Verification table and browser walkthrough

Historical snapshot. Sections 1–3 were recorded at commit 301157e (301157e799408343a48e28a05344d6c657f6e667), which the live site reported on 2026-10-09 13:01 UTC. The site has been redeployed since: the current commit is whatever https://imprest-chi.vercel.app/api/version reports. Later updates are dated sections below.

Evidence types:

• LOCAL: agent-executed tests on this machine.
• SCRIPT: agent-sent testnet transactions.
• BROWSER: the owner, in the live site.
• READ: chain state read by the agent.

1. Verification table

2. Browser walkthrough (owner)

Use the account you already have (0x976C…25fE); it holds testnet AUSD and MON. Gas figures are measured from your own earlier transactions at about 102 gwei. Monad charges the full gas limit, and the app sets that limit at 1.15× a simulated estimate. You approve each transaction with your passkey; nobody else needs your passkey or any key.

Flow A: re-check the closed-desk fixes (no transactions)

1. https://imprest-chi.vercel.app/app/desk: expect "Desk closed", 99.943818 AUSD returned,

−0.056182 AUSD net, Evaluation "(closed at this tier)", no Graduate button and no −100%.

1. https://imprest-chi.vercel.app/app/trade/btc: expect one message, "This desk is closed and settled",

and no risk meter, estimates or buy/sell button.

Flow B: a new desk, one small trade, direct (you pay gas)

Stop at any step. Before B2, the app's preview shows the stake. Before B3, it shows notional, margin, fee, and distance to the nearest limit.

Flow C: gasless trade (only after section 3 is done)

Flow D: graduation and claim in the browser

Only if a desk genuinely reaches +2% over two closed trades (graduation), or realized profit above its high-water mark (claim). The app shows progress on /app/desk and eligibility on /app/claims. Nobody should trade just to produce this.

3. Making the relayer public (needs your decision)

The relayer runs on your PC at localhost:8787, which the public website can't reach. Options:

1. Free and temporary: a Cloudflare quick tunnel from your PC. Run

cloudflared tunnel --url http://localhost:8787 (no account, no cost). It prints a https://…trycloudflare.com address. It works while your PC is on and that command runs; the address changes on every restart. I did not start it myself: opening a public entry point to your PC needs your explicit approval.

1. Permanent: host the relayer on a small server (Railway, Fly.io or a VPS; usually a few dollars a

month and an account in your name). It needs the relayer key in that server's environment.

Then, for either option:

• In Vercel → Project → Settings → Environment Variables, add NEXT_PUBLIC_RELAYER_URL set to the

HTTPS address, and redeploy (it is baked in at build time).

• Check: https://imprest-chi.vercel.app/status should show "Relayer: operational".
• The relayer wallet holds about 4.83 MON, enough for about 65 relayed trades. Abuse is limited: only

registered desks, valid trader signatures, simulation before sending, 20 intents per trader per minute (RELAYER_QUOTA_PER_TRADER_PER_MIN; lower it for a public relayer), and a gas cap.

4. Update 2026-10-12: owner walkthrough on desk 0x640a…5DBf

What the owner did in the live site (OBSERVED by the owner; transactions checked on Monadscan):

Claimable desks for wallet 0x976C…25fE (READ, second RPC rpc-testnet.monadinfra.com, block 70376530):

There is no genuinely profitable desk this wallet owns, so a browser profit claim cannot be performed today without new profitable trading. Nothing was traded or changed to manufacture one. Contract tests cover the claim instead (section 1, plus test_claim_zeroProfitRejected).

Fixes from this walkthrough (agent-executed tests at the commit that adds this section):

Still open:

• browser profit claim (needs genuine profit);
• browser graduation (needs +2% over 2 closed trades);
• browser gasless trading (needs a publicly hosted relayer);
• full hosted history (needs a hosted indexer);
• a real partial IOC fill observed in the browser;
• the five remaining phone tabs.

5. 2026-10-13: fixes for the 2026-10-12 external audit (IP-001 to IP-017)

All are code fixes with local tests. No transaction was sent, no accounting or threshold changed, and nothing was redeployed onchain.

Still open, and only genuine market conditions or the owner can close them: a qualifying profit claim in the browser, a new graduation, a real partial fill, a public relayer and indexer, native passkeys, and the demo video.

6. 2026-10-13: Railway relayer preparation and remaining gaps

Commit range 509fa84…d660c0f. Executors: agent-local, meaning tests or scripts on the agent's machine, with no transactions; and owner-browser, meaning the owner signs on the live site. No transaction was sent in this section.

Green CI does not establish a browser claim, graduation, gasless trade or phone behavior. Those rows stay open until the owner performs them and the transactions are recorded.

7. 2026-10-13: fixes for the second external audit (IP-018 to IP-024)

Code fixes with local tests; no transaction, deployment or accounting change.

Still open: native durable pending record across restarts (documented), public demo video, owner-verified portal rules, the hosted indexer, and any market-dependent live result (profit claim, live partial fill).