Incentives app — shippability audit 2026-05-21

## Incentives app — shippability audit 2026-05-21

Audit of [kynesyslabs/incentives](<https://github.com/kynesyslabs/incentives>) for what ships soon vs what is blocked. Source: KYN-191. Audited via GitHub API on 2026-05-21 against `main` HEAD `435a731` (last touched 2026-01-22) and `dev` HEAD `3efa16a` (last touched 2026-05-19).

### Headline

**Dev is 55 commits ahead of main and 2 behind** — months of merged, reviewed work (Human Passport, Ethos, OAuth-based GitHub/Discord/Telegram, Community, Verify, Identity Management, seed-phrase wallet, TLSN hardening) is sitting on `dev` and is NOT live at [https://incentives.demos.sh](<https://incentives.demos.sh>). Cutting a `dev → main` release is by far the biggest shippability win.

### Repo state


| Area | Finding | Confidence |
| -- | -- | -- |
| Last 20 commits on main | Stops at 2026-01-22 (`435a731` "Merge PR #65 from dev"). Recent landings (Dec–Jan): Nomis integration, wallet-extension fixes, hide Telegram card, demosdk version bumps. | High |
| Dev vs main divergence | `dev` is **55 ahead, 2 behind**. Includes 8 merged PRs unshipped to main: #66 Human Passport, #68 Ethos, #70 OAuth+TLSN, #72 Community/Verify/Instructions, #73 Docker OAuth backend, #74 Ethos/HP visibility fixes, #75 seed-phrase wallet, #77 TLSN hardening (latest, 2026-05-19). | High |
| Open PRs | **2 open**. #76 "\[WIP\] Feature/identity cards" (Apr 16, 5,062 additions, untouched since Apr 20 — stale 31 days). #61 "ERC-8004 agent identity UI" (Jan 9, +862 LOC, last touched Mar 4 — stale 78 days). Base of both: `dev`. | High |
| Test coverage | **None.** `package.json` exposes only `dev`, `build`, `lint`, `preview`, `upgrade_sdk` — no test runner, no test files in tree. | High |
| CI | **None.** No `.github/workflows/` directory exists (404 from contents API). No automated checks gate merges. | High |
| Deploy mechanism | Manual: `deploy.sh` → `docker compose up -d --build`. No CD pipeline. `.firebaserc` references `testproject-a7a13` (legacy/unused for prod). Nginx-fronted Docker stack per #73. | High |
| Production ([incentives.demos.sh](<http://incentives.demos.sh>)) | HTTP 200, title `IDENTITY`. Asset bundle `index-BcOXEUJf.js` corresponds to a build of `main` (last push 2026-01-22). Cannot diff bundle to commit without local build. | Medium |

### Identity integration matrix

Confidence is per claim. "Shipped (main)" = present in main components/pages, therefore live. "Merged to dev" = code merged but not promoted to main → not live.


| Integration | Status | Evidence | Confidence |
| -- | -- | -- | -- |
| Nomis | **Shipped (main)** | `NomisIdentityCard.tsx` present on main; PR #58/#65 merged 2026-01-22. Error handling added in `28d38ae`. | High |
| Unstoppable Domains (UD) | **Shipped (main)** | `UnstoppableDomainCard.tsx` + `UDVerificationModal.tsx` on main; PRs #52/#53 merged Dec 2025. | High |
| GitHub / Discord identity | **Partial — gist-based shipped, OAuth on dev** | `GitHubCard`, `DiscordCard`, `*VerificationModal` exist on main (gist flow, PR #55 merged Dec 26 then revived). OAuth modals (`GitHubOAuthModal`, `DiscordOAuthModal`) only on dev (PR #70 merged Apr 2). | High |
| Telegram | **Hidden on main, OAuth flow on dev** | Card hidden via PR #62 on main (2026-01-19). `TelegramOAuthCard` / `TelegramOAuthModal` present on dev. | High |
| Twitter | **Shipped (main)** | `TwitterCard`, `TwitterConnectedCard`, `TwitterVerificationModal` on main. | High |
| Human Passport | **Merged to dev, not shipped** | `HumanPassportCard.tsx` on dev only; PR #66 merged 2026-04-09. Visibility fix PR #74 merged 2026-04-13. | High |
| Ethos (related identity card) | **Merged to dev, not shipped** | `EthosIdentityCard.tsx` on dev only; PR #68 merged 2026-04-09. | High |
| ERC-8004 agent identity | **Open PR, not merged** | PR #61, base `dev`, last touched 2026-03-04 (78 days stale). +862 LOC across `identity.ts`, `wallet.ts`, agent cards/modals. | High |
| Community / Verify | **Merged to dev, not shipped** | `Community.tsx`, `Verify.tsx`, `VerifyLink.tsx`, `VerifyProfile.tsx`, `Instructions.tsx`, `IdentityManagement.tsx` on dev; PR #72 merged 2026-03-03. | High |
| ZK Passport | **Not wired anywhere.** | No card, modal, or branch in repo. The original tracker [DEM-450](</DEM/issues/DEM-450>) is `Canceled`. | High |

### Open PRs — blocker analysis


| PR | Author | Age | Last activity | Blocker | Confidence |
| -- | -- | -- | -- | -- | -- |
| [#76](<https://github.com/kynesyslabs/incentives/pull/76>) Feature/identity cards | SergeyG-Solicy | 35d | 2026-04-20 | Marked `[WIP]`. 5,062 LOC across 26 files (3D identity cards, leaderboard carousel, indexer integration). No review activity since April. Needs WIP-removal + review pass. | High |
| [#61](<https://github.com/kynesyslabs/incentives/pull/61>) ERC-8004 agent identity | SergeyG-Solicy | 132d | 2026-03-04 | Heavily stale. Likely needs rebase onto current `dev` (now includes Ethos/HP/OAuth/TLSN). Original Qodo review present; no follow-up commits. | Medium |

### Top 3 items most ready to ship this week (ranked)

1. **Cut** `dev → main` **release (highest leverage, lowest risk).** Confidence: High. All 8 of these PRs are already reviewed and merged on dev: Human Passport, Ethos, GitHub/Discord/Telegram OAuth flow (#70), Community/Verify/Instructions/Identity Management (#72), Dockerized stateless OAuth backend (#73), Ethos/HP visibility fixes (#74), seed-phrase wallet (#75), TLSN identity flow hardening (#77 — fee gating, preflight, wallet auto-reconnect, latest 2026-05-19). One merge PR ships months of value to `incentives.demos.sh`. Action: open a `dev → main` PR, smoke-test the deploy script, run `deploy.sh`.
2. **PR #76 — Feature/identity cards (UI polish, isolated).** Confidence: Medium. UI-only (3D cards + carousel leaderboard + My Identity page). No backend dependency. Stale 5 weeks but not blocked. Action: ping SergeyG-Solicy to remove `[WIP]`, request review, merge to dev, include in the release cut.
3. **PR #61 — ERC-8004 agent identity UI.** Confidence: Medium. Net-new feature but isolated to identity surface. Closes the only remaining identity-integration line item with active code (ZK Passport is officially canceled per DEM-450). Action: rebase on current `dev`, address Qodo review, merge.

### Risks / gaps to flag

* **No CI, no tests, no CD.** Every release is a manual Docker compose on a server. A regression in the dev→main release will not be caught by automation. Mitigation: at least run `bun run build` + `bun run lint` locally before promoting.
* `.firebaserc` **references** `testproject-a7a13` but deploy is Docker/nginx. Either remove the stale firebase config or document the actual deployment target. Low priority.
* **Live** `<title>` **is** `IDENTITY` while the README/repo call this the "Incentives app". The rebrand is partly done (the deployed UI), partly not (repo name, README, deploy scripts). Worth a tracking ticket if rebrand is intentional.

### Related Linear context (not duplicated by this ticket)

* [DEM-695](</DEM/issues/DEM-695>) — Incentives/Identity app integration sweep (umbrella, Backlog)
* [DEM-703](</DEM/issues/DEM-703>) — Per-integration shipped-status audit (Nesy-Claude, Todo)
* [DEM-673](</DEM/issues/DEM-673>) — Incentives OAuth flow testing on deployment (In Progress)
* [DEM-651](</DEM/issues/DEM-651>) — Human Passport / Ethos issues on live site (In Review)
* [DEM-650](</DEM/issues/DEM-650>) — GitHub/Discord/Telegram issues on live site (Todo)

Source: [KYN-191](<https://paperclip.wedemos.com/KYN/issues/KYN-191>) (Nesy-Claude audit, 2026-05-21).

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Incentives app — shippability audit 2026-05-21 #841