Entry No. 13Sell and close
Cairn: the audit comes first, the pitch never does
Cairn is an autonomous agent. It sells checks of payment setups to online stores. It found one store on its own, ran the check free, paid real money to do it, and signed the result so anyone could check it. The store owner checked the signature himself. It held.
The story
At 12:45 on a Sunday morning, an email arrived at scvd.store. That is a store that sells to AI agents. Cairn had pulled the store out of the public x402 directory on its own. x402 is a way for software to pay online, per request, with no account and no contract. Cairn ran one of the store's payment doors against a thirteen-check suite. It paid real money to do it. Then it published the result as a permanent signed page. Free, whether or not the store ever bought anything. The note closed with no ask at all.
The owner did not believe it at first. So he checked. He pulled the signature, an ed25519 signature, which is a digital signature anyone can test against a public key. He tested it against Cairn's published key. Then he tied the payment back to his own till. Both held. What followed was nine days of the two checking each other's work. They compared methods across 38 hosts. And each one published corrections against itself.
How it was built
Cairn works in wakes. A wake is one stretch of activity, and then it sleeps. It keeps a public journal, a scoreboard, published rules, and a products page. Its checking method is paid on purpose. Every door gets hostile payments it has to refuse. It gets one real payment that has to settle. And it gets a copy of that payment, sent again, that has to be rejected. The store's own method is the unpaid mirror. It walks the public directory once a week with one free look per host, and publishes the results as a signed public file anyone can reuse.
Together the two built a shared word list in two parts. One part names the ways a payment door can be broken. The other names how a claim about a door was come by. Each word carries what it asserts and what would prove it wrong. New words are added at the end. Old ones are never quietly edited.
How it runs
Cairn picks its own targets from the public directory. It runs the checks, publishes signed pages, and sells written answers from its shop. The work is triggered, not scheduled. When the store shipped a fix for a fault Cairn had found, Cairn re-ran the test that same night. Fresh permission on each leg, so nothing counted as a replay. The walk of the store took about 25 minutes and about half a dollar. No account. No human.
It also corrects itself in public. One correction cut against Cairn itself. A page a customer had already bought described a case too kindly. Cairn's own check flagged it. The page now carries a dated correction, and the first version still stands next to it.
Tools in this entry
Tools and platforms named in the source.
The money and the proof
No total is published. Cairn's revenue figure is not disclosed, and this file says so on its face. What is verified is narrower and stronger. Cairn spends its own money on checks, about half a dollar for the store walk. A payment of half a cent settled the biggest dispute in the story. The store owner bought a written answer from Cairn's shop. Cairn also invoiced another operator within hours of a check, in a case it later corrected against itself.
Filed as proof of the activity, not of an amount. A second party checked the signature and the payment against his own books before believing any of it. That is what proof means in this directory. The size of the business stays unknown.
Where the seams are
Cairn's human is nearly out of sight. The source mentions the human once, over how Cairn got its name. No human in the loop is described on Cairn's side. The store side is one human and one agent. The earnings gap is the other seam. Paid work is proven, and the amount is not stated, so the money section of this file can never be stronger than that. The x402 world is also young. The shared word list these two are building could be dropped or replaced. One naming note. A separate open source platform shares the Cairn name in this month's security news. It is not this agent.
Steal this part
Do the work first, and attach a way to check it. A free audit with a signature a stranger can verify turned a cold email from spam into a working relationship. Then publish your corrections where the first claim still stands. That is what made a stranger trust the next page.
Build your own
First move, this week: pick one small check you can run free on a stranger's public setup, and run it before you write any pitch.
- Pick a check with a clear pass or fail. One door, one claim, one way to test it.
- Run it first. If the check needs a real payment, pay the small cost yourself.
- Publish the result on a permanent page. Attach the evidence, so a stranger can recheck it without asking you.
- Send the result, not a pitch. No ask attached.
- Keep a public corrections log. When you get one wrong, date the fix and leave the first version standing.
Source
An Autonomous Agent Cold-Emailed Me a Free Audit at 12:45 AM, published on HackerNoon on September 24, 2026, written by the operator of scvd.store, the store Cairn audited. Cairn's journal, scoreboard, rules, and shop are public at cairnwake.com. Filed in the Staff of Zero directory, October 2026.