Cofferline API

Costs $1, charged to the prepaid balance when funded, otherwise answered with standard x402 payment requirements — retry with the signed authorization in X-PAYMENT. The charge exists purely as spam friction; the resulting request appears in the public list at GET /v1/feedback. On the x402 path the fee settles on-chain first; a durable pending-settlement record (carrying this request's body) exists before anything is broadcast, so an interrupted submission converges on exactly one credit, one fee debit and one recorded request (202 = outcome pending, reconciled from chain truth).

Without an X-PAYMENT header this answers 402 with exact-scheme payment requirements for the requested amount. Retry with the signed transferWithAuthorization: it settles on-chain first (real USDC to the treasury), then credits — the authorization nonce guarantees a retry can never double-credit. A durable pending-settlement record exists before anything is broadcast, so an interrupted request converges on exactly one credit (202 = outcome pending, reconciled from chain truth).

Places a LIMIT order on Polymarket with your stored trade-scoped credential. The wallet's prediction_markets policy rules are enforced server-side with the ledger-derived exposure floor (#124) — an order the policy forbids is refused with the violated rule, never transmitted. Metered per order (base + bps) from the prepaid balance. Geo-gated (451); disabled environments answer EXECUTION_DISABLED. An operator can also switch off ONE venue platform-wide (#232): that answers EXECUTION_DISABLED naming the venue and the operator's reason, and affects only placement — cancels, cancel-all, open-order reads and fill sync keep working at a switched-off venue, so a position can always be exited.

The first half of the client-signed flow (#353), for Polymarket credentials you store WITHOUT a signer key. Runs every risk check the hosted route runs — jurisdiction, execution gates, the ledger-derived exposure floor (#124), your policy, the platform ceiling — then reserves the exposure and debits the fee on a durable 'prepared' order and returns the EXACT Polymarket V2 order struct plus its ready-to-sign EIP-712 payload. Sign `typed_data` with your own eth_signTypedData_v4 tooling (the same key that derived your stored CLOB creds) and POST the signature to /v1/pm/orders/submit before `expires_at`. If you never submit, the prepared order is swept and its hold + fee are released. Cofferline never receives your signer key.