PATHRecorded
Pothole repair — report to passport
A walletless report and a duplicate from the other side of the path merge into one work order. Private AI triage proposes the duplicate; a human steward confirms it. Three sealed bids reveal and deterministic scoring selects contractor B.
100 funded → 20 refunded → 72 completion → 8 holdback → CLOSED. Passport PATH-006 keeps the repair, evidence and payments attached.
potholeduplicatesealed bidsdurability passpassport
ARecorded
Successful repair
Two duplicate reports merge into one work order. Three sealed bids reveal, deterministic scoring selects contractor B, a human inspector accepts and the durability holdback releases.
100 funded → 20 refunded → 72 completion → 8 holdback → CLOSED. Exact accounting, same asset history.
duplicatesealed bidsOutLayerdurability pass
BRecorded
Failed durability and warranty reopening
The first repair passes completion but fails its later durability inspection. The original work order reopens instead of creating a fresh bounty.
No new escrow. Holdback stays held. The failure remains visible in the asset passport.
warrantyreopenno new funds
B2Recorded
Remediation evidence is submitted against the same work order and reviewed by a different inspector. Acceptance of remediation pays nothing.
Same work-order ID; later durability inspection must pass before the 8 USDC holdback can release.
remediationseparation of duties
DUPRecorded
Duplicate report acknowledgement
A walletless reporter uploads a photo. Private triage suggests a 94% duplicate match. The reporter must acknowledge the suggestion; a human steward confirms any merge.
No automatic merge. The reporter keeps a private case link and sees duplicate status.
walletlessEXIFredactiondeduplication
CRecorded
Disputed completion
An inspector rejects completion evidence and freezes the payout. AI cannot resolve the dispute or move money.
Funds frozen. Explicit human/DAO resolution required before any transition.
dispute freezehuman resolution
REFRecorded
Refund before award
A pre-award work order is cancelled and remaining escrow returns to the sponsor exactly once.
Refund is explicit and reconciled against funding. No double refund is possible.
refundescrow accounting
PIRecorded
Prompt-injection attack
A report body attempts to instruct the AI to change the payout account and mark work accepted.
Text remains untrusted data. No recipient, role, scope or payment rule changes. No key signs the requested action.
securityprompt injectionpolicy wrapper
DRecorded
A dry Intents quote is displayed with source asset, destination, fees and deposit instructions. Pending, underpayment, failure and refund states are handled honestly.
A quote is never converted into a claimed payment. Explorer links appear only for a real transaction hash.
Intentsdry quotefeesmainnet only
ERecorded
Judge replay
Every page runs from frozen protocol fixtures with no API credentials, no wallet and no network dependency.
REPLAY / SIMULATION is visible on every screen. No replay is presented as a live transaction.
offlinefixturesno wallet