Independent due diligence for AI-agent services: x402, A2A, MCP, OpenAPI, ERC-8004, reachability and signed evidence