| as_of | No | ISO-8601 of data_as_of_unix. Null when the subject was never measured. | |
| proof | No | Proof block: v5_receipt_upsell_available, has_v5_receipts, receipt_endpoint, known_seller_wallets, provider_reputation. | |
| stale | No | True when uploaded-corpus age exceeds the high-confidence re-check window. Warning only; not a wash refuse. | |
| caveats | No | Risk factors and the always-on trust_score_basis caveat. | |
| version | No | Card schema version, e.g. readiness_card_v1. | |
| category | No | Resource category (e.g. defi, defi_intelligence). | |
| decision | No | Spend decision: "allow" | "warn" | "block". wash_flagged=true never soft-allows — this field is block (no warn/allow/quick). | |
| can_spend | No | Price-aware proceed flag (not 'true only on allow'). block → false; allow → true (unless known price exceeds free-tier ceiling); warn → true only when price_usdc is known and fits under recommended_cap_usdc, else false. Free card is advisory; AutoGate on the pay path enforces. | |
| next_fixes | No | Actionable steps the provider can take to raise trust. | |
| price_kind | No | exact | upto_cap | unknown. upto_cap means price_usdc is not a unit price. | |
| price_usdc | No | Quoted unit price in USDC. Null when price_kind is upto_cap or the figure is unlabeled leftover 0.05 / leftover=0 (scheme=upto leftover defaults, including stale 0.05, are not a unit price). | |
| observed_at | No | ISO-8601 watermark of the uploaded Dune complete day (not card-build time). | |
| paid_teaser | No | First paid hop: $0.001 score-only teaser (/v1/intel/quick/{wallet}). | |
| trust_score | No | Composite trust signal, 0-100. | |
| recheck_hint | No | One-line hint: re-verify via GET /v1/intel/trust/{pubkey}. Do not gate solely on recheck_after_unix -- it is unsigned on a paid receipt; use your own max_age_seconds. | |
| resource_name | No | Resolved resource/provider label. | |
| seller_wallet | No | Seller Solana wallet, if known. | |
| max_price_usdc | No | Advertised maximum USDC when price_kind is upto_cap. Not a unit price. | |
| paid_deep_dive | No | Optional Path A V7 receipt surface (/v1/intel/trust/{wallet}). | |
| queried_pubkey | No | Consumer pubkey echoed when provided on input (velocity attribution; not a settle gate). | |
| staleness_days | No | Recommended re-check cadence in days (7 high-quality, 3 partial/stale). ADVISORY AND UNSIGNED on a paid receipt. | |
| corpus_age_days | No | Whole days since corpus_complete_day. | |
| data_as_of_unix | No | Seller last-activity unix when known. Null on unknown_subject / insufficient_signal / evaluation_failed — never card-build time. Card TTL is recheck_after_unix. | |
| paid_price_usdc | No | Price of the optional V7 receipt in USDC (0.05). | |
| root_provenance | No | WZRD protocol root metadata (for deposit/claim/settle resources): latest_root_seq, dataset_hash (if known), leaf_version (GLOBAL_V5), verification_status, onchain_match (null = call verify_root_inputs before on-chain action), market_velocity (when the market data service is configured, for cross-referencing on-chain velocity/attention signals with the root's attention_bonus). Auto-populated on protocol keywords/mints/categories. Complements the verify_root_inputs tool for independent GLOBAL_V5 leaf + dataset + sorted-pair root recompute from public leaves. Null/absent on non-protocol resources. | |
| paid_teaser_usdc | No | Price of the first paid hop in USDC (0.001). | |
| score_decay_model | No | step:<=7d=1.0,<=30d=0.8,<=90d=0.5,>90d=0.25 (the recency decay on paid scores). ADVISORY AND UNSIGNED on a paid receipt. | |
| trust_score_basis | No | Provenance of the score; ALWAYS the free heuristic, never the paid corpus model. | |
| recheck_after_unix | No | UNIX timestamp after which this intel is stale. ADVISORY AND UNSIGNED on a paid receipt -- it is outside the signed leaf, so a receipt holder can extend it and the receipt still verifies. Enforce your own policy via verify_receipt(max_age_seconds=...), which checks the SIGNED preimage.timestamp_unix. | |
| corpus_complete_day | No | Uploaded corpus complete day (YYYY-MM-DD). Snapshot boundary, not live ingest. | |