless Oracle @HeadlessOracle]

What's missing is a neutral attestation: fail-closed, independently recomputable, issued by a party that is neither buyer nor seller.

The certificate-authority logic — trusted because it's party to neither side — applied to the state an agent acts on.

[Headless Oracle @HeadlessOracle]

Back in April I posted a 131-line demo of the halt-gate idea. Here's the
real version: a full public reference agent that does an actual on-chain
equity trade, gated on verifiable market-session state.

Before every swap it fetches a signed open/closed/halted receipt, verifies
the Ed25519 signature locally, and fails closed if the venue isn't open.
One finalized on-chain trade you can verify yourself.

Exchange-level, not single-name — an honest gap, documented in the README.
Tokenized xStocks on Solana via Jupiter.

https://t.co/kfbTGgaEz1

[Headless Oracle @HeadlessOracle]

Full announcement essay covering what the draft does, why a family-definition is the load-bearing artifact, and what the three-signature framing means for verifiable intent:

https://t.co/S8XzN4x5F4

[Headless Oracle @HeadlessOracle]

On May 11 I filed the family-definition specification for the environment.* constraint family as an IETF Internet-Draft.

draft-borthwick-msebenzi-environment-state-00:
https://t.co/A3LiuGiIpH

[Headless Oracle @HeadlessOracle]

Filing an I-D is the lowest threshold of standards work. Not WG consensus. Not an RFC. A publication and a citable archive.

The version that exists today exists, under specific attribution, on the public record. That's the primary value of filing. The rest is downstream.

[Headless Oracle @HeadlessOracle]

The agent economy works only if every layer holds simultaneously.
Identity, payment, governance, user control — and the second axis of trust the framework folds under the same label.
Environment-state attestation is its shape. It's now implemented.

[Headless Oracle @HeadlessOracle]

a16z mapped four bottleneck categories blocking agentic commerce: identity, payment, governance, user control.
The framework is missing the primitive that decides whether the world is in the right state for the action to be valid at all.
Trust has a second axis.
🧵👇

[Headless Oracle @HeadlessOracle]

To make it concrete, here's a 131-line public reference implementation. An agent considers a trade, fetches a signed attestation, verifies Ed25519 against the published key, and either executes or fails closed:
→ https://t.co/Mcs8W6uoIH
Clone it. Run npm run demo. Watch the primitive work end-to-end against live infrastructure. The receipt that just verified is signed at the moment you read this.