The application is hosted at giwa.tokscale.ai, with its public gateway at
https://api.giwa.tokscale.ai. Payment and worker services remain private. Hosted exact top-ups settle on GIWA Sepolia, while a complete hosted upto request ending in delivery and a verified receipt is still pending. Live Evidence records the boundary.Network facts
Two GIWA-documented faucets supply gas ETH:
https://faucet.giwa.io: 0.005 ETH per 24 hours.- Nodit faucet at
https://faucet.lambda256.io/giwa-sepolia: 0.01 ETH per 24 hours.
Tokscale deployments
GIWA does not officially support x402, so Tokscale ported the stack itself. These contracts were deployed by Tokscale, each with a public deployment record pinning its runtime code hash. Source and manifests live injunhoyeo/tokscale-giwa-contracts; the explorer reports every row below as source-verified.
Deployment details:
- tUSD was deployed through a dedicated deployer contract,
0x016af5632b7d2d3bbd2a6e589b65e828d1a5b125, whose own deployment transaction0x109e586dde5c93d017c9aab8edf5bce305f4fecf9a1220efcb5712752340d7c7landed at block 31,330,856.TUSDDeployercreates the token inside its own constructor at the pinned saltkeccak256("tokscale.giwa.tusd.v1")and asserts the resulting address against its own CREATE2 prediction, so a single top-level transaction produces both contracts. The record pins the runtime code hash of each and the tUSD EIP-712 domain separator. - The Upto proxy was CREATE2-deployed in transaction
0xea7708f6a0ac3f2f872b1ea6be99f8d010064d76e5e0e390bc49669a17b66920(block 31,395,852). ItsPERMIT2()getter reads back the canonical Permit2 address. - The Exact proxy and the ERC-6492 validator exist because the pinned x402-rs facilitator image hardcodes both addresses in its startup check for every configured chain. They were deployed in transactions
0x2e5516c9aa366833c3aaa03e056a8de39af5554da3423c5ec75b8c7bccba4673(block 31,398,196) and0x147fdceeb952c35b0c2156417e5d37b797525c2ac3c3ed2b06b955065df4975d(block 31,398,214). The validator’s salt is vanity-mined: its first 4 bytes decode as ASCII “x402”. - Multicall3 sits at its canonical cross-chain CREATE2 address. The record pins the observed runtime code hash.
Preinstalls and predeploys
These already existed on GIWA Sepolia. Tokscale verified their bytecode and builds against them rather than deploying them.
Dojang (도장, the seal) is GIWA’s verified-identity attestation system. Tokscale reads it, and gating Passport eligibility on it is a Phase 2 mechanism. See Dojang: On-Chain Attestations.
Proven transactions
The original three transactions anchor the contract-level payment claims. Hosted Stage A adds real top-up settlements from the dedicated Keychain payer.- ERC-3009
exactsettlement: transaction0xad1a2f7b5aff4033e7779437ec487e8b51eb8170ba1c6c8cc971f6de37fcb9f8moved 1.0 tUSD (1,000,000 base units) from payer0x02cdd4a6f1308d310d624292a731c2d276310dc5to0x016af5632b7d2d3bbd2a6e589b65e828d1a5b125at block 31,331,118, through facilitator0xab5805032f0fd80e56c4d2a0fd72d961500c2cf8. The deployment record pins the consumed authorization nonce, which is what makes the authorization single-use, and a retry of the same authorization was replay-rejected with the ERC-3009 authorization-used selector. - Facilitator smoke test: settlement transaction
0x890c08920ae4672b27204fc2b0a2073264148d48f85792db7b6e5424ff9e265apassed against the pinned facilitator imageghcr.io/x402-rs/x402-facilitator@sha256:89ab5c03…after the prerequisite contracts above were deployed. This answered the open question of whether x402 works on GIWA at all. - Permit2
uptosettlement: transaction0x93bf1e60ce1fa0559603111f96cfcdd081eab17b71fb406a32f88ca1562cd274settled at block 31,917,698 withstatus 0x1, moving the ACTUAL 1,000,000 base units against a signed MAXIMUM of 1,500,000. That disagreement is theuptoscheme:/verifycarried the maximum and/settlecarried the actual. x402-rs routed tosettle(selectorff11e7b4, 14 words), notsettleWithPermit. It cost 85,723 gas, with the L1 fee at 16.9% of the total. Replaying the same authorization reverted onPermit2 InvalidNonce()during gas estimation and was never broadcast; the consumed Permit2 nonce bit, not the error string, is what proves replay protection.
exact top-up settlements from payer 0x02cdd4a6f1308d310d624292a731c2d276310dc5: 0xf6093345…, 0xfe84d874…, and 0xca7b2b8d…. These prove hosted Stage A settlement. They are not presented as hosted Stage B upto delivery evidence.
No Usage Root is anchored here yet, so receipt and attestation evidence remains local-only. Live Evidence is the authoritative split.
Evidence
The Tokscale-authored contracts rebuild from public source under Solidity0.8.30, optimizer at 200 runs, evmVersion = prague. Compare the result against runtimeCodeHash in the matching manifest under deployments/, and against the explorer’s own bytecode:
Next steps
- For every target and pass marker, including the local proofs, see Verification Log.
- For the x402 stack these contracts serve, see x402 Payments on GIWA.
- For how upstream bytecode is pinned before it ships, see Contracts.
- For the public source, tests, and deployment manifests behind every contract above, see
junhoyeo/tokscale-giwa-contracts. - For which of these deployments backs a live product path today, see Live Evidence.