P1 release candidate · Arc Testnet

One controlled treasury payment, with every proof boundary visible.

This sanitized view separates completed local acceptance and live read-only provider checks from financial actions that have not yet been broadcast. It is a release-candidate case study, not a sponsor qualification claim.

Authority boundary

The model recommends. Privy identities sign. The API and vault enforce. Circle submits. Arc receipts decide settlement.

  1. Local acceptance

    Employee request and immutable revision

    The employee submits 3 USDC, receives a manager correction, and creates revision 2 for 2 USDC without rewriting revision 1.

    P0 role and revision acceptance · immutable commit b5665e6

  2. Live read-only check

    One Graph query, two lending protocols

    The same bounded query and normalizer compare the exact Compound v3 and Spark USDC markets; stale or incompatible evidence fails closed.

    Fresh provider readback passed on the current worktree · release-bound evidence pending

  3. Local acceptance

    Cited analysis and exact approval

    The report preserves source hashes, calculations, model usage, and its decision. The manager signs the exact revision, report hash, recipient, amount, policy version, and deadline.

    Schema-valid live report and P0 exact-signature flow · P1 release run pending

  4. Live action pending

    Privy-controlled 10 USDC funding

    The owner reviews a deposit-only signer policy before funding. A withdrawal probe must be rejected by Privy before broadcast.

    Exact-vault policy readback passed · no funding or withdrawal attempt broadcast

  5. Live action pending

    Circle execution on Arc Testnet

    The pinned Agent Stack CLI submits the approved 2 USDC payment and a separate 1 USDC automatic payment through the customer-owned vault.

    Executor identity readback passed · transaction submission intentionally pending

  6. Live action pending

    Receipt, denial, and duplicate-safe recovery

    Settlement requires a matching Arc receipt, vault Paid event, and USDC Transfer. A 2 USDC automatic request is rejected before Circle, and an uncertain submission recovers the same payment ID.

    Local unit, PostgreSQL, browser, and contract coverage passed · live transaction evidence pending