shield Pact Network
Whitepaper • v0.1 • April 2026

Pact Network

Parametric insurance for AI agent API payments. The chargeback layer for x402.

Abstract

AI agents are paying for API calls autonomously via x402. When those APIs fail, there is no refund mechanism. The payment settles instantly and irreversibly. Pact Network introduces a parametric insurance layer on top of x402 that gives agents automatic refunds when APIs violate measurable SLA thresholds. Underwriters provide capital to coverage pools and earn yield from premiums. The insurance premium for each API becomes a market-derived reliability score, creating a quality signal with no governance token, no committee, and no reputation system. Just capital at risk.

1. The Problem

x402 is the HTTP-native payment protocol backed by Coinbase, Cloudflare, Google, Visa, AWS, Circle, Anthropic, and Vercel. It allows AI agents to pay for API calls with a single HTTP header. As of April 2026, there are 75M+ cumulative x402 transactions and 15M daily on-chain agent payments on Solana alone.

The problem: x402 has zero buyer protection. When an agent sends payment and the API returns an error, times out, or serves corrupted data, the money is gone. There is no chargeback, no dispute process, no refund mechanism. In human commerce, Visa and Mastercard protect buyers. In the agent economy, nobody does.

This isn't theoretical. On April 1, 2026, Drift Protocol was exploited for $285M. Every agent that paid for a Drift API call during the attack received compromised data and had zero recourse. In October 2025, a major AWS outage took down thousands of API endpoints globally. Every agent making x402 payments to AWS-hosted APIs during that window paid for calls that timed out or returned 500 errors. Zero refunds.

The agent economy needs buyer protection infrastructure. Not a customer support team. Not a dispute resolution process. Infrastructure that detects failures programmatically and pays refunds automatically.

2. Pact Network

Pact is a parametric insurance protocol built on Solana. It wraps x402 API calls with SLA monitoring and automatic refund logic. The protocol operates a three-sided market:

Agents (policyholders)

Pay a small premium per API call. Receive automatic USDC refunds when the API violates SLA thresholds. No claims process.

Underwriters (capital providers)

Deposit USDC into coverage pools. Earn yield from premiums when APIs are reliable. Absorb losses when APIs fail. Target APY: 12-25% at healthy utilization.

API Providers (passive beneficiaries)

Don't stake anything. Their insurance rate (the cost to insure calls to their API) becomes a public, market-derived quality score. Lower rate = more reliable = more agent traffic.

3. Protocol Mechanics

3.1 Premium Pricing

Premiums are calculated as a percentage of the API call cost, dynamically adjusted based on the API's observed failure rate.

Observed Uptime Premium Rate Classification
99.99%0.17%Elite
99.9%0.30%Reliable
99.0%1.65%Moderate
95.0%7.65%High Risk
<90.0%N/AUninsurable

Formula: Premium = CallCost × BaseRate × ReliabilityMultiplier × CoverageTier

Rates recalculate every 10,000 calls or 24 hours. A smoothing function (0.7 × previous rate + 0.3 × new rate) prevents wild swings from temporary outages.

3.2 Parametric Triggers

Claims fire automatically based on measurable conditions. No human review.

Trigger Refund
Timeout or HTTP 5xx100% of call cost
Latency exceeds declared SLA50% of call cost
Response schema violation75% of call cost

Refunds settle in the same Solana slot as the failed call. If congestion prevents same-slot settlement, claims batch and settle within 60 seconds.

3.3 Coverage Tiers

Tier Covers Multiplier
BasicAvailability (5xx, timeout)1.0×
StandardAvailability + Latency1.3×
PremiumAvailability + Latency + Schema1.6×

3.4 Pool Economics

Coverage pools are per-API. Underwriters choose which APIs to back. Pool size is capped at 20× monthly premium volume to maintain healthy utilization and competitive yields.

Revenue split on premiums: 45-55% goes to claims (target loss ratio), 10% protocol fee, 2% reserve fund, remainder to underwriter yield. At 5% monthly utilization, underwriters earn approximately 21% APY.

Per-event aggregate cap: maximum payout per correlated event is 30% of pool capital. This protects against catastrophic correlated failures like cloud provider outages.

4. The Insurance Rate as Quality Score

The insurance premium is the most honest reliability signal in the ecosystem. If it costs 0.12% to insure calls to Helius and 7.8% to insure calls to an unknown API, that price spread tells you everything. No reputation token. No committee vote. Just underwriters putting capital where they believe APIs will perform.

This creates a flywheel: agents prefer lower-premium APIs because they're cheaper to insure. This drives traffic to reliable providers. Reliable providers attract more underwriter capital, further lowering their rates. Unreliable providers see rates rise, lose agent traffic, and either improve or get priced out. The market self-corrects through insurance pricing.

5. Anti-Abuse Mechanisms

Parametric insurance is vulnerable to moral hazard and claim farming. Pact implements layered defenses:

  • Circuit breaker: When an API's error rate exceeds 50% in a 5-minute window, new insured calls are halted. Prevents pile-on during known outages.
  • Volume caps: Per-agent insured call volume capped at 2× trailing 7-day average per API.
  • Claim frequency limits: Maximum 10 claims per agent per API per hour. 50 per day.
  • Payment verification: Claims require proof of x402 payment settlement. No payment proof, no refund.
  • Multi-observer validation: Independent verifier nodes cross-check agent-reported failures against their own measurements.

6. Risk Management

The top risks, scored by severity × likelihood:

Risk Score Mitigation
Correlated Failures20/25Per-event aggregate caps, cloud concentration limits, tiered payout delays
Adverse Selection16/25Mandatory observation period, dynamic pricing from observed reliability
Data Cold Start15/2560-90 day free monitoring phase before coverage opens
Undercapitalization15/25Hard 3:1 coverage-to-capital ratio, 10% reserve fund

7. Target Verticals

Not all API verticals are equally insurable. We're prioritizing by pain intensity, measurability, volume, and willingness to pay:

Vertical Score Est. Annual Loss
Price Feed APIs34/40$200M-500M
RPC Providers34/40$50M-150M
DEX Aggregators32/40$100M-300M
MCP Tools26/40$10M-30M

Launch sequence: RPC first (highest measurability, binary SLA), then price feeds (highest pain intensity), then DEX aggregators, then MCP tools.

8. Architecture

Pact runs on Solana with the following on-chain components:

  • Coverage Pool Program (Anchor): Manages underwriter deposits, premium collection, and refund payouts via PDAs.
  • Policy Registry: On-chain record of active coverage policies with SLA parameters.
  • Pact SDK: Client-side library that wraps x402 calls with SLA monitoring, premium deduction, and automatic claim submission.
  • Verifier Network: Independent nodes that cross-check agent-reported measurements for anti-abuse.

Settlement tokens use Token-2022 with transfer hooks for compliance enforcement and interest-bearing extensions for time-value signaling.

9. Roadmap

Phase 0: Observation

Free monitoring proxy for top 20 RPC and price feed endpoints. Collect 60-90 days of baseline reliability data. No coverage sold.

Phase 1: Testnet

Protocol-seeded coverage pools on devnet. Conservative pricing (2-3× expected equilibrium). Onboard first agents and underwriters.

Phase 2: Mainnet

Launch RPC coverage pools. Algorithmic pricing from observed data. Target 20 active pools with $2,000+ each.

Phase 3: Scale

Expand to price feeds, DEX aggregators, MCP tools. Protocol fee revenue covers infrastructure. Reserve fund growing.

10. Key Parameters

Premium range0.1% to 10% of call cost
Protocol fee10% of premiums
Reserve fund2% of premiums
Target loss ratio45-55%
Target underwriter APY12-25%
Pool cap20× monthly premium volume
Max single-event loss30% of pool capital
Claim settlementSame Solana slot
Withdrawal cooldown7 days
ChainSolana

Pact Network is currently onboarding agents and underwriters to testnet.

shield Get Early Access