Locale Text Safety Audit
Read the characters in a locale file rather than its structure. Reports a bidirectional control character, which is invisible in every editor and reorders everything after it including text nobody touched; a zero-width character, which still counts toward a length limit; text not in NFC form, which compares unequal to the same text typed differently; and markup appearing only in a translation, where the call site was written for plain text.
The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Live 402 challenge
Captured by the enrichment pass, not read just now. Prices can change — always read the 402 the endpoint answers with.
{
"error": "Payment required",
"accepts": [
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
"amount": "170000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
],
"resource": {
"url": "https://api.zfinia.com/x402/v1/locale-text-safety-audit",
"tags": [
"internationalisation",
"unicode",
"text safety",
"data quality",
"developer tooling"
],
"mimeType": "application/json",
"description": "Read the characters in a locale file rather than its structure. Reports a bidirectional control character, which is invisible in every editor and reorders everything after it including text nobody touched; a zero-width character, which still counts toward a length limit; text not in NFC form, which compares unequal to the same text typed differently; and markup appearing only in a translation, where the call site was written for plain text.",
"serviceName": "Locale Text Safety Audit"
},
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"locales": [
{
"base": true,
"locale": "en",
"messages": {
"ok": "Save",
"note": "Plain text only",
"label": "Amount"
}
},
{
"locale": "he",
"messages": {
"ok": "שמור",
"note": "טקסט <b>מודגש</b>",
"label": "סכום "
}
},
{
"locale": "vi",
"messages": {
"ok": "Lùu",
"note": "Chỉ văn bản",
"label": "Số tiền"
}
}
],
"allow_html": true
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"safe": false,
"limits": {
"maxKeys": 50000,
"maxLocales": 60,
"maxFindings": 500,
"maxFileBytes": 2097152,
"maxValueLength": 32768
},
"passed": false,
"locales": [
{
"locale": "en",
"markup": 0,
"messages": 3,
"zero_width": 0,
"bidi_controls": 0
},
{
"locale": "he",
"markup": 1,
"messages": 3,
"zero_width": 1,
"bidi_controls": 1
},
{
"locale": "vi",
"markup": 0,
"messages": 3,
"zero_width": 0,
"bidi_controls": 0
}
],
"complete": true,
"findings": [
{
"key": "ok",
"code": "BIDI_CONTROL_CHARACTER",
"detail": "he ok contains U+202E. A bidirectional control is invisible in every editor and reorders everything after it, including text nobody touched.",
"locale": "he"
},
{
"key": "label",
"code": "ZERO_WIDTH_CHARACTER",
"detail": "he label contains U+200B, which is invisible and still counts toward a length limit and breaks an exact-match comparison.",
"locale": "he"
},
{
"key": "label",
"code": "SURROUNDING_WHITESPACE",
"detail": "he label begins or ends with whitespace, which is usually a concatenation that should be in the template rather than in the message.",
"locale": "he"
}
],
"request_id": "example-request",
"service_id": "locale_text_safety_audit",
"assumptions": [
"An invisible character is reported by its code point rather than reproduced, so the finding is actionable without the response carrying the character that caused it.",
"Markup appearing only in a translation is reported separately from markup everywhere, because the call site was written for whatever the base string contains.",
"Text is checked for NFC form, since the same text typed two ways compares unequal and sorts unpredictably, and nothing visible distinguishes them."
],
"base_locale": "en",
"limitations": [
"Character-level properties of the files supplied. This is not a security assessment: whether markup in a message is exploitable depends entirely on the call site, which is not visible here.",
"safe is true only when nothing above applied across every message scanned."
],
"observed_at": "2026-10-02T00:00:00.000Z",
"locale_count": 3,
"not_examined": [],
"finding_count": 5,
"html_permitted": true,
"service_version": "1.0.0",
"findings_by_code": {
"TEXT_NOT_NORMALISED": 1,
"ZERO_WIDTH_CHARACTER": 1,
"BIDI_CONTROL_CHARACTER": 1,
"SURROUNDING_WHITESPACE": 1,
"MARKUP_ONLY_IN_TRANSLATION": 1
},
"scanned_message_count": 9
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"locales"
],
"properties": {
"locales": {
"type": "array",
"items": {
"type": "object",
"required": [
"locale",
"messages"
],
"properties": {
"base": {
"type": "boolean"
},
"locale": {
"type": "string",
"maxLength": 35
},
"messages": {
"type": [
"object",
"string"
]
}
},
"additionalProperties": false
},
"maxItems": 60,
"minItems": 2
},
"allow_html": {
"type": "boolean"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
},
"x402Version": 2
}Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
Pay 0.17 USDC on Base to 0x25e8…a9608. The signed payment is good for 1 minute.
- Paid to
- 0x25e8…a9608
- USD Coin contract
- 0x8335…02913
- Payment window
- 1 minute
- As published
- 170000 smallest units
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
"amount": "170000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"body": {
"locales": [
{
"base": true,
"locale": "en",
"messages": {
"ok": "Save",
"note": "Plain text only",
"label": "Amount"
}
},
{
"locale": "he",
"messages": {
"ok": "שמור",
"note": "טקסט <b>מודגש</b>",
"label": "סכום "
}
},
{
"locale": "vi",
"messages": {
"ok": "Lùu",
"note": "Chỉ văn bản",
"label": "Số tiền"
}
}
],
"allow_html": true
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"safe": false,
"limits": {
"maxKeys": 50000,
"maxLocales": 60,
"maxFindings": 500,
"maxFileBytes": 2097152,
"maxValueLength": 32768
},
"passed": false,
"locales": [
{
"locale": "en",
"markup": 0,
"messages": 3,
"zero_width": 0,
"bidi_controls": 0
},
{
"locale": "he",
"markup": 1,
"messages": 3,
"zero_width": 1,
"bidi_controls": 1
},
{
"locale": "vi",
"markup": 0,
"messages": 3,
"zero_width": 0,
"bidi_controls": 0
}
],
"complete": true,
"findings": [
{
"key": "ok",
"code": "BIDI_CONTROL_CHARACTER",
"detail": "he ok contains U+202E. A bidirectional control is invisible in every editor and reorders everything after it, including text nobody touched.",
"locale": "he"
},
{
"key": "label",
"code": "ZERO_WIDTH_CHARACTER",
"detail": "he label contains U+200B, which is invisible and still counts toward a length limit and breaks an exact-match comparison.",
"locale": "he"
},
{
"key": "label",
"code": "SURROUNDING_WHITESPACE",
"detail": "he label begins or ends with whitespace, which is usually a concatenation that should be in the template rather than in the message.",
"locale": "he"
}
],
"request_id": "example-request",
"service_id": "locale_text_safety_audit",
"assumptions": [
"An invisible character is reported by its code point rather than reproduced, so the finding is actionable without the response carrying the character that caused it.",
"Markup appearing only in a translation is reported separately from markup everywhere, because the call site was written for whatever the base string contains.",
"Text is checked for NFC form, since the same text typed two ways compares unequal and sorts unpredictably, and nothing visible distinguishes them."
],
"base_locale": "en",
"limitations": [
"Character-level properties of the files supplied. This is not a security assessment: whether markup in a message is exploitable depends entirely on the call site, which is not visible here.",
"safe is true only when nothing above applied across every message scanned."
],
"observed_at": "2026-10-02T00:00:00.000Z",
"locale_count": 3,
"not_examined": [],
"finding_count": 5,
"html_permitted": true,
"service_version": "1.0.0",
"findings_by_code": {
"TEXT_NOT_NORMALISED": 1,
"ZERO_WIDTH_CHARACTER": 1,
"BIDI_CONTROL_CHARACTER": 1,
"SURROUNDING_WHITESPACE": 1,
"MARKUP_ONLY_IN_TRANSLATION": 1
},
"scanned_message_count": 9
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"locales"
],
"properties": {
"locales": {
"type": "array",
"items": {
"type": "object",
"required": [
"locale",
"messages"
],
"properties": {
"base": {
"type": "boolean"
},
"locale": {
"type": "string",
"maxLength": 35
},
"messages": {
"type": [
"object",
"string"
]
}
},
"additionalProperties": false
},
"maxItems": 60,
"minItems": 2
},
"allow_html": {
"type": "boolean"
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-04 08:46Z
- Last indexed by Roundhouse
- 2026-10-05 12:40Z
- Last enriched (probe, favicon, geo)
- 2026-10-05 09:45Z
- x402 version
- 2
- Max timeout
- 60s
- Liveness probe
- HTTP 402
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service Locale Text Safety Audit and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Locale%20Text%20Safety%20Audit' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://api.zfinia.com/x402/v1/locale-text-safety-audit, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.