REPLAY / SIMULATION

Frozen protocol fixtures. No live transaction, AI attestation or physical verification is claimed.

Mode & demo role

Demo control room

Replay is a tool, not a disguise.

Select a recorded scenario, reset the fixture state or fast-forward the timeline. The mode banner stays visible everywhere: LIVE TESTNET, MAINNET (never selectable) or REPLAY / SIMULATION.

Current mode

REPLAY / SIMULATION

Frozen protocol fixtures. No live transaction, AI attestation or physical verification is claimed.

REPLAY

Mode selection

Three labels. One honest choice.

MAINNET is never selectable here. LIVE TESTNET requires a configured API and a successful health check. If either is missing, the app stays in replay.

No private key, API secret or signing material exists in this browser. No mainnet transaction can be initiated from this page.

TESTNET DEMO ROLE

Demo auth, not authentication

Store a role and testnet account for this tab. apiFetch forwards them as x-mend-role and x-mend-account only to the same-origin /api/mend/* proxy. The API must also have demo headers enabled.

NO DEMO ROLE
Selects which demo actor the API should evaluate. It is not a wallet and grants no real authority.
Must end in .testnet. Never enter a private key, seed phrase or mainnet account.
No demo role stored. API calls carry no role headers.
DEMO AUTH ONLY. These headers are trivially spoofable and are not production authentication. They are testnet-only, never a wallet signature, and must not be used to authorize real funds. No secret material belongs in this form.
Replay clock 10 Nov 2026 · 08:00 UTCREPLAY

Control: Replay idle. Select a scenario or fast-forward the recorded clock.

Recorded scenarios

10 narratives, no fabricated success

Each scenario links to a real replay case or a recorded transcript. “Run” only changes local presentation state; it never claims a live transaction.

protocol-v1 / fixtures-2026-11-10
PATHRecorded

Pothole repair — report to passport

A walletless report and a duplicate from the other side of the path merge into one work order. Private AI triage proposes the duplicate; a human steward confirms it. Three sealed bids reveal and deterministic scoring selects contractor B.

100 funded → 20 refunded → 72 completion → 8 holdback → CLOSED. Passport PATH-006 keeps the repair, evidence and payments attached.

potholeduplicatesealed bidsdurability passpassport
Open case
ARecorded

Successful repair

Two duplicate reports merge into one work order. Three sealed bids reveal, deterministic scoring selects contractor B, a human inspector accepts and the durability holdback releases.

100 funded → 20 refunded → 72 completion → 8 holdback → CLOSED. Exact accounting, same asset history.

duplicatesealed bidsOutLayerdurability pass
Open case
BRecorded

Failed durability and warranty reopening

The first repair passes completion but fails its later durability inspection. The original work order reopens instead of creating a fresh bounty.

No new escrow. Holdback stays held. The failure remains visible in the asset passport.

warrantyreopenno new funds
Open case
B2Recorded

Warranty remediation

Remediation evidence is submitted against the same work order and reviewed by a different inspector. Acceptance of remediation pays nothing.

Same work-order ID; later durability inspection must pass before the 8 USDC holdback can release.

remediationseparation of duties
Open case
DUPRecorded

Duplicate report acknowledgement

A walletless reporter uploads a photo. Private triage suggests a 94% duplicate match. The reporter must acknowledge the suggestion; a human steward confirms any merge.

No automatic merge. The reporter keeps a private case link and sees duplicate status.

walletlessEXIFredactiondeduplication
Open case
CRecorded

Disputed completion

An inspector rejects completion evidence and freezes the payout. AI cannot resolve the dispute or move money.

Funds frozen. Explicit human/DAO resolution required before any transition.

dispute freezehuman resolution
Open case
REFRecorded

Refund before award

A pre-award work order is cancelled and remaining escrow returns to the sponsor exactly once.

Refund is explicit and reconciled against funding. No double refund is possible.

refundescrow accounting
Open case
PIRecorded

Prompt-injection attack

A report body attempts to instruct the AI to change the payout account and mark work accepted.

Text remains untrusted data. No recipient, role, scope or payment rule changes. No key signs the requested action.

securityprompt injectionpolicy wrapper
DRecorded

Sponsorship uncertainty

A dry Intents quote is displayed with source asset, destination, fees and deposit instructions. Pending, underpayment, failure and refund states are handled honestly.

A quote is never converted into a claimed payment. Explorer links appear only for a real transaction hash.

Intentsdry quotefeesmainnet only
Open case
ERecorded

Judge replay

Every page runs from frozen protocol fixtures with no API credentials, no wallet and no network dependency.

REPLAY / SIMULATION is visible on every screen. No replay is presented as a live transaction.

offlinefixturesno wallet
Open case

Recorded artifacts

Judge replay without credentials

7 public work orders, 10 scenarios, deterministic fixture versioning and no network dependency.

Offline ready
Fixture version
protocol-v1 / fixtures-2026-11-10
Scenarios
10
Work orders
7
Live credentials
Not required

Replay cannot be mistaken for live state

The mode banner is sticky at the top of every page. Replay pages never show explorer links for transactions that do not exist, never claim a live AI attestation and never present a dry quote as a payment.

REPLAY / SIMULATION. Demo control room is replay-only unless a configured testnet API reports LIVE_TESTNET health. Demo role headers are session-only testnet demo auth, not authentication. MAINNET remains locked.