Skip to content

Harden/production readiness#1

Merged
mdlog merged 2 commits into
mainfrom
harden/production-readiness
Jul 1, 2026
Merged

Harden/production readiness#1
mdlog merged 2 commits into
mainfrom
harden/production-readiness

Conversation

@mdlog

@mdlog mdlog commented Jul 1, 2026

Copy link
Copy Markdown
Owner

No description provided.

mdlog added 2 commits July 1, 2026 23:20
- a11y: skip-to-content link, global :focus-visible ring, AA-contrast PropList meta
- copy buttons on every CodeBlock/StepFlow; ⌘K in-docs command-palette search
- SEO: metadataBase, per-page canonicals, sitemap, robots, OpenGraph image, JSON-LD
- CLI reference: config-flags table (all six flags); corrected `status` no-key output
- version badge in DocHeader + /docs/changelog; single-source role IA (sidebar == overview map)
- accuracy: fix AGENTGATE_MODE default contradictions, broken cross-links, SDK `invoice`→`requirements`
- real GitHub links in nav/footer (drop placeholders)
…ploy)

- F5(chain): verifyTransfer matches (target ∧ transfer_id) together; amount/age bind to that transfer
- F4(middleware): attest only on a real upstream response; gateway-level failures (unreachable/timeout) not scored
- F1(middleware): gateway wash-trade guard — a call paid by owner/paymentTarget is served but never scored
- F7(middleware): exponential-backoff attestation retries (default 4) replacing the single retry
- F2(middleware): FileInvoiceStore — invoices survive a restart, enabled via INVOICE_STORE_PATH
- F6(middleware): undici IP-pinning dispatcher closes the DNS-rebind TOCTOU in live mode (safe fallback)
- F3: scripts/smoke-live-read.ts read-path gate (npm run smoke:live) + DEPLOY.md checklist

No contract/ABI change — works against the deployed registry hash. +12 tests (341 total green).
@mdlog mdlog merged commit 4285a01 into main Jul 1, 2026
2 checks passed
mdlog added a commit that referenced this pull request Jul 2, 2026
Service #5 'RWA FX & Gold Oracle' registered on-chain with the hosted
gateway base and a floor-legal 2.5 CSPR price (register dbfdecbb...),
bought once end-to-end via 'agentgate buy' (payment d6cbfcab..., 2.5 CSPR,
settled ok) with the gateway attestation on-chain (23ddacf9..., references
the payment hash). Services #1/#2 (localhost endpoints) paused on-chain.

- all live-gateway examples: svc/1 -> svc/5, 402 samples show the real
  2500000000-motes invoice; buy one-liners drop --gateway (the on-chain
  endpoint is public now) and use --max 3
- live wrap examples model a floor-legal --price 2.5 (mock examples keep
  0.5 - the devnet has no floor)
- README deployed-addresses table gains the three #5 lifecycle rows
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant