x402-pay git:20260824.c6b9035A

Immutable. This exact content is served forever at /api/v1/blob/156cff81915fa2b6.

---
name: x402-pay
description: Pay one x402 challenge through Runx Hosted with approval and paid-resource readback.
runx:
  category: payments
---

# X402 Pay

`x402-pay` is the public x402 buyer contract. Its OSS graph submits the exact
x402 payment signal, complete parent authority, and stable idempotency seed to
the hosted `payment.x402` operation, then requires readback through
`payment.x402.read`.

Runx Hosted owns challenge validation, authority attenuation and reservation,
wallet or facilitator credentials, payload signing, paid-resource retry,
settlement recovery, finality, and the private ledger. OSS contains the public
v1 Runx contract and generic provider-effect gate only. References to x402
protocol version 2 in upstream conformance material describe the external
standard, not a Runx v2 contract.

## Operator guide

Use this skill for one exact HTTPS resource already named by a hosted x402 grant.
The resource request carries bounded inline control data or artifact references;
large documents and media never travel as oversized graph values. The hosted
buyer accepts external x402 V2 only, signs and stages the payload before the paid
POST, and reuses those exact bytes after an uncertain response.

Stop on malformed or expired requirements, amount/currency/payee/resource drift,
incomplete authority, missing approval, or inconsistent paid-resource readback.
Never pass wallet keys, seed phrases, bearer tokens, or facilitator credentials
in skill input. A 2xx response is not finality: the readback must return the
provider transaction, confirmed chain block, and the paid resource's terminal
Runx receipt reference.