Hold spans to an attribute convention the caller states, including per span kind

Hold spans to an attribute convention the caller states, including per span kind. The finding that matters most: a span name embedding an identifier. The name is the aggregation key, so a name per call means every call is its own operation and no latency distribution exists for it; identifiers belong in attributes. Also reports a required attribute absent, an attribute the contract forbids, reported by key and never by value, and an unrecognised span kind.

Paid test badge: not yet. The checks above are free: we call the tool without paying and read the payment request it sends back. The Verified badge needs paid calls whose answers match the promised output, and nobody can buy a badge.

Endpoint

POST https://api.zfinia.com/x402/v1/span-attribute-contract-audit

Our checks, last 30 days

Example input (from the provider)

{
  "body": {
    "contract": {
      "forbid_high_cardinality_names": true,
      "forbidden_attributes": [
        "http.request.header.authorization"
      ],
      "require_known_kind": true,
      "required_attributes": [
        "service.name"
      ],
      "required_by_kind": {
        "SPAN_KIND_CLIENT": [
          "db.system"
        ],
        "SPAN_KIND_SERVER": [
          "http.request.method",
          "http.route"
        ]
      }
    },
    "spans": "[\n {\n  \"trace_id\": \"t1\",\n  \"span_id\": \"a\",\n  \"name\": \"GET /orders\",\n  \"kind\": \"SPAN_KIND_SERVER\",\n  \"start_time\": \"2026-10-02T12:00:00.000Z\",\n  \"end_time\": \"2026-10-02T12:00:00.500Z\",\n  \"attributes\": {\n   \"http.request.method\": \"GET\",\n   \"http.route\": \"/orders\"\n  }\n },\n {\n  \"trace_id\": \"t1\",\n  \"span_id\": \"b\",\n  \"parent_span_id\": \"a\",\n  \"name\": \"SELECT orders\",\n  \"kind\": \"SPAN_KIND_CLIENT\",\n  \"start_time\": \"2026-10-02T11:59:59.960Z\",\n  \"end_time\": \"2026-10-02T12:00:00.200Z\",\n  \"attributes\": {}\n },\n {\n  \"trace_id\": \"t1\",\n  \"span_id\": \"c\",\n  \"parent_span_id\": \"zz\",\n  \"name\": \"cache.get\",\n  \"start_time\": \"2026-10-02T12:00:00.100Z\",\n  \"end_time\": \"2026-10-02T12:00:00.110Z\",\n  \"attributes\": {}\n },\n {\n  \"trace_id\": \"t2\",\n  \"span_id\": \"d\",\n  \"name\": \"GET /orders/8827341/items\",\n  \"kind\": \"HTTP_SERVER\",\n  \"start_time\": \"2026-10-02T12:00:01.000\",\n  \"end_time\": \"2026-10-02T12:00:01.300Z\",\n  \"attributes\": {\n   \"http.request.method\": \"GET\"\n  }\n }\n]"
  },
  "bodyType": "json",
  "method": "POST",
  "type": "http"
}

Promised output schema (from the provider)

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "input": {
      "additionalProperties": false,
      "properties": {
        "body": {
          "additionalProperties": false,
          "properties": {
            "contract": {
              "additionalProperties": false,
              "properties": {
                "forbid_high_cardinality_names": {
                  "type": "boolean"
                },
                "forbidden_attributes": {
                  "items": {
                    "maxLength": 256,
                    "type": "string"
                  },
                  "maxItems": 200,
                  "minItems": 1,
                  "type": "array"
                },
                "require_known_kind": {
                  "type": "boolean"
                },
                "required_attributes": {
                  "items": {
                    "maxLength": 256,
                    "type": "string"
                  },
                  "maxItems": 200,
                  "minItems": 1,
                  "type": "array"
                },
                "required_by_kind": {
                  "type": "object"
                }
              },
              "type": "object"
            },
            "spans": {
              "maxLength": 2097152,
              "type": "string"
            }
          },
          "required": [
            "spans",
            "contract"
          ],
          "type": "object"
        },
        "bodyType": {
          "enum": [
            "json",
            "form-data",
            "text"
          ],
          "type": "string"
        },
        "method": {
          "enum": [
            "POST"
          ],
          "type": "string"
        },
        "type": {
          "const": "http",
          "type": "string"
        }
      },
      "required": [
        "type",
        "method",
        "bodyType",
        "body"
      ],
      "type": "object"
    },
    "output": {
      "properties": {
        "example": {
          "type": "object"
        },
        "type": {
          "type": "string"
        }
      },
      "required": [
        "type"
      ],
      "type": "object"
    }
  },
  "required": [
    "input"
  ],
  "type": "object"
}

This page as JSON