Show the boundary.

Real refund transactions and a real queued AI job. External integrations are labeled separately.

REAL MAINNET PAYMENT · FINALIZED

0.5 NEAR → 1.861840 USDC.

Delivered to the approved wallet on Arbitrum One. The exact native NEAR source transfer, official signed 1Click order, source-to-destination mapping and finalized USDC Transfer were checked.

Recipient
0xa2c191561397c584ddad75388b5519e4931ef026

This is one separately approved demonstration. It is not an automatic payout for the AI report or a transfer from the NEAR testnet treasury.

NEAR transaction ↗ Arbitrum transaction ↗ Download both-chain evidence ↓

Reproduce verification

npm run mainnet:verify
# Recheck with pinned live RPC endpoints:
npm run mainnet:verify -- --online

Offline checks validate recorded RPC snapshots and the signed quote. Online verification queries both chains again. These are RPC observations, not bridge light-client proofs. The original rejected FunctionCall attempt remains preserved and disabled.

Evidence captured 2026-11-03T09:02:19.570Z. Viewing this page invokes no wallet, transfer or paid-model calls.

Four real model calls. One rejected quotation.

Background job: SUCCEEDED · Receipt signature: valid · Quality: CHALLENGED

The exact-source checker rejected a quotation even though model critique returned PASS. This report did not trigger a payout.

10 cumulative calls · ¥15.91 / ¥20 conservative reservation; not an invoice. All model reviewers share one provider/operator.

Download signed report

Rejected evidence

[
  {
    "worker": "sentinel-live",
    "issue": "claim-0:QUOTE_NOT_IN_PINNED_SOURCE"
  }
]

Challenge → arbitration → refund

Recorded testnet outcome: Closed · 0.001 testnet NEAR refunded.

exception-dispute.flashfirm-dev-0xcaptain888.testnet

Final transaction hashes

{
  "fund": "HosKhg3PmVZTj5XwqRD23DmAT2ySLnVFXEzmW278xQ9R",
  "propose": "9MQ3gj5YQSoPCiyCG5MVoBfYRbMV5pgxyg6D4pZNgEPf",
  "challenge": "DJWJccD5xUYGKTDHTyoXeXAm6Sazh2AoyordEoZgo2qs",
  "resolve": "HENeJnCVcowpTyW5MdfwKK1vmjNSDf1PuxRGWPphDBZk",
  "claim": "6pPQr3XDyb1bhHVVgkmASiPvqSnYe9yFnxwqWHP4WxYM"
}

Expired task → refund

Recorded testnet outcome: Closed · 0.001 testnet NEAR refunded.

exception-expiry2.flashfirm-dev-0xcaptain888.testnet

Final transaction hashes

{
  "fund": "8t8VBT4B1DMHLKDpGvezy36yGPQnS3qrFCyhP4N5exPF",
  "refund": "F8m6bx8tcLhL8NVCiww5Q8RdcewaB8e7kgGrB7k7pqxg",
  "claim": "5YQuBCt7TX3YSUfu7hXvkKod6bKth9Gq9UxcP9mXNV9q"
}

External integration readiness

Capability	Implemented	Still missing
Independent review	Account/key binding verification	Independent people and live onboarding
TEE	Nitro verifier; encrypted Phala TDX quotation worker and measured-Compose/RTMR3 checks	Real Phala public-task hardware/application proof recorded; OS/KMS/governance and confidential inference remain unverified
Cross-chain	Real 0.5 NEAR → Arbitrum native-USDC payment; signed quote, final source execution and finalized destination receipt	Automatic task-bound mainnet payouts and independently verified refunds; original FunctionCall wallet path stays disabled
Backend	Free public D1 workspace and verification workflow; separate local Node integration backend	Full Node integration hosting; organization auth, cloud restore drill and external alerts

Failed-transfer recovery is now verified on testnet: missing recipient → failed transfer → restored credit → recipient creation → successful retry. One earlier testnet deployment was interrupted and retained without replay. A separately approved native-NEAR mainnet demonstration is verified. It does not settle the AI report or move testnet treasury funds.

Full upgrade evidence Refund evidence Recovery transaction evidence