U Html Form Submitter Route Partition

{
  "billable": true,
  "findings": [
    {
      "confidence": 85,
      "evidence": [
        {
          "page_indices": [],
          "page_url": null,
          "pattern": "html-form-submitter-route-partition_scoped_evidence",
          "type": "raw_html"
        }
      ],
      "id": "html-form-submitter-route-partition",
      "limits": [
        "Only complete original RAM documents are examined. No additional fetch, execution, interaction, computed style, rendering or external state is asserted.",
        "Only numeric and boolean aggregates are returned. All source text, identifiers, names, addresses, contact data, URLs, headers and digest values remain private.",
        "Partitions enabled native submitters by the source-declared effective submission method, resolved action URL and effective encoding. Explicit submitter overrides, form ownership, disabled-fieldset first-legend exceptions, missing/invalid method and encoding defaults, document-URL empty actions and dialog non-network routes are combined. Target browsing contexts and payload values are intentionally not part of this route identity. No submission, validation success, event-handler effect, booking or contractual meaning is asserted. Only numeric aggregates are returned."
      ],
      "module": "html-form-submitter-route-partition",
      "module_cpu_ms": 1,
      "state": "observed",
      "value": {
        "dialog_submitter_routes": 0,
        "distinct_route_classes": 2,
        "documents": 1,
        "enabled_submitters": 2,
        "externally_owned_submitters": 0,
        "forms": 1,
        "forms_with_divergent_submitter_routes": 1,
        "forms_with_submitters": 1,
        "submitters_different_from_form_route": 1
      },
      "warnings": []
    }
  ],
  "known_count": 1,
  "scope": {
    "at": "2026-10-19T00:00:00.000Z",
    "contact_values_returned": false,
    "pages": 1,
    "rendered": false,
    "requests": 0
  },
  "warnings": [
    "Illustrative synthetic fixture only; no live-site or customer assertion."
  ]
}

# bash or zsh: see the payment challenge. Nothing is charged.
curl -sS -g -i -X POST 'https://detect.halowerk.com/u/html-form-submitter-route-partition' \
  -H 'content-type: application/json' \
  --data-raw '{"url":"https://example.org/"}'

# x402 v2 sends the challenge base64-encoded in the PAYMENT-REQUIRED header (v1 sends it in the body).
# To read the header:
curl -sS -g -o /dev/null -D - -X POST 'https://detect.halowerk.com/u/html-form-submitter-route-partition' \
  -H 'content-type: application/json' \
  --data-raw '{"url":"https://example.org/"}' \
  | grep -i '^payment-required:' | cut -d' ' -f2 | tr -d '\r' | base64 --decode

// npm i @x402/fetch @x402/evm viem
import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

// Pays at most $0.003 per call.
const client = new x402Client().setSpendControls({ maxAmountPerPayment: "$0.003" });
registerExactEvmScheme(client, { signer: privateKeyToAccount(process.env.EVM_PRIVATE_KEY) });
const pay = wrapFetchWithPayment(fetch, client);

// Not sure it's safe to pay? ToolVet checks it first for $0.005. Pay for that from a separate
// client: this one is capped at $0.003 per payment. GET https://toolvet.app/api/v1/check?url=https%3A%2F%2Fdetect.halowerk.com%2Fu%2Fhtml-form-submitter-route-partition&method=POST
const res = await pay("https://detect.halowerk.com/u/html-form-submitter-route-partition", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
    "url": "https://example.org/"
  }),
});
console.log(res.status, await res.text());

# pip install "x402[requests,evm]"
import os
from eth_account import Account
from x402 import x402ClientSync
from x402.http.clients import x402_requests
from x402.mechanisms.evm import EthAccountSigner
from x402.mechanisms.evm.exact.register import register_exact_evm_client

# Pays at most $0.003 per call.
client = x402ClientSync().set_spend_controls({"max_amount_per_payment": "$0.003"})
register_exact_evm_client(client, EthAccountSigner(Account.from_key(os.environ["EVM_PRIVATE_KEY"])))

with x402_requests(client) as session:
    res = session.post(
        "https://detect.halowerk.com/u/html-form-submitter-route-partition",
        json={
            "url": "https://example.org/",
        },
    )
    print(res.status_code, res.text)