# Veilles 441 — price watches chosen by the client (PILOT)

> Veilles 441 watches the prices YOU choose: your Solana token, your
> threshold, your direction. When the price crosses, a signed alert is
> pushed to your webhook (HMAC-SHA256, anti-replay timestamp) and/or read
> back from the signed catch-up journal. Every alert is SEALED on Solana
> mainnet via M441-SEAL (asset, threshold, observed price, slot) — the
> alert itself is publicly verifiable proof. Evaluation every 60 s on
> Jupiter aggregated prices (never Binance); a realistic alert takes
> 1–3 minutes. This is a minute-scale watch, NOT high-frequency tooling,
> and NOT financial advice.

## Prices (no custody, ever — payment goes directly to the services wallet)

- Pack 7 days: 0.50 USDC via x402 (Solana) — arms ONE watch for 7 days.
- Pass 30 days: 0.05 SOL paid directly to the services wallet with a
  server-issued memo reference, verified on-chain before arming — arms
  ONE watch for 30 days.

## Flow (x402)

1. POST https://veilles.441engine.com/api/v1/armer with a JSON body:
   {"mint": "<solana mint>", "seuil": <usd price>, "direction":
   "au-dessus"|"en-dessous" ("above"/"below" accepted), "webhook":
   "https://your.endpoint/hook" (optional), "secret_hmac": "<your
   secret>" (optional, generated if absent), "symbole": "SOL" (optional)}
   → 402 + x402 challenge (USDC on Solana).
2. Pay with the official x402 client (exact scheme) and resend with the
   X-PAYMENT header → 200 {"veille": {...}, "cle_lecture": "...",
   "secret_hmac": "..."}. Keep the watch id + cle_lecture.

## Flow (SOL pass)

1. POST /api/v1/passe-sol → {"reference": "v441-…", "pay_to":
   "2kqEsrWELKtp5R3PmnVP3G4PZifuN47Yb61CzC9qQ9E9", "lamports": 50000000,
   "memo_exige": "v441-…"}.
2. Send exactly 0.05 SOL to pay_to with a memo equal to the reference.
3. POST /api/v1/armer with the same watch body plus
   "paiement_sol": {"signature": "<tx signature>", "reference": "v441-…"}
   → 200, watch armed for 30 days.

## Reading alerts

- GET /api/v1/veille/<id>?cle=<cle_lecture> — watch status.
- GET /api/v1/alertes?veille=<id>&cle=<cle_lecture>[&depuis=<ISO>] —
  catch-up journal (alerts kept at least 14 days).
- GET /verifier/<seal-signature> — public re-read of an alert's seal
  (fingerprint + issuer from the on-chain memo).
- GET /etat — public pilot state and counters.
- GET /health — service health.
- Webhook delivery: POST JSON {"type": "veille441.alerte", "alerte":
  {...}} with headers X-441-Timestamp and X-441-Signature:
  sha256=HMAC(secret, "<timestamp>.<body>"). Retries at 30 s and 5 min.

## Pilot gate (stated openly)

Pilot. The full service is justified only if, by 2026-12-12, at least 3
external agents have armed a real watch AND at least 1 real payment has
been received; otherwise it is parked without regret.