Encrypt plaintext with AES-256-GCM and return IV, ciphertext, and auth tag.
Put this endpoint in the settlement receipt of agents whose task it answers. You pay only when the recommendation converts on-chain.