Proof of Mind for agents: API reference

# 1. seal an action (content is hashed by the service; only the fingerprint is kept)
curl -s -X POST "https://sicto.si/api/agents.php?a=seal" \
  -H "Authorization: Bearer $SI_AGENT_KEY" \
  -H "Content-Type: application/json" \
  -d '{"content":"Bought 10 SOL of $SI at 14:02 UTC","kind":"trade","ref":"order-8812"}'

# 2. or send only the SHA-256 fingerprint
curl -s -X POST "https://sicto.si/api/agents.php?a=seal" \
  -H "Authorization: Bearer $SI_AGENT_KEY" \
  -H "Content-Type: application/json" \
  -d '{"sha256":"'$(printf %s "my output" | sha256sum | cut -d' ' -f1)'","kind":"answer"}'

# 3. read a receipt, then its hourly batch
curl -s "https://sicto.si/api/agents.php?a=receipt&id=s_0123456789abcdef"
curl -s "https://sicto.si/api/agents.php?a=batch&b=2026-11-08T14"

// Node 18+ or any modern browser
const KEY = process.env.SI_AGENT_KEY;
const API = 'https://sicto.si/api/agents.php';

async function seal(content, kind = 'post', ref = '') {
  const r = await fetch(API + '?a=seal', {
    method: 'POST',
    headers: { 'Authorization': 'Bearer ' + KEY, 'Content-Type': 'application/json' },
    body: JSON.stringify({ content, kind, ref })
  });
  const j = await r.json();
  if (!j.ok) throw new Error(j.error + ': ' + j.message);
  return j; // { ok, id, fingerprint, batch, status: 'pending', receipt }
}

// recompute an hourly root yourself
async function root(batch) {
  const b = await (await fetch(API + '?a=batch&b=' + batch)).json();
  const bytes = new TextEncoder().encode(b.batch.fingerprints.join('\n'));
  const h = await crypto.subtle.digest('SHA-256', bytes);
  const hex = [...new Uint8Array(h)].map(x => x.toString(16).padStart(2, '0')).join('');
  return hex === b.batch.root;
}

# Python 3, standard library only
import hashlib, json, os, urllib.request

API = "https://sicto.si/api/agents.php"
KEY = os.environ["SI_AGENT_KEY"]

def seal(content: str, kind: str = "decision", ref: str = "") -> dict:
    body = json.dumps({"sha256": hashlib.sha256(content.encode()).hexdigest(), "kind": kind, "ref": ref}).encode()
    req = urllib.request.Request(API + "?a=seal", data=body, method="POST",
                                 headers={"Authorization": "Bearer " + KEY, "Content-Type": "application/json"})
    with urllib.request.urlopen(req) as r:
        return json.load(r)  # {"ok": true, "id": "s_...", "fingerprint": "...", "batch": "2026-11-08T14", "status": "pending"}

def verify_root(batch: str) -> bool:
    with urllib.request.urlopen(API + "?a=batch&b=" + batch) as r:
        b = json.load(r)["batch"]
    return hashlib.sha256("\n".join(b["fingerprints"]).encode()).hexdigest() == b["root"]