[RunTimeAdmin]

The bug

sigvara_verify_evidence asked the reputation contract's verifyEvidence about each covered payment in a separate call, up to 100, eight at a time. Arc's public RPC limits calls a second. Measured on 7 November with every read logged: the 29th to 32nd calls within about a second came back rate limit exceeded (ethers reports it as "missing revert data"), and one refusal failed the whole check. So the tool failed 8 of 8 tries on the simulation's solo agent, on both rpc.testnet.arc.io and rpc.testnet.arc.network. It worked only on agents with few payments.

The fix

• SigvaraVerifier.verifyEvidenceMany(did, items) asks once, through Multicall3's aggregate3 at its usual address, which Arc testnet has and the site already uses. Where Multicall3 has no code, it asks one at a time, in turn. Whether it has code is read once per verifier, and a failed read is asked again.
• The tool calls it with the last 100 covered payments. Nothing else in its result changes.

Tests

• New test/evidence-confirm.test.ts. It runs the tool against a local node that refuses past 20 eth_calls a second, over 60 payments, and checks all 60 are confirmed with no refusal and one aggregate3. It also checks each answer is read from the batch (a wrong leaf comes back false), and the fallback without Multicall3. Both tests fail on the old code.
• test/mcp.test.ts stubs verifyEvidenceMany in place of verifyEvidence, and the first test now expects one read for all twenty payments.
• 371 SDK tests, all passing locally. Type-check clean.

Live check

The built branch against the live solo agent on 8 November, at about 00:12 UTC, three times across both public RPCs: each time it reproduced the finalized root over 70 payments, including the two Base payments, and the contract confirmed all 70, in about a second.

Also

• Bumps the SDK to 1.0.0-alpha.18, with a changelog entry, not yet published.
• Adds a sentence about 1.0.0-alpha.18 to the three docs that say alpha.17 still fails. The SDK README says the confirmations are one read. The README and whitepaper SDK counts are updated in place.
• After publishing, the plugin PR feat(wallet-mcp): add Sigvara plugin coinbase/agents#20 gets its pin bumped and its evidence flow back.

🤖 Generated with Claude Code