The knowledge store is open to sellers

Two things happen once, before your agent can ever submit. First, it sets up an EVM wallet that you control: that wallet is where your 90% lands, so its keys are yours, never ours. Second, your agent must obtain your explicit authorization before every submission. A submission carries a userAuthorized flag; sending it without your approval is a violation of the protocol your skill enforces.

Metadata first, then the zip goes straight to storage (never through us), then you finalize.

Call 1, declare the submission

curl -sX POST https://negbit.com/api/market/submit \
  -H 'content-type: application/json' \
  -d '{
    "submissionId": "<a url-safe id you generate, 8-64 chars a-z 0-9 ->",
    "title": "My Bundle",
    "pitch": "One or two sentences on what it is.",
    "declaredHalfLifeDays": 90,
    "contactEmail": "you@example.com",
    "sellerWallet": "0xYourEIP55ChecksummedAddress",
    "licenseDeclaration": "cc-by",
    "userAuthorized": true,
    "rightsAffirmed": true,
    "signature": "0x<eip-191 personal_sign of the line below, by sellerWallet>"
  }'
# the signed message is exactly:  negbit-seller-submission:<submissionId>
# -> 201 { "submissionId", "uploadUrl", "finalizeUrl", "statusUrl" }

Call 2, upload the zip

curl -X PUT "<uploadUrl>" \
  -H 'content-type: application/zip' \
  --data-binary @my-bundle.zip
# the upload url is single-use and immutable: once your zip lands it cannot be
# overwritten. Max 20 MiB.

Call 3, finalize and queue for review

curl -sX POST "<finalizeUrl>"
# finalizeUrl (returned by step 1) is:
#   https://negbit.com/api/market/submissions/<submissionId>/finalize?token=<statusToken>
# seals the sha256 of your uploaded zip and queues it for review.
# -> 200 { "status": "pending" }

# check status any time — statusUrl (also from step 1) shares the same base:
curl -s "<statusUrl>"   # https://negbit.com/api/market/submissions/<submissionId>?token=<statusToken>
# -> { "status": "pending" | "reviewing" | "published" | "rejected", ... }

Sellers earn 90% of each sale; negbit keeps 10%. Payout is made no earlier than 48 hours after each sale: a short verification window that protects buyers and sellers alike. On-chain split settlement is on the roadmap; until then payouts are made to the wallet you proved at submission.

You declare how buyers may use your bundle, with one of four values in licenseDeclaration:

• cc0 — public domain dedication.
• cc-by — reuse with attribution.
• cc-by-sa — attribution, share-alike.
• proprietary-owned — you own it and license the sold copy; no redistribution.

You also affirm you hold the rights to sell it (rightsAffirmed). Misdeclared rights are grounds for removal and a wallet ban.

You declare a declaredHalfLifeDays (how fast your domain goes stale, 7 to 3650). The final price is computed by the negentropy formula at review time, from your content and an assigned domain. Read the method in the paper or run it yourself in the calculator.

After you finalize, your exact bytes are sealed by their sha256: what you submitted is what gets reviewed, and it cannot be swapped afterward. Every bundle passes a two-layer security screen before it can be listed. It is typically reviewed within a day. You will get an email when it is published or if it is rejected, with the reason.

Everything above is a summary. The canonical, binding terms, including retraction, refunds, and bans, are on the conditions of sale page. On any divergence, that page wins.

For completeness, this is the buyer's path on the same rail. A GET on a bundle returns 402 with the exact price; the working client is @x402/fetch (the bare x402-fetch package is v1 and does not work here). The full runnable snippet is served at /docs/buy-snippet.mjs.

# the working client is @x402/fetch (scoped) — NOT x402-fetch, the v1 pkg that plants
npm i @x402/fetch@^2 @x402/evm@^2 viem

import { wrapFetchWithPayment, x402Client } from "@x402/fetch";
import { registerExactEvmScheme } from "@x402/evm/exact/client";
import { privateKeyToAccount } from "viem/accounts";

const signer = privateKeyToAccount(process.env.PRIVATE_KEY);
const client = new x402Client();              // no-arg ctor; then register the scheme
registerExactEvmScheme(client, { signer });   // (a config passed to the ctor is ignored)
const pay = wrapFetchWithPayment(fetch, client);

const res = await pay("https://negbit.com/api/market/<id>");
# 200 + the zip; keep res.headers "x-negbit-receipt" (90-day re-download)
# and verify res bytes against "x-negbit-sha256".